frank-leitner

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

dnSpy

.NET debugger and assembly editor

ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

bash-it

A community Bash framework.

ffuf

Fast web fuzzer written in Go

LaZagne

Credentials recovery project

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

pull

🤖 Keep your forks up-to-date via automated PRs

wfuzz

Web application fuzzer

lsyncd

Lsyncd (Live Syncing Daemon) synchronizes local directories with remote targets

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

smtp4dev

smtp4dev - the fake smtp email server for development and testing

pwndoc

Pentest Report Generator

genie

A quick way into a systemd "bottle" for WSL

SharpUp

SharpUp is a C# port of various PowerUp functionality.

legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

golismero

GoLismero - The Web Knife

liffy

Local file inclusion exploitation tool

hashes

Magic hashes – PHP hash "collisions"

WHP

Micro$oft Windows Hacking Pack

Vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

git-clone-init

Automatic setup of user identity (user.email / user.name) on git clone

forward-shell

bashdot

Minimalist dotfile management framework.

ruby-shells

Simple forward and reverse shells that can be compiled and used on pen tests to avoid AV and used to get better access.

factorio-sites

A mono repo for the factorio-blueprints project.