Lists (18)
Stars
A powerful WAF (HTTP 403/401) and URL parser bypass tool developed in Go, designed to preserve exact URL paths and structures during testing.
This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.
Detect and bypass web application firewalls and protection systems
📚 An ultimate collection wordlists of the best-known CMS
A curated list of wordlists for bruteforcing and fuzzing
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security v…
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful pyth…
Offline-first, searchable arsenal for pentesting & bug bounty: payloads, a click-to-build command generator, GTFOBins, wordlists, embedded CyberChef, reverse shells, checklists & an engagement trac…
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
One CLAUDE.md file. Keeps Claude responses terse. Reduces output verbosity on heavy workflows. Drop-in, no code changes.
🥷 Engineering habits you already know, turned into skills Claude can run.
The best-benchmarked open-source AI memory system. And it's free.
Teams-first Multi-agent orchestration for Claude Code
A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows — particularly Claude Code
Claude Code plugin: automated code review loop with Codex
Surface AI blindspots before you ship. Put up to 8 AI models on every research, design or coding task.
Let your AI go full send. Your home directory stays home.
⛰️A General Hill-climbing AI harness that helps you move from Current State to Ideal State in both Life and Work.
An agentic skills framework & software development methodology that works.
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and s…
A source code static analysis platform for AppSec enthusiasts.
A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without touching LSASS process memory.
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
BYOVD: Use 360 WFP driver to block EDR/XDR network connection.
The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies.