korgull

kiterunner

Contextual Content Discovery Tool

prisma

Next-generation ORM for Node.js & TypeScript | PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, MongoDB and CockroachDB

OneForAll

OneForAll是一款功能强大的子域收集工具

ffuf

Fast web fuzzer written in Go

nmap-query-xml

A simple program to query nmap xml files in the terminal.

OffensivePipeline

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

Offsec-Exam-Cheatsheet

Offsec$xamNotes

weevely3

Weaponized web shell

openhaystack

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Arjun

HTTP parameter discovery suite.

AEM-List

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Win10-Initial-Setup-Script

PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019

peirates

Peirates - Kubernetes Penetration Testing tool

Red_Team

Some scripts useful for red team activities

SAMLRaider

SAML2 Burp Extension

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

PowerStripper

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

untappdScraper

Script to scrape untappd.com content

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Bogus

:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

cyberstationFX

A desktop App to add STIX-2 objects to TAXII-2.0 servers

HackBar

HackBar plugin for Burpsuite