Stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
Source code for Hacker101.com - a free online web and mobile security class.
Whiteboard as an IDE, draw and code in your browser
A curated list of cybersecurity tools and resources.
Una version de Blender creada desde cero para Symbian
Some setup scripts for security research tools.
A repository for learning various heap exploitation techniques.
DOM XSS scanner for Single Page Applications
CTF challenge (mostly pwn) files, scripts etc
Offensive Software Exploitation Course
Recover the default privilege set of a LOCAL/NETWORK SERVICE account
Lightweight Certificate Transparency Log Monitor
irsdl / shortscan
Forked from bitquark/shortscanAn IIS short filename enumeration tool
Pre-Built Vulnerable Environments Based on Docker-Compose
Python SDK/API for reverse engineered Google Bard
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, a…
Signatures and IoCs from public Volexity blog posts.
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
Automatically exported from code.google.com/p/domxsswiki
Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http