myst404

JSpector

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

dumpit-linux

Memory acquisition for Linux that makes sense.

Forensike

Remotely dump NT hashes through Windows Crash dumps

CVE-2024-26229-exploit

Windows LPE

CVE-2024-29849

Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)

burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

raspap-webgui

Simple wireless AP setup & management for Debian-based devices

DLLirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

PyRIT

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems.

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

ydotool

Generic command-line automation tool (no X!)

gontlm-proxy

NTLM Proxy Forwarder

refreshing-mcp-tool

An implementation of F5's `mcp` protocol, including MitM tooling to sniff traffic while vuln hunting

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

weird_proxies

Reverse proxies cheatsheet

germy

GERMY is a Linux Kernel n-day in the N_GSM line discipline

burp-piper

Piper Burp Suite Extender plugin

burpscript

Invoke-RunAsWithCert

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

webwrap

🌯 Give me a web shell, I'll give you a terminal.

GitFive

🐙 Track down GitHub users.

fuegoshell

Fuegoshell is a powershell oneliner generator for Windows remote shell re-using TCP 445

misconfig-mapper

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

DLHell

Local & remote Windows DLL Proxying

sprayhound

Password spraying tool and Bloodhound integration

CortexVortex

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

EIPP

Entra ID Password Protection Banned Password Lists

lsa-whisperer

Tools for interacting with authentication packages using their individual message protocols