Xelarmen

Depix

Recovers passwords from pixelized screenshots

social-analyzer

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

fuxploider

File upload vulnerability scanner and exploitation tool.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

WEF

Wi-Fi Exploitation Framework

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

toxssin

An XSS exploitation command-line interface and payload generator.

Qu1cksc0pe

All-in-One malware analysis tool.

aws_pwn

A collection of AWS penetration testing junk

thinkphp-RCE-POC-Collection

thinkphp v5.x 远程代码执行漏洞-POC集合

enumerate-iam

Enumerate the permissions associated with AWS credential set

ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

weirdAAL

WeirdAAL (AWS Attack Library)

PowerShell-Red-Team

Collection of PowerShell functions a Red Teamer may use in an engagement

AndroidMalware_2020

Popular Android malware seen in 2020

IAMFinder

IAMFinder enumerates and finds users and IAM roles in a target AWS account.

CVE-2022-44877

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

fake-code4hk-app

Decompiling a fake code4hk / occupy central app distributed via whatsapp

GhostESP

A Firmware for the ESP32 targeted for use with Flipper Devices.

flutter_hackathon_bread_donate

marionette

Example of how an attacker might swap user data temporarily to execute arbitrary commands

intelx_parser

Extract leaked credentials from intelx search results to excel file