x0rium

open-source-ios-apps

:iphone: Collaborative List of Open-Source iOS Apps

qwik

Instant-loading web apps, without effort

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

assemblyscript

A TypeScript-like language for WebAssembly.

trufflehog

Find and verify secrets

ag-grid

The best JavaScript Data Table for building Enterprise Applications. Supports React / Angular / Vue / Plain JavaScript.

poisontap

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

AFL

american fuzzy lop - a security-oriented fuzzer

emba

EMBA - The firmware security analyzer

wifi-arsenal

WiFi arsenal

awesome-exploit-development

A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

Exegol

Fully featured and community-driven hacking environment

server

Hashtopolis - distributed password cracking with Hashcat

Cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

routeros

RouterOS Security Research Tooling and Proof of Concepts

NimPlant

A light-weight first-stage C2 implant written in Nim.

awesome-command-control

A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.

spy-extension

A Chrome extension that will steal literally everything it can

TOP

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

Arsenal

Arsenal is a Simple shell script (Bash) used to install tools and requirements for Bug Bounty

squarephish

awesome-malware

:computer::warning: A curated collection of awesome malware, botnets, and other post-exploitation tools.

CVE-2023-22809-sudoedit-privesc

A script to automate privilege escalation with CVE-2023-22809 vulnerability

rulesfinder

Machine-learn password mangling rules

CVE-2023-25136

OpenSSH 9.1 vulnerability mass scan and exploit

BesoToken

A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).

RNN-Passwords

Using RNNs for password cracking

cve-2022-31898

Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215

minio-telegram-bot

Bot telegram to upload files to an S3 (minio)