alexxsstar

ADSpider

Monitor changes in Active Directory with replication metadata

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

pypykatz

Mimikatz implementation in pure Python

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

efiXplorer

IDA plugin for UEFI firmware analysis and reverse engineering automation

Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

mimikatz

A little tool to play with Windows security

reversednsscaner

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

server

Hashtopolis - distributed password cracking with Hashcat

firmware-security-training

IOMFB_integer_overflow_poc

project-based-learning

Curated list of project-based tutorials

CVE-2021-3156

Root shell PoC for CVE-2021-3156

CTF-pwn-tips

Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

Depix

Recovers passwords from pixelized screenshots

LazyIDA

Make your IDA Lazy!

VulnFanatic

A Binary Ninja plugin for vulnerability research.

superion-mutator

Superion Mutator for AFLPlusPlus

DIE

Fuzzing JavaScript Engines with Aspect-preserving Mutation

CVE-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

antianalysis_demos

Set of antianalysis techniques found in malware

WindowsExploitationResources

Resources for Windows exploit development

python-afl

American Fuzzy Lop fork server and instrumentation for pure-Python code

fuzzilli

A JavaScript Engine Fuzzer