superkojiman

ZipPasswords

Passwords from SecLists compressed into 7z archives for Hashcat.

superkojiman.github.io

Build a Jekyll blog in minutes, without touching the command line.

vulnerabilities

Published vulnerabilities and exploits.

r1cksec_cheatsheets

Collection of knowledge about information security

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

pwnbox

Docker container with tools for binary reverse engineering and exploitation.

metagoofil

An updated version of metagoofil

pwn-machine

The Pwning Machine

vulscan

Advanced vulnerability scanning with Nmap NSE

PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

peepshow

Script that captures login credentials on a laptop acting as a Wi-Fi access point.

open-golang

Open a file, directory, or URI using the OS's default application for that object type. Optionally, you can specify an application to use.

gopsutil

psutil for golang

wallpaper

A cross-platform Golang library for getting and setting desktop wallpapers

filetype

Small, dependency-free, fast Go package to infer file types based on the magic numbers signature

Platypus

Create Mac applications from command line scripts

create-dmg

Create a good-looking DMG for your macOS app in seconds

writeups

Musings from the brainpan.

CTF-pwn-tips

Here records some tips about pwn.

gallimaufry

Command Line Parsing Library for USB PCAP Files

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

GTFOBins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

JS2PDFInjector

Inject a JS file into a PDF file.

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

kernel-exploits

CVE-2018-7600

CVE-2018-7600 - Drupal 7.x RCE

ddcctl

DDC monitor controls (brightness) for Mac OSX command line