tnmch

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

CrackMapExec

A swiss army knife for pentesting networks

ctf-wiki

Come and join us, we need you!

wesng

Windows Exploit Suggester - Next Generation

ipscan

Angry IP Scanner - fast and friendly network scanner

ScyllaHide

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

Findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

TitanHide

Hiding kernel-driver for x86/x64.

phuip-fpizdam

Exploit for CVE-2019-11043

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

pentest-notes

GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

ADAPE-Script

Active Directory Assessment and Privilege Escalation Script

halfempty

A fast, parallel test case minimization tool.

dnsfs

Store your data in others DNS resolver cache

ByePg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

heap-viewer

IDA Pro plugin to examine the glibc heap, focused on exploit development

aclpwn.py

Active Directory ACL exploitation with BloodHound

untwister

Seed recovery tool for PRNGs

recon

information gathering

tweakpng

A low-level PNG image file manipulation utility for Windows

racepwn

Race Condition framework

XORpass

Encoder to bypass WAF filters using XOR operations.

mysql-unsha1

Authenticate against a MySQL server without knowing the cleartext password

write-up

:smirk_cat: CTF write-ups

jsonp

jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.

CVE-2017-1000486

Primefaces <= 5.2.21, 5.3.8 or 6.0 - Remote Code Execution Exploit

applying-ttd-to-malware-analysis

Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019

gitoops

all paths lead to clouds