thehlopster

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Packer-Fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

trufflehog

Find and verify secrets

phuip-fpizdam

Exploit for CVE-2019-11043

pycorpora

A simple Python interface for Darius Kazemi's Corpora Project.

NimForUE

Nim plugin for UE5 with native performance, hot reloading and full interop that sits between C++ and Blueprints. This allows you to do common UE workflows like for example to extend any UE class in Nim and extending it again in Blueprint if you wish so without restarting the editor. The final aim is to be able to do in Nim what you can do in C++

ApacheTomcatScanner

A python script to scan for Apache Tomcat server vulnerabilities.

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

GraphCrawler

GraphQL automated security testing toolkit

nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

unimap

Scan only once by IP address and reduce scan times with Nmap for large amounts of data.

Vutils

Vutils or Vic Utilities is an utility library written in Modern C++ and for Modern C++. It helps your programming go easier, faster, and simpler.

TemporRepo

Just for temporary usage

CdpSvcLPE

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

PowerRemoteDesktop

Remote Desktop entirely coded in PowerShell.

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

BITB

Browser In The Browser (BITB) Templates

Findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

Parth

Heuristic Vulnerable Parameter Scanner

uro

declutters url lists for crawling/pentesting

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

boofuzz

A fork and successor of the Sulley Fuzzing Framework

atheris

dump-scripts

Downloads all scripts on an external page to a local directory, with support for automatic deobfuscation/prettifying.

reFlutter

Flutter Reverse Engineering Framework

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

kiterunner

Contextual Content Discovery Tool

fuxploider

File upload vulnerability scanner and exploitation tool.