frank-leitner

factorio-sites

A mono repo for the factorio-blueprints project.

hashes

Magic hashes – PHP hash "collisions"

smtp4dev

smtp4dev - the fake smtp email server for development and testing

LaZagne

Credentials recovery project

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

forward-shell

legion

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and exploitation of information systems.

ffuf

Fast web fuzzer written in Go

ILSpy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

dnSpy

.NET debugger and assembly editor

lsyncd

Lsyncd (Live Syncing Daemon) synchronizes local directories with remote targets

genie

A quick way into a systemd "bottle" for WSL

bash-it

A community Bash framework.

bashdot

Minimalist dotfile management framework.

git-clone-init

Automatic setup of user identity (user.email / user.name) on git clone

wfuzz

Web application fuzzer

liffy

Local file inclusion exploitation tool

pull

🤖 Keep your forks up-to-date via automated PRs

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

ruby-shells

Simple forward and reverse shells that can be compiled and used on pen tests to avoid AV and used to get better access.

WHP

Micro$oft Windows Hacking Pack

Vanquish

Vanquish is Kali Linux based Enumeration Orchestrator. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases.

SharpUp

SharpUp is a C# port of various PowerUp functionality.

golismero

GoLismero - The Web Knife

pwndoc

Pentest Report Generator

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.