luanjampa

cve-2016-0701

bbqsql

SQL Injection Exploitation Tool

Dshell

Dshell is a network forensic analysis framework.

awesome

:sunglasses: Curated list of awesome lists

cloc

cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.

codewarrior

code-searching tool and static analysis - Beta, at construction

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS infrastructure.

deephack

deephack

DevopsWiki

A wiki of Devops Tools, Tutorials and Scripts

IPED

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners.

jexboss

JexBoss: Jboss verify and EXploitation Tool

laravel

linux.mirai

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

mitmAP

A python program, to create a fake AP, and sniff data.

Mobile-Security-Framework-MobSF

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥

Mosca

Static analysis tool to find bugs like a grep unix command

owasp-jsp

OWASP from A1-A10 on Java

phpstan

PHP Static Analysis Tool - discover bugs in your code without running it!

pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

reverse-engineering-tutorials

Reverse Engineering Tutorials

secDevLabs

A laboratory for learning secure web development in a practical manner.

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

SeparatorFiles

Tools for separate files por directorys,thus minimizing the use of memory.

testcode

webshell

This is a webshell open source project

Wordpress-XMLRPC-Brute-Force-Exploit

Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield