wflk

sslstrip-hsts-openwrt

working sslstrip2+ dnsproxy for the wifi pineapple tetra+nano. (chaos calmer - openwrt)

mythril

Reversing and bug hunting framework for the Ethereum blockchain

API-fuzzer

API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

awesome_windows_logical_bugs

collect for learning cases

cameradar

Cameradar hacks its way into RTSP CCTV cameras

CVE-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

dbt_matillion_repo

dbttest

dockerized_fuzzing

Run fuzzing within Docker

evilgit

Exchange-AD-Privesc

Exchange privilege escalations to Active Directory

gdbgui

A modern, browser-based frontend to gdb (gnu debugger). Add breakpoints, view stack traces, and more in C, C++, Go, and Rust. Simply run gdbgui from the terminal and a new tab will open in your browser.

gearset-demo-source

Use this repository to set up your source org in Gearset's onboarding documents

gearset-demo-target

Use this repository to set up your target org in Gearset's onboarding documents

git-poc

git-poc demonstrates how to hide evil git-hooks inside a tracked bare repository

image-upload-exploits

This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.

injectopi

A set of tutorials about code injection for Windows.

kAFL

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

marshalsec

postscript_blog_examples

PostScript examples useful for attacking Ghostscript.

PwnBack

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

reconscript

Fully Automated Recon Script Made From https://blog.projectdiscovery.io/building-one-shot-recon

Rubeus

Trying to tame the three-headed dog.

sdfx-sample

ShellcodeStdio

A mini-framework for easily writing compiler optimized position independent x86 shellcode for windows platforms.

ssh-mitm

SSH man-in-the-middle tool

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

symlinktest

tools-1

WMIcmd

A command shell wrapper using only WMI for Microsoft Windows