Dynamic and static analysis with Real Time Malware/Executable Analysis Platform for Windows, including open-source XDR (2 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Un…

Bringing together SBOMs and advisories.

An E-Ink PDA device using the ESP32 S3.

Vulnerability scanner for Caido

Sync notes between local and cloud with smart conflict: S3 (Amazon S3/Cloudflare R2/Backblaze B2/...), Dropbox, webdav (NextCloud/InfiniCLOUD/Synology/...), OneDrive, Google Drive (GDrive), Box, pC…

BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.

My Notes about Penetration Testing

streaming opengl commands, for the benefit of virtual machines

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

Fast passive subdomain enumeration tool.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Recursos y material para la asignatura de Estrategias de Programación y Estructuras de Datos del grado de Ingeniería Informática en la UNED

SkySafe Miscellaneous Reverse Engineering Blog

MobSF Remote code execution (via CVE-2024-21633)

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Flipper Zero Unleashed Firmware

A collective of different IRs for the Flipper

A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).

A script to automate privilege escalation with CVE-2023-22809 vulnerability

PlayStation 2 DVD Player Exploit

Relatively Insecure System for Keys and Secrets