toxydose

gitleaks

Protect and discover secrets using Gitleaks 🔑

trufflehog

Find and verify secrets

git-secrets

Prevents you from committing secrets and credentials into git repositories

ffuf

Fast web fuzzer written in Go

HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.

OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

evilgophish

evilginx3 + gophish

exploits

Miscellaneous exploit code

git-hound

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

secretlint

Pluggable linting tool to prevent committing credential.

Offensive-OSINT-Tools

OffSec OSINT Pentest/RedTeam Tools

awesome-password-cracking

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

PipeViewer

A tool that shows detailed information about named pipes in Windows

revshellgen

Reverse shell generator written in Python 3.

rusty-hog

A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in Python.

waf-community-bypasses

oneliner-bugbounty

oneliner commands for bug bounties

JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.

NucleiScanner

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

CVE-2022-37706-LPE-exploit

A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)

badkeys

Tool to find common vulnerabilities in cryptographic public keys

web-pentesting-checklist

checklist for testing the web applications

JoomlaScan

A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.

honeypots-detection

Nuclei templates for honeypots detection.

advanced-sql-injection-for-awae

OSCP-CheatSheet

My OSCP Prep Sandbox!!

CVE-2023-28252-Compiled-exe

A modification to fortra's CVE-2023-28252 exploit, compiled to exe

reverse-shells

A collection of reverse shell commands and payloads