shambhushiv

whatsapp-web.js

A WhatsApp client library for NodeJS that connects through the WhatsApp Web browser app

AboutSecurity

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

nerfstudio

A collaboration friendly studio for NeRFs

metaa

mariana-trench

A security focused static analysis tool for Android and Java applications.

Logsensor

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

public-reports

bug bounty disclosed reports

Lucifer

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Saddam

DDoS Amplification Tool

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

xxer

A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.

XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

POC-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

cdn-proxy

Bypass CDN and WAF restrictions using CDN re-fronting.

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

HTTP-Header-Fuzzer

A multithreaded Python3 program that fuzzes HTTP headers and values and outputs the results to a CSV file.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

weird_proxies

Reverse proxies cheatsheet

twofi

Twitter Words of Interest - Generate word lists from twitter searches

shuji

Reverse engineering JavaScript and CSS sources from sourcemaps

Bashfuscator

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.