30 days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than100 days, follow your own pace. These videos ma…

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

A next-generation crawling and spidering framework.

PPPwn - PlayStation 4 PPPoE RCE

Fast passive subdomain enumeration tool.

A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.

CVE-2024-21683 Confluence Post Auth RCE

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Gather results of dorks across a number of search engines

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

Fetch all the URLs that the Wayback Machine knows about for a domain

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Bypass Reset Password Code Lead to Account Takeover

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…

Run WPS PIN attacks (Pixie Dust, online bruteforce, PIN prediction) without monitor mode with the wpa_supplicant

Brute force any Bitwarden PIN from storage or in-memory

AI-Powered Ethical Hacking Assistant

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

Navigate the CVE jungle with ease.

BChecks collection for Burp Suite Professional

Go CLI and Library for quickly mapping organization network ranges using ASN information.

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Tool to find CVEs and Exploits.