Taind94

AhMyth-Android-RAT

Android Remote Administration Tool

aktaion

Aktaion: Open Source ML tool and data samples for Exploit and Phishing Research

Ares

Python botnet and backdoor

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

awesome-awesomeness

A curated list of awesome awesomeness

Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

container-security-checklist

Checklist for container security - devsecops practices

cv

CVE-2021-2394

POC of CVE-2021-2394

DeepNude_NoWatermark_withModel

DeepNude source code，without watermark （去水印），with demo and model download link，one command to run offline，GAN/Pytorch/pic2pic

django-DefectDojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

Docker-Templates

Docker configurations for TheHive, Cortex and 3rd party tools

dspLab

FruityC2

FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.

GPON

Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.

Grok-backdoor

Simple python backdoor with Ngrok tunnel support

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

kubernetes-lab-tutorial

Kubernetes Lab Tutorial

Mobile-Security-Framework-MobSF

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

Mystique

Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malicious sample and automatically generates a list of mutexes that could be used to as “vaccines” against the sample.

osx-and-ios-security-awesome

OSX and iOS related security tools

osx-security-awesome

A collection of OSX and iOS security resources

owasp-checklist-v4

OWASP Web Security Testing Checklist - Assessment # 01

PoC-in-GitHub

📡PoC auto collect from GitHub.

study

system-design-primer

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

TweetFeed

Collecting IOCs posted on Twitter

wazuh

Wazuh - Host and endpoint security

wazuh-documentation

Wazuh - Project documentation