Stars
The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes
Command & Conquer: Remastered Collection
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
🎯 Fast CORS misconfiguration vulnerabilities scanner
Reverse engineering focusing on x64 Windows.
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Kinda useful notes collated together publicly
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Writeups for HacktheBox 'boot2root' machines
Official source of container configurations, images, and examples for Oracle products and projects
An OSINT tool that discovers sub-domains by searching Certificate Transparency logs
GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Monitor linux processes without root permissions
A semi-interactive PHP shell compressed into a single file.
Automatically exported from code.google.com/p/unix-privesc-check
Smallest possible syntactically valid files of different types
Collection of steganography tools - helps with CTF challenges
Various *nix tools built as statically-linked binaries
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
PowerSploit - A PowerShell Post-Exploitation Framework