nongiach

burp-radamsa

Radamsa fuzzer extension for Burp Suite

AllTools

All reasonably stable tools

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Sherlock

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

rdpy

Remote Desktop Protocol in Twisted Python

credgrap_ie_edge

Extract stored credentials from Internet Explorer and Edge

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

UniFI-Dlink-DIR-615

Dlink DIR 615 Exploit

Defeating-PHP-GD-imagecreatefromgif

Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()

rtfm

Cheat sheet and notes inspired by the book RTFM - Red Team Field Manual

moflow

Diggy

Extract endpoints from apk files.

ni

magic_gadget_finder

Unravels any libcs magic for your ret2libc exploit.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

neural-fuzzer

GOATCasino

This is an intentionally vulnerable smart contract truffle deployment aimed at allowing those interested in smart contract security to exploit a wide variety of issues in a safe environment.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

darknet

Convolutional Neural Networks

huepy

Print awesomely in terminals.

dockerfiles

Various Dockerfiles I use on the desktop and on servers.

binctr

Fully static, unprivileged, self-contained, containers as executable binaries.

nots_kernel

following along tutorials here is a draft of the kernel

IPv6

Playing with IPv6 for fun and profit

pyrebox

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

XSStrike

Most advanced XSS scanner.

clize

CLIze: Turn Python functions into command-line interfaces

mypy

Optional static typing for Python

docker-firmadyne

Docker image containing the tools for firmaware analysis from firmadyne

buildroot

Buildroot, making embedded Linux easy. Note that this is not the official repository, but only a mirror. The official Git repository is at https://gitlab.com/buildroot.org/buildroot/. Do not open issues or file pull requests here.