thormeg

evil-winrm

The ultimate WinRM shell for hacking/pentesting

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Auto_Wordlists

personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

grype

A vulnerability scanner for container images and filesystems

dive

A tool for exploring each layer in a docker image

pro-bing

A library for creating continuous probers

RecoverPy

Interactively find and recover deleted or :point_right: overwritten :point_left: files from your terminal

getsploit

Command line utility for searching and downloading exploits

CSS-Exfil-Protection

Official repository for the CSS Exfil Protection browser extensions.

nmapAutomator

A script that you can run in the background!

nikto

Nikto web server scanner

CrookedStyleSheets

Webpage tracking only using CSS (and no JS)

owasp-masvs

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

aws-vault

A vault for securely storing and accessing AWS credentials in development environments

snallygaster

Tool to scan for secret files on HTTP servers

privacy.sexy

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

CEH-in-bullet-points

💻 Certified ethical hacker summary in bullet points

CEH-in-bullet-points

undergroundwires CEH-in-bullet-points in pdf format

tldr

📚 Collaborative cheatsheets for console commands

awesome-docker

:whale: A curated list of Docker resources and projects

structopt

Parse command line arguments by defining a struct.

ssb-chess-electron

localstack

💻 A fully functional local AWS cloud stack. Develop and test your cloud & Serverless apps offline