notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

Most advanced XSS scanner.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Rockyou for web fuzzing

E-mails, subdomains and names Harvester - OSINT

Metasploit Framework

A list of established remote companies

Automatic SQL injection and database takeover tool

Impacket is a collection of Python classes for working with network protocols.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

System container image builder for LXC and Incus

Username tools for penetration testing

mmdb-server is an open source fast API server to lookup IP addresses for their geographic location.

IoT Inspector: capturing and analyzing your smart home network traffic

Next generation web scanner

Fetch all the URLs that the Wayback Machine knows about for a domain

Fast web fuzzer written in Go

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Common User Passwords Profiler (CUPP)

Damn Vulnerable Web Application (DVWA)

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Robust Speech Recognition via Large-Scale Weak Supervision

CeWL is a Custom Word List Generator

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

A list of remote-friendly or full-remote companies that targets Italian talents.

Prompt Injection Primer for Engineers