dbeef

nvm

Node Version Manager - POSIX-compliant bash script to manage multiple active node.js versions

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

radare2

UNIX-like reverse engineering framework and command-line toolset

upx

UPX - the Ultimate Packer for eXecutables

gping

Ping, but with a graph

english-words

:memo: A text file containing 479k English words for all your dictionary/word-based projects e.g: auto-completion / autosuggestion

beef

The Browser Exploitation Framework Project

progress

Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)

ctf-tools

Some setup scripts for security research tools.

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

smali

smali/baksmali

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

collisions

Hash collisions and exploitations

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

wordlists

📜 A collection of wordlists for many different usages

apk-editor-studio

Powerful yet easy to use APK editor for PC and Mac.

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

TOP

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

JSshell

JSshell - JavaScript reverse/remote shell

awesome-electronjs-hacking

A curated list of awesome resources about Electron.js (in)security

scrabble

Simple tool to recover .git folder from remote server

JSShell

An interactive multi-user web JS shell

chip

a simple tool to detect potential security threat in php code

php-malware-finder

pwn-notes

My notes on pwn

sstv

SSTV Decoder

spelunky-psp

Spelunky remake for Sony PSP.

cd-extras

superpowers for the Powershell `cd` command⚡