wagonza

Gsec

Web Security Scanner

Malware

C2_RedTeam_CheatSheets

Useful C2 techniques and cheatsheets learned from engagements

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

CVE-2023-46747-RCE

exploit for f5-big-ip RCE cve-2023-46747

C2-Tracker

Live Feed of C2 servers, tools, and botnets

Active_Directory_Advanced_Threat_Hunting

This repo is about Active Directory Advanced Threat Hunting

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Telerecon

A reconnaissance framework for researching and investigating Telegram.

json-api

A lightweight API resource for Laravel that helps you adhere to the JSON:API standard. Supports sparse fieldsets, compound documents, and more.

email-osint-discord-bot

Finds as much OSINT data as possible using email address as a search term.

photosint

PhotOSINT is an OSINT chrome extension for images and photos. It scans each webpage for images with EXIF data, while the user is browsing, and gives context options for reverse image search in different search engines (Google, Yandex, Bing, Tineye).

OffSec-Reporting

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

ShodanSlackBot

Slack Bot to query Shodan.

InfoHound

InfoHound is an OSINT to extract a large amount of data given a web domain name.

curlshell

reverse shell using curl

Maryam

Maryam: Open-source Intelligence(OSINT) Framework

awesome-cyber-security-university

🎓 Because Education should be free. Contributions welcome! 🕵️

Penetration-List

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

sagemode

👀Sagemode: Track and Unveil Online identities across social media platforms🕵️‍♂️

waf-comparison-project

Testing datasets and tools to compare WAF efficacy

cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

sshimpanzee

SSHD Based implant supporting tunneling mecanisms to reach the C2 (DNS, ICMP, HTTP Encapsulation, HTTP/Socks Proxies, UDP...)

CVE-2023-36745

ELFEN

ELFEN: Automated Linux Malware Analysis Sandbox

BounceBack

↕️🤫 Stealth redirector for your red team operation security

Delegate

Tool to perform GCP Domain Wide Delegation abuse and access Gmail and Drive data

CVE-2021-44168

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3.