habib26-14

winamp

Iconic media player

mkbsd

Download all the wallpapers in MKBHD's "Panels" app

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

subsurface

This is the official upstream of the Subsurface divelog program

bypass-paywalls-firefox-clean

noseyparker

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

CyberScraper-2077

A Powerful web scraper powered by LLM | OpenAI, Gemini & Ollama

recaptcha-phish

Phishing with a fake reCAPTCHA

hookchain

HookChain: A new perspective for Bypassing EDR Solutions

kxss

This a adaption of tomnomnom's kxss tool with a different output format

PentestingEverything

Penetration Testing For - Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting, etc...

BEAR

Bear C2 is a compilation of C2 scripts, payloads, and stagers used in simulated attacks by Russian APT groups, Bear features a variety of encryption methods, including AES, XOR, DES, TLS, RC4, RSA and ChaCha to secure communication between the payload and the operator machine.

NyxInvoke

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

web3-security-resources

The Web3 Security Resources Hub is a comprehensive collection of curated tools, guides, and best practices for securing decentralized systems and smart contracts in the blockchain space.

TARS

Using Agents To Automate Pentesting

NetExec-Lab

Lab used for workshop and CTF

DGPOEdit

Disconnected GPO Editor - A Group Policy Manager launcher to allow editing of domain GPOs from non-domain joined machines

LazyXss

Automation tool to testing and confirm the xss vulnerability.

SpideyX

SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.

Bypass-Four03

Bypass-Four03 is a powerful bash tool designed to help testers bypass HTTP 403 forbidden errors through various path and header manipulation techniques. It also includes fuzzing for HTTP methods and protocol versions, making it a versatile addition to any web security researcher's toolkit.

Recursive-Loader

Recursive Loader

GhidraScripts

Scripts to run within Ghidra, maintained by the Trellix ARC team

SquatSquasher

Discovering Typo Squatting on your domains!

dork

kcmdump

Dump Kerberos tickets from the KCM database of SSSD

zipslipper

Create tar/zip archives that try to exploit zipslip vulnerability.

positions-vacant

Vacant Positions at Sigma Prime

AD-Tools

List of some AD tools I frequently use

my-oneliners