rdincel1

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

attack-surface-framework

Tool to discover external and internal network attack surface

RansomwareMonitor

A ransomware group monitoring bot written in C#.

Smap

a drop-in replacement for Nmap powered by shodan.io

pocsploit

a lightweight, flexible and novel open source poc verification framework

pentest-tools

A collection of custom security tools for quick needs.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

SC-200T00A-Microsoft-Security-Operations-Analyst

O365-Doppelganger

A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user

Resources

obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should allow you to make some connections (see what I did there?) between how you record your data during an investigation and some of what the tool can offer FOR FREE!

vulnrepo

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, bug bounty, pentest reporting, auditor!

agartha

A Burp extension generates dynamic payloads to uncover injection flaws (LFI, RCE, SQLi), creates user access tables to identify authentication and authorization issues, attempts to bypass HTTP 403 access restrictions, and converts HTTP requests as JavaScript code for enhanced XSS exploitation.

Depix

Recovers passwords from pixelized screenshots

cve

Gather and update all available and newest CVEs with their PoC.

Azure-Red-Team

Azure Security Resources and Notes

Log4jNuclei

Log4j for nuclei

OffensiveRust

Rust Weaponization for Red Team Engagements.

Qu1cksc0pe

All-in-One malware analysis tool.

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

WPForce

Wordpress Attack Suite

Reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

RAT-via-Telegram

Windows Remote Administration Tool via Telegram

cheat.sheets

cheat.sh cheat sheets repository

cheat.sh

the only cheat sheet you need

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.