Python tool for converting files and office documents to Markdown.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

JumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints…

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Impacket is a collection of Python classes for working with network protocols.

ChatGLM3 series: Open Bilingual Chat LLMs | 开源双语对话语言模型

Exploitation Framework for Embedded Devices

Ansible for DevOps examples.

📱 objection - runtime mobile exploration

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

Automated Adversary Emulation Platform

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Automated All-in-One OS Command Injection Exploitation Tool.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Loki - Simple IOC and YARA Scanner

Weaponized web shell

Tool for Active Directory Certificate Services enumeration and abuse

OpenStack Compute (Nova). Mirror of code maintained at opendev.org.

DNS Enumeration Script

PPPwn - PlayStation 4 PPPoE RCE

Powerful framework for rogue access point attack.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

A Python based ingestor for BloodHound

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.