ls4cfk

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

nativefier

Make any web page a desktop application

cli

🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

katana

A next-generation crawling and spidering framework.

yakit

Cyber Security ALL-IN-ONE Platform

apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

one_gadget

The best tool for finding one gadget RCE in libc.so.6

weird_proxies

Reverse proxies cheatsheet

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

mapcidr

Utility program to perform multiple operations for a given subnet/CIDR ranges.

damn-vulnerable-defi

The offensive security playground for the decentralized finances.

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

damn-vulnerable-defi

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

hbctool

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

beanshooter

JMX enumeration and attacking tool.

react-native-decompiler

Decompile React Native Android/IOS Bundle.

request_smuggler

Http request smuggling vulnerability scanner

CVE-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

mkpath

Make URL path combinations using a wordlist

jwt-reauth

Snowflake

Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.

Sapito

A mDNS sniffer and interpreter.

burp-browser-profiles

Make better use of the embedded browser that comes by default with Burp

PHDays9

My fuzzing workshop from PHDays9