shiham101

Atlas

Quick SQLMap Tamper Suggester

BloodHound

Six Degrees of Domain Admin

burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration

CORScanner

Fast CORS misconfiguration vulnerabilities scanner

CVE-2017-8759

CVE-2017-8759

CVE-2018-2893

CVE-2018-2893 PoC

Dictator

Penetration Testing Orehestrator

Exploits

Windows Exploits

impacket

Impacket is a collection of Python classes for working with network protocols.

iOS

Most usable tools for iOS penetration testing

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

JavaTimeAgent

fix time for java application using javaAgent

kerberoast

MAIAN

MAIAN: automatic tool for finding trace vulnerabilities in Ethereum smart contracts

manticore

Symbolic execution tool

My-CTF-Web-Challenges

Collection of CTF Web challenges I made

oyente

An Analysis Tool for Smart Contracts

oyente-1

The project has been moved to this new repo https://github.com/melonproject/oyente

Pandoras-Box

This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.

proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

RAU_crypto

Hard-coded encryption key remote file upload exploit for CVE-2017-11317, CVE-2017-11357 (Telerik UI for ASP.NET AJAX)

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.

St2-057

St2-057 Poc Example

theftfuzzer

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

upload-labs

一个帮你总结所有类型的上传漏洞的靶场

vulhub

Docker-Compose file for vulnerability environment

wooyun_articles

drops.wooyun.org 乌云Drops文章备份