h4rdx0

BadPDF-Generator

How-To-Secure-A-Linux-Server

An evolving how-to guide for securing a Linux server.

penetration-testing-cheat-sheet

Work in progress...

wifi-penetration-testing-cheat-sheet

Work in progress...

KubeStalk

KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Nmap-For-Pentester

This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap."

mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages

knowsmore

KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.

deadfinder

🏴‍☠️ Find dead-links (broken links)

JAWS

JAWS - Just Another Windows (Enum) Script

GraphCrawler

GraphQL automated security testing toolkit

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

Cloud-Security-Attacks

Azure and AWS Attacks

PrintSpoofer

Abusing impersonation privileges through the "Printer Bug"

CVE-2019-1388

CVE-2019-1388 UAC提权 (nt authority\system)

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

evil-winrm

The ultimate WinRM shell for hacking/pentesting

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities.

CVE-Search-Docker

Docker Image for CVE-Search

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

smbeagle

SMBeagle - Fileshare auditing tool.

Astra

Automated Security Testing For REST API's

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.