nebelschwaden

sherlock

Hunt down social media accounts by username across social networks

ghidra

Ghidra is a software reverse engineering (SRE) framework

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

RustScan

🤖 The Modern Port Scanner 🤖

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

impacket

Impacket is a collection of Python classes for working with network protocols.

zaproxy

The ZAP by Checkmarx Core project

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

gobuster

Directory/File, DNS and VHost busting tool written in Go

how2heap

A repository for learning various heap exploitation techniques.

WebGoat

WebGoat is a deliberately insecure application

Infosec_Reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

google-ctf

Google CTF

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

pwncat

Fancy reverse and bind shell handler

nightmare

HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

exploitation-course

Offensive Software Exploitation Course

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

scripthunter

Tool to find JavaScript files on Websites

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

spring-view-manipulation

When MVC magic turns black

auth-jwt

A demo to learn JWT by reverse engineering

urlprobe

Urls status code & content length checker

All-in-one_BugBounty_PDF_bundles

bugbounty-resources

serval

A Netcat-style backdoor for pentesting and pentest exercises