A tool for reverse engineering Android apk files

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

Reverse engineering and pentesting for Android applications

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

The world's most flexible commerce platform.

This repository contains writeups for Damn Vulnerable Web Application (DVWA). --------------------------------- Updated writeups and blogs are at: https://github.com/Aftab700/aftab700.github.io

traxss | Automated XSS Vulnerability Scanner Currently In Development 🐍 HACKTOBERFEST PROJECT 2019

Most advanced XSS scanner.

Windows privilege escalation with cmd

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

Generates malicious LNK file payloads for data exfiltration

A Python Package for Data Exfiltration

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Starkiller is a Frontend for PowerShell Empire.

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Compiled binaries of various security tools

Moved to

Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell.

Compilation of Resources for OSINT

Compilation of Resources for Linux Privilege Escalation

Compilation of Resources for Windows Privilege Escalation

Collection of Facebook Bug Bounty Writeups

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, co…