existentializm

AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

android-security-awesome

A collection of android security related resources

badchars

Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

CVE-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

docs.tryhackme.com

TryHackMe documentation site source code

External-Pentest-Checklist

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

InjuredAndroid

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

OSCE-Complete-Guide

OSWE, OSEP, OSED

OSCP-Exam-Report-Template

Modified template for the OSCP Exam and Labs. Used during my passing attempt

osx-and-ios-security-awesome

OSX and iOS related security tools

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

PetitPotam

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwndb

Search for leaked credentials

Pyrit

The famous WPA precomputed cracker, Migrated from Google.

recon-ng-marketplace

Official module repository for the Recon-ng Framework.

routerkeygenPC

Qt Port for Linux, Mac OSX and Windows

Scavenger

Crawler (Bot) searching for credential leaks on paste sites.

slack-github-issue-creator

Wouldn't it be cool to automate the process of creating Github issues directly from Slack messages?

sql-injection-payload-list

🎯 SQL Injection Payload List

thc-ipv6

IPv6 attack toolkit

WebMap

WebMap-Nmap Web Dashboard and Reporting

weird_proxies

Reverse proxies cheatsheet