missfjane

awesome

😎 Awesome lists about all kinds of interesting topics

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sherlock

Hunt down social media accounts by username across social networks

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

radare2

UNIX-like reverse engineering framework and command-line toolset

zaproxy

The ZAP core project

awesome-honeypots

an awesome list of honeypot resources

ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

evercookie

Produces persistent, respawning "super" cookies in a browser, abusing over a dozen techniques. Its goal is to identify users after they've removed standard cookies and other privacy data such as Flash cookies (LSOs), HTML5 storage, SilverLight storage, and others.

SocialFish

Phishing Tool & Information Collector

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

bashbunny-payloads

The Official Bash Bunny Payload Repository

BeRoot

Privilege Escalation Project - Windows / Linux / Mac

Reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

JAWS

JAWS - Just Another Windows (Enum) Script

viper

Binary analysis and management framework

dostackbufferoverflowgood

peepdf

Powerful Python tool to analyze PDF documents

zsteg

detect stegano-hidden data in PNG & BMP

conpot

ICS/SCADA honeypot

XSS-Payloads

This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XSS scanners as well.

leviathan

wide range mass audit toolkit

dionaea

Home of the dionaea honeypot

malware-sample-library

Malware sample library.

poodle-PoC

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

TrickBot-Toolkit

A collection of tools for dealing with TrickBot

BEAST-PoC

:muscle: Proof Of Concept of the BEAST attack against SSL/TLS CVE-2011-3389 :muscle:

ransomware-decryptors

Ransomware Decryptors