maziland

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

Embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web

open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

php_filter_chain_generator

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

linux-crt

CreateRemoteThread for Linux

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

InfinityHook

Hook system calls, context switches, page faults and more.

GOAD

game of active directory

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

ThreadlessInject

Threadless Process Injection using remote function hooking.

FlightSimulator

SubDomz

An Automated Subdomain Enumeration Tool

usvisa-il-app

Check and schedule visa appointments in the Israeli embassy site

pyWhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

pivotnacci

A tool to make socks connections through HTTP agents

drawio

draw.io is a JavaScript, client-side editor for general diagramming.

Redeye

Redeye is a tool intended to help you manage your data during a pentest operation

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

PVT

PCAP visualization tool

toxssin

An XSS exploitation command-line interface and payload generator.

PoC

Advisories, proof of concept files and exploits that have been made public by @pedrib.

awesome-vulnerable-apps

Awesome Vulnerable Applications

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments