tdr130

pytrader

cryptocurrency trading robot

caradoc

A PDF parser and validator

heralding

Credentials catching honeypot

Kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

AutoLocalPrivilegeEscalation

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

fisher

A plugin manager for Fish

Diffie-Hellman_Backdoor

How to backdoor Diffie-Hellman

sup

a "small is beautiful" tool for UNIX privilege escalation

wps-pwn

Interactive python script for exploiting WPS on access points. Works well with Kali 2.0. (Disclaimer: I'm not responsible for any illegal activity engage in, i.e. running this on access points you do not own.)

owasp4net

Demonstration of OWASP top 10 vulnerabilities in ASP.NET MVC

CloudFlareUtilities

A .NET Standard Library to bypass Cloudflare's Anti-DDoS measure (JavaScript challenge) using a DelegatingHandler.

Malicious_Website_Detection

Uses deep learning and machine learning techniques to detect and classify web pages as spam, malware and phishing

EKOParty2015_Windows_SMEP_Bypass

Windows SMEP Bypass U=S

sqldeveloperpassworddecryptor

A simple script to decrypt stored passwords from the Oracle SQL Developer IDE

naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

RATDecoders

Python Decoders for Common Remote Access Trojans

lfi-labs

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

AndroidKernelExploitationPlayground

binnavi

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

Dshell

Dshell is a network forensic analysis framework.

pocscan

Will to be a niubility scan-framework

cansecwest2016

slide and full exploit

Quasar

Remote Administration Tool for Windows

Galvatron

Powershell fork of Monohard by Carlos Ganoza P. This botnet/backdoor was designed to egress over unecrypted web using very little, but effective obfuscation. Egress over ICMP and DNS are planned as features. Lastly, the server code is designed to setup the C2 on a LAMP-esque server. The default creds are admin/admin.

honeything

TR-069 Honeypot

nextgen

A Genetic File, Syscall and Network Fuzzer.

cve-2016-0040

Exploiting CVE-2016-0040 uninitialized pointer

Applied-Crypto-Hardening

Best Current Practices regarding secure online communication and configuration of services using cryptography.

idac

Intrusion Detection and Access Control (IDAC) System

rop_compiler

An open source, multi-architecture ROP compiler written in python