Cyclops 是一款具有 XSS 检测功能的浏览器

This repository serves as a curated resource for OffSec's OSEP (PEN-300) certification preparation, containing useful links, materials, and references to aid in advanced penetration testing studies.

Julien Mousqueton, my Curriculum Vitae using Hugo, hosted and generated by Gitbub

OFRAK: unpack, modify, and repack binaries.

Discovering vulnerabilities in firmware through concolic analysis and function clustering.

Quick network scanner library. https://crates.io/crates/qscan

Corrupted files generator. Random bits flipper.

A container repository for my public web hacks!

game of active directory

Android App Pin Security Issue Allowing Unauthorized Payments via Google Wallet

assets for www.hahwul.com

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-d…

Complete API layer for private AI applications on local models: RAG, skills, tools, MCP, text-to-sql, and more. Works with any OpenAI-compatible inference server.

Security tool that can get all security vulnerability/search for a specific bug also it can search for tools/scripts. you can use many exploit websites like (db-exploit.com ,packetstormsecurity.com…

A repository that includes all the important wordlists used while bug hunting.

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

OpenSSH 9.1 vulnerability mass scan and exploit

A DNS Bruteforcing Wordlist Generator

Uses ChatGPT API and Python-Nmap module to use the GPT3 model to create vulnerability reports based on Nmap scan data.

The USB host security assessment tool

🚜 Collect of CAN IDs and its payloads for various car brands/models in one place. Might be useful for Cyber Security Researchers, Reverse Engineers, and Automotive Electronics Enthusiasts.

EMBA - The firmware security analyzer

NFC signal and protocol analyzer using SDR receiver

🚛 Awesome CAN bus tools, hardware and resources for Cyber Security Researchers, Reverse Engineers, and Automotive Electronics Enthusiasts.

Ad hoc collection of Red Teaming & Active Directory tooling.

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, i…