michalkoczwara

DevSecOps-Studio

Virtual environment for learning DevSecOps

arpspoof

Python clone of arpspoof that can poison hosts via arp-requests as well as arp-replies

aws-extender

blue-team

Blue Team Scripts

blueborne

PoC scripts demonstrating the BlueBorne vulnerabilities

bluebox-ng

Pentesting framework using Node.js powers. Specially focused in VoIP/UC.

bypass_waf

waf自动爆破(绕过)工具

capsule8

Capsule8: open-source cloud-native behavioral security monitoring

DetectionLab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dockerscan

Docker security analysis & hacking tools

dvna

Damn Vulnerable NodeJS Application

engine

Droidefense: Advance Android Malware Analysis Framework

fibratus

Tool for exploration and tracing of the Windows kernel

GoogD0rker

GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.

govwa

HttpPwnly

"Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS

intrigue-core

Identify your attack surface!

Invoke-PSImage

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

kernelpop

kernel privilege escalation enumeration and exploitation framework

keylogger-1

:closed_lock_with_key: Python Keyloggers Collection

makin

makin - reveal anti-debugging tricks

metasploit-framework

Metasploit Framework

mimiDbg

PowerShell oneliner to retrieve wdigest passwords from the memory

nishang

Nishang - PowerShell for penetration testing and offensive security.

phishing_catcher

Phishing catcher using Certstream

react-tetris

Use React, Redux, Immutable to code Tetris.

SecGen

Create randomly insecure VMs

sg1

A wanna be swiss army knife for data encryption, exfiltration and covert communication.

uncaptcha

Defeating Google's audio reCaptcha with 85% accuracy.