frenchbeard

algo

Set up a personal VPN in the cloud

vim-galore

:mortar_board: All things Vim!

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

DependencyCheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Privilege-Escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

osxcollector

A forensic evidence collection & analysis toolkit for OS X

ctftool

Interactive CTF Exploration Tool

windows-docker-machine

Work with Windows containers and LCOW on Mac/Linux/Windows

Hack-SpaceVim

🚀 Tell you how to hack SpaceVim. Be useful. Try Discussions!

MCIR

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

USG

The USG is Good, not Bad

sheepl

Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments

scavenger

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.

SharpCompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

nitrokey-app

Nitrokey's Application (Win, Linux, Mac)

SCALe

SCALe (Source Code Analysis Lab) is a static analysis aggregator/correlator which enables a source code analyst to combine static analysis results from multiple tools into one interface, and also provides mappings for diagnostics from the tools to the SEI CERT Secure Coding standards.

ikeforce

CryptOMG

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

cribdrag

cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys

youzer

Fake User Generator for Active Directory Environments

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.

Airachnid-Burp-Extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

cve_server

Simple REST-style web service for the CVE searching

burplay

Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.

xssizer

The best tool to find and prove XSS flaws.

sink-logger

Transparently log all data passed into known JavaScript sinks - Sink Logger extension for Burp.

OWASP-CRS-Documentation

Documentation for the OWASP CRS project

oracle_pwd_tools

Oracle Database 12c password brute forcer

secrules-language-tests

Set of test cases that can be used to test custom implementations of the SecRules language (ModSecurity rules format).