d4rkr0o

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

PowerShell

PowerShell for every system!

ipwndfu

open-source jailbreaking tool for many iOS devices

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

class-dump

Generate Objective-C headers from Mach-O files.

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

Dwarf

Full featured multi arch/os debugger built on top of PyQt5 and frida

SerializationDumper

A tool to dump Java serialization streams in a more human readable form.

CheckPlease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

Invoke-CradleCrafter

PowerShell Remote Download Cradle Generator & Obfuscator

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

exploits

Some of my exploits.

arlo

Python module for interacting with Netgear's Arlo camera system.

snitch

information gathering via dorks

awesome-windows-security

List of Awesome Windows Security Resources

trudy

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

CVE-2019-0192

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

RCEScanner

Simple python script to extract unsafe functions from php projects

adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

Swift-Apps-Reverse-Engineering

Swift Apps Reverse Engineering reading book

AWS-Scanner

Scans a list of websites for Cloudfront or S3 Buckets

bluekeep-exploit

Bluekeep(CVE 2019-0708) exploit released

rmi-deserialization

Slides/Demos from the BSides Munich 2019 talk "Attacking Java RMI in 2019"

SCWF

CTF tool for identifying, brute forcing and decoding encryption schemes in an automated way

jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

canape-workshop2018

Material from our CANAPE workshop

bridgit

prolint

Tool for automated source code review of Progress 4GL (OpenEdge ABL) code

52-technologies-in-2016

Let's learn a new technology every week. A new technology blog every Sunday in 2016.

dotCMSTokenGenerator

PoC JWT Token Generator, written by Timo Müller