mcdxn

advisories

Atredis Partners Security Advisories

Amass

In-depth Attack Surface Mapping and Asset Discovery

aquatone

A Tool for Domain Flyovers

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

eviloffice

Inject Macro and DDE code into Excel and Word documents (reverse shell)

ffuf

Fast web fuzzer written in Go

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gdb-dashboard

Modular visual interface for GDB in Python

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

HostHunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

justctf-2019

justCTF 2019 challenges sources

koadic

Koadic C3 COM Command & Control - JScript RAT

mcdxn.github.io

openlibrary

One webpage for every book ever published!

osx-re-101

A collection of resources for OSX/iOS reverse engineering.

papers

Papers about known hacking, security, hardware, software, computer, network and other ressources.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

pwntools

CTF framework and exploit development library

r00kie-kr00kie

PoC exploit for the CVE-2019-15126 kr00k vulnerability

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Sharp-Suite

My musings with C#

SSRFTest

SSRF testing tool

STL

MSVC's implementation of the C++ Standard Library.

SystemToken

Steal privileged token to obtain SYSTEM shell

the-magic-carpet-ride-a-whole-new-world

For testing netlify

thegreatsuspender

A chrome extension for suspending all tabs to free up memory

UACME

Defeating Windows User Account Control

VSCELicense

PowerShell module to get and set Visual Studio Community Edition license expiration date in the registry

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.