sh0tal

mailMeta

An forensics tool to help aid in the investigation of spoofed emails based off the email headers.

PcapXray

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

evilgophish

evilginx3 + gophish

BobTheSmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

headshots-starter

gpt-researcher

LLM based autonomous agent that does online comprehensive research on any given topic

S3Scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

decrypt-chrome-passwords

LSMS

Linux Security and Monitoring Scripts

dorkScanner

A typical search engine dork scanner scrapes search engines with dorks that you provide in order to find vulnerable URLs.

localGPT

Chat with your documents on your local device using GPT models. No data leaves your device and 100% private.

AutoGPT

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

badsecrets

A library for detecting known secrets across many web frameworks

spidex

Continuous reconnaissance network scanner designed for large-scale scans, collecting information on all Internet assets.

chatgpt-prompts-bug-bounty

ChatGPT Prompts for Bug Bounty & Pentesting

ngrok

Unified ingress for developers

weevely3

Weaponized web shell

CeWL

CeWL is a Custom Word List Generator

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

dangerzone

Take potentially dangerous PDFs, office documents, or images and convert them to safe PDFs

liffy

Local file inclusion exploitation tool

LFISuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

pdf-examiner

Provides an overview of the inner file structure of a PDF

deleted-tweets-archive

These tweets display several bad actors' most divisive uses of the Twitter platform.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

of-dollars-and-data

Repo for ofdollarsanddata.com blog

oneliner-bugbounty

oneliner commands for bug bounties