gorlami-salami

cors-poc

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

GadgetProbe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

zgrab2

Fast Go Application Scanner

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

SSRFTest

SSRF testing tool

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

qutebrowser

A keyboard-driven, vim-like browser based on Python and Qt.

python-qutescript

Painless userscripts for qutebrowser.

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

wesng

Windows Exploit Suggester - Next Generation

WindowsExploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

yabai

A tiling window manager for macOS based on binary space partitioning

nibar

Simple Übersicht status bar with yabai support.