pip installable duckdb extensions published to pypi

A generic and extendable WebDAV server based on WSGI

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3

A Simple Plugin Framework for Django (maintained by @bihealth)

RedEye is a visual analytic tool supporting Red & Blue Team operations

ScareCrow - Payload creation framework designed around EDR bypass.

This is a python script to generate a hijacked dll to do whatever you want

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

📖 Unofficial WireGuard Documentation: Setup, Usage, Configuration, and full example setups for VPNs supporting both servers & roaming clients.

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Per-resource metadata for ember-data

JSON API (jsonapi.org) package for Laravel applications.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Alternative firmware for ESP8266 and ESP32 based devices with easy configuration using webUI, OTA updates, automation using timers or rules, expandability and entirely local control over MQTT, HTTP…

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Empire is a PowerShell and Python post-exploitation agent.

passivedns-client provides a library and a query tool for querying several passive DNS providers

Defeating Windows User Account Control

sslscan tests SSL/TLS enabled services to discover supported cipher suites

Implements tcp resequencing and http flow extraction.

Check for valid credentials across a network over SMB

a powerful DNS toolkit for python

CANAPE Network Testing Tool

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Automater - IP URL and MD5 OSINT Analysis