A BurpSuite Extension that allows you to select multiple requests from your History, and send them all to Repeater simultaneously.

Analysis and detection engineering for the BlueHammer Windows Defender local privilege escalation vulnerability. This repo includes bug fixes, 7 Sigma rules, 4 YARA rules, and MITRE ATT&CK-mapped t…

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Yet Another DNS Exfiltration

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

The SQL Server Internals Conference

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Script samples from the book Pentesting Azure Applications (2018, No Starch Press)

A collection of awesome lists for hackers, pentesters & security researchers.

This repository contains full code examples from the book Gray Hat C#

.NET Core class library for using PGP

Automate actions in the cryptocurrency world

Original Xcampo code

Simple cross-platform Time Clock app built off Xamarin

Six Degrees of Domain Admin

In-depth Attack Surface Mapping and Asset Discovery

🎯 Command Injection Payload List

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Random PowerShell scripts I reference frequently

Shitty OS for the Shitty Kitty badge

A Bluetooth low energy capture the flag

Playground (and dump) of stuff I make or modify for the Flipper Zero

BLACKHAT USA2022 PDF Public

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…