shariqmalik

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

clair

Vulnerability Static Analysis for Containers

apkleaks

Scanning APK file for URIs, endpoints & secrets.

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

profile-readme-generator

🎨 Enhance your GitHub profile with this amazing tool, which allows you to create a personalized README quickly and easily. This profile README generator is the best you'll find 🚀

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Shockwave-OSS

Leaked-Credentials

how to look for Leaked Credentials !

r4ven

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

nmap-did-what

Nmap Dashboard Mini Project

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

BackupOperatorToDA

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

LetMeowIn

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

gplaydl

Command Line Google Play APK downloader. Download APK files to your PC directly from Google Play Store.

gocheck

Because AV evasion should be easy.

ICS-Pentesting-Tools

A curated list of tools related to Industrial Control System (ICS) security and Penetration Testing

bambdas

Bambdas collection for Burp Suite Professional and Community.

Task-Ninja

Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!

HackTheBox-Reporting

Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking Tool

bgpipe

BGP reverse proxy and firewall

AD-Pentesting-Tools

All about Active Directory pentesting

whispers

Identify hardcoded secrets in static structured text (version 2)

AcuAutomate

Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.

CVE-2023-36884-MS-Office-HTML-RCE

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

CVE-2024-25600_Nuclei-Template

Nuclei template and information about the POC for CVE-2024-25600

KnowledgeBase

Open Source and publicly modifiable knowledgebase about CyberSecurity Topics, Concepts, and Terminology. This replaces our prior repo which included basic install guides and tools.

CRTO-Lab-Status

Posts the latest status of CRTO labs, running/stopped and hours in Discord/Slack

exploitation-course

Offensive Software Exploitation Course

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)