kmmanoj

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

Personal-Tracker

snips-nlu

Snips Python library to extract meaning from text

Keylogger

A simple keylogger for Windows, Linux and Mac

Trapheus

This tool automates restoration of RDS database instances from snapshots into any dev, staging or production environments. It supports individual RDS Snapshot as well as cluster snapshot restore operations.

wfuzz

Web application fuzzer

jsHELL

Execute javascript in browser from terminal.

RBHC

This project implements machine learning to accomplish recursive binary hierarchical clustering of data primarily useful for any clickstream data along with providing cluster statistics for each cluster and visualization using d3js

minimalist-portfolio

A simple minimalist one page portfolio. Link:

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

RE101in20min

Slides for Reverse Engineering 101 in 20 minutes as presented at Pancakes Con

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

cowrie

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

Dr0p1t-Framework

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

flare-floss

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

SlackPirate

Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace

SSRFmap

Automatic SSRF fuzzer and exploitation tool

Sn1per

Attack Surface Management Platform

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

Astra

Automated Security Testing For REST API's

osmedeus

A Workflow Engine for Offensive Security

dirsearch

Web path scanner

monkey

Infection Monkey - An open-source adversary emulation platform

AutoSploit

Automated Mass Exploiter

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.