devnul

kutt

Free Modern URL Shortener.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

IntruderPayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

amass

In-depth attack surface mapping and asset discovery

faceswap

Deepfakes Software For All

proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

pentesting

Beginner-Network-Pentesting

Notes for Beginner Network Pentesting Course

Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

stuff-org

Organize electronic components. Or other stuff.