pich4ya

aart

Vulnerable Web App - your server will be at risk if it is deployed

Hack-me-bot

Vulnerable Line bot for demonstration and education

project-rich

Vulnerable Web App - your server will be at risk if it is deployed

ADAPE-Script

Active Directory Assessment and Privilege Escalation Script

backup-fuzzer

File Backup Fuzzer

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

credssp

A code demonstrating CVE-2018-0886

cve-2022-42475

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

electron-builder

A complete solution to package and build a ready for distribution Electron app with “auto update” support out of the box

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gdog

A fully featured Windows backdoor that uses Gmail as a C&C server

HUNT

IntruderPayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

Invoke-Obfuscation

PowerShell Obfuscator

J2EEScan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

metasploit-framework

Metasploit Framework

metasploit-vps-installer

Metasploit installer for Debian (Jessie) VPS.

ms-teams-rce

oas

ระบบบัญชีออนไลน์ Online Accounting System (OAS)

openvas-docker

A Docker container for Openvas

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

pwn-xinetd

Yet another xinetd docker used to build pwnable challenges.

railsgoat

A vulnerable version of Rails that follows the OWASP Top 10

sourcemapper

Extract JavaScript source trees from Sourcemap files

Top10

Official OWASP Top 10 Document Repository

WebGoat.NET

OWASP WebGoat.NET

webnuke

A weird and wonderful console based tool for pentesting web applications

xxeserv

A mini webserver with FTP support for XXE payloads

zendframework3-