sudoMycelia

nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

all-repos

Clone all your repositories and apply sweeping changes.

Amass

In-depth Attack Surface Mapping and Asset Discovery

Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

axiom

The dynamic infrastructure framework for anybody! Distribute the workload of many different tools with ease, including nmap, ffuf, masscan, nuclei and many more!

Cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

dionaea

Home of the dionaea honeypot

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

docker-node

Official Docker Image for Node.js :whale: :turtle: :rocket:

DVWA

Damn Vulnerable Web Application (DVWA)

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gron

Make JSON greppable!

hexo

A fast, simple & powerful blog framework, powered by Node.js.

hugo-hero-theme

Hero is a modern fullwidth business theme for Hugo.

hugo-spectre-pixel-theme

ilo4_toolbox

Toolbox for HPE iLO4 & iLO5 analysis

infinity-hugo

Infinity Coming Soon Template Hugo Version by themefisher

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

mux

A powerful HTTP router and URL matcher for building Go web servers with 🦍

natlas

natlas - Network Discovery and Auto-Diagramming

payloads

Git All the Payloads! A collection of web attack payloads.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

recon_profile

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

smokescreen

A simple HTTP proxy that fogs over naughty URLs

socialscan

Check email address and username usage on online platforms

techprojects-aether

A responsive and clean Hugo theme for blogs

wpscan

WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.

XSStrike

Most advanced XSS scanner.