sethsec

celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

crossdomain-exploitation-framework

Everything you need to exploit overly permissive crossdomain.xml files

PyCodeInjection

Automated Python Code Injection Tool

Nodejs-SSRF-App

Nodejs application intentionally vulnerable to SSRF

Empire

Empire is a pure PowerShell post-exploitation agent.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

BurpExtentions

cfdb

Common Findings Database

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

KaliVirtualDropbox

Create a Kali virtual dropbox (ISO) for use during remote Vulnerability Assessments and Penetration tests that auto installs without any user interaction, and calls home to your C2 server using unique shared secrets

Photon

Incredibly fast crawler which extracts urls, emails, files, website accounts and much more.

awesome-aws-security

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

environments-test

pbnj.github.io

Presos

Place to drop slides and other presentation material

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

RobotsDisallowed

A curated list of the most common and most interesting robots.txt disallowed directories.