denandz

KeeFarce

Extracts passwords from a KeePass 2.x database, directly from memory.

sourcemapper

Extract JavaScript source trees from Sourcemap files

fuzzotron

A TCP/UDP based network daemon fuzzer

glorp

A CLI-based HTTP intercept and replay proxy

lpc_sniffer_tpm

A low pin count sniffer for ICEStick - targeting TPM chips

SecretServerSecretStealer

Powershell script that decrypts the data stored within a Thycotic Secret Server

libmutator

A C library for mutating test cases

OpManager-Decrypter

Some simple scripts for decrypting passwords retrieved from a Manage Engine OpManager installation

5am_util

A utility for reading/writing Magneti Marelli IAW5AM firmware

cmtscrack

Cracker for DOCSIS CMTSMICs

GWT-Penetration-Testing-Toolset

A set of tools made to assist in penetration testing GWT applications. Additional details about these tools can be found on my OWASP Appsec DC slides available here: http://www.owasp.org/images/7/77/Attacking_Google_Web_Toolkit.ppt

authorative

An authenticating reverse proxy with TOTP support

ZTCrack

A proof-of-concept Zerotier identity generator in CUDA

4AGE-Intake-Parts

Velocity stacks and adapter plates for 4AGE ITB engines

password-store

Read-only mirror of https://git.zx2c4.com/password-store - https://www.passwordstore.org/ . Pull requests and issues on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes is via the mailing list; see https://lists.zx2c4.com/mailman/listinfo/password-store .

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pencode

Complex payload encoder

RequestAADRefreshToken

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

SmolWeldingTable

A smol (550x1200) welding table for 16mm-50x50 grid fixture tooling

ffuf

Fast web fuzzer written in Go

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

SysWhispers2

AV/EDR evasion via direct system calls.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters