th3cyb3rc0p

metasploit-framework

Metasploit Framework

Self-Hosting-Guide

Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.

palera1n

Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.

RedEye

RedEye is a visual analytic tool supporting Red & Blue Team operations

100-redteam-projects

Projects for security students

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

burp-awesome-tls

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

Beginners-Guide-to-Obfuscation

RustHound

Active Directory data collector for BloodHound written in Rust. 🦀

reverse_ssh

SSH based reverse shell

Threat-Hunting-and-Detection

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

shennina

Automating Host Exploitation with AI

VulFi

IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.

ShadowSpray

A tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects in the domain.

firefly

Black box fuzzer for web applications

EDD

Enumerate Domain Data

SNMP-Brute

Fast SNMP brute force, enumeration, CISCO config downloader and password cracking script.

pen-testing-findings

A collection of Active Directory, phishing, mobile technology, system, service, web application, and wireless technology weaknesses that may be discovered during a penetration test.

Android-Pentesting-Checklist

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security skills with essential tools and user-friendly guides. Elevate Android security seamlessly!

eicar-standard-antivirus-test-files

eicar standard antivirus test files

auth-api-tutorial

White-box-pentesting

This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities

CVE-2023-2982

WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

Android-LD-Preload-Injector

Use LD-Preload to Inject a shared library on any android version and architecture

esfriend

A minimal malware analysis sandbox for macOS

keyboard5

Keyboard design using HTML & CSS

oh-my-dorks

OWASP21-PG

OWASP21-PG is a practical lab that equips enthusiasts, developers & students with skills to identify/prevent web vulnerabilities, particularly in the OWASP Top 10 for 2021. Based on bWAPP, it offers a comprehensive practical lab covering all categories in the OWASP Top 10.

LinuxSecurity-Checklist

Important hardening tips for your linux servers