rioru

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

voice-changer

リアルタイムボイスチェンジャー Realtime Voice Changer

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Havoc

The Havoc Framework.

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

NetExec

The Network Execution Tool

open-vm-tools

Official repository of VMware open-vm-tools project

wmiexec-Pro

New generation of wmiexec.py

RustHound

Active Directory data collector for BloodHound written in Rust. 🦀

reverse_ssh

SSH based reverse shell

ABPTTS

TCP tunneling over HTTP/HTTPS for web application servers

No-Consolation

A BOF that runs unmanaged PEs inline

badsecrets

A library for detecting known secrets across many web frameworks

go-secdump

Tool to remotely dump secrets from the Windows registry

cnext-exploits

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

linsk

📂 Access Linux-native file systems (including LVM and LUKS) on Windows and macOS with help of a lightweight Alpine Linux VM. x86/ARM supported.

libprotobuf-mutator_fuzzing_learning

Learn how to combine libprotobuf-mutator with libfuzzer & AFL++

FrosthavenAssistant

flutter app

wrapwrap

Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

Shaco

Shaco is a linux agent for havoc

chrome_v8_ndays

Chrome V8 n-day exploits that I've written.

obsidian-image-captions

Add captions to images with inline Markdown and link support. The caption format is compatible with the CommonMark spec and other Markdown applications.

EvilCrowCable-Pro

Evil Crow Cable Pro device

dpapilab-ng

DPAPILAB Next Gen, script collection

Prox-Ez

xortigate-cve-2023-27997

xortigate-cve-2023-27997

derbycon2017

DerbyCon 2017 Presentation VMware Escapology: How to Houdini the Hypervisor

AFLplusplus-protobuf-mutator

AFLplusplus + libprotobuf-mutator

CVE-2023-46805_CVE-2024-21887

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

CompileCSDocker

Compile SharpHound and others on Linux