marcogallen

hydra_notes

Some notes about Hydra for bruteforcing

wfuzz

Web application fuzzer

XSRFProbe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

organic-sphere

CBDJS

Tool for designing end-grain cutting boards

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

laser

Repo for files relating to my laser cutting exploits

gtfo

Search gtfobins and lolbas files from your terminal

aussieplusplus

Programming language from down under

wordlists

Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.

sherlock

Hunt down social media accounts by username across social networks

static-binaries

Various *nix tools built as statically-linked binaries

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

homebrew-pentest

Homebrew Tap - Pen Test Tools

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

OWASP-Web-Checklist

OWASP Web Application Security Testing Checklist

Bug-bounty

Ressources for bug bounty hunting

Checklists

Red Teaming & Pentesting checklists for various engagements

metasploit-framework

Metasploit Framework

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

RsaCtfTool

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

hash-identifier

Software to identify the different types of hashes used to encrypt data and especially passwords

IpByGeo

Search for IPs by Geolocation Range

pwncat

Fancy reverse and bind shell handler

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

SecurityTesting

tbhm

The Bug Hunters Methodology