Stars
OCR powered screen-capture tool to capture information instead of images
PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
Visualizing VirusTotal retrohunting data with Jupyter notebook and plotly
GCPGoat : A Damn Vulnerable GCP Infrastructure
Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()
A more powerful alternative to sysctl(8) with a terminal user interface 🐧
Python code to parse a Twitter archive and output in various ways
An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts.
Hashes for vulnerable LOG4J versions
A curated list of awesome YARA rules, tools, and people.
InfoSec research and password cracking tools with Google Colab
A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.
Hunt down social media accounts by username across social networks
40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
The XSS Hunter service - a portable version of XSSHunter.com
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Random utilities from my security projects that might be useful to others
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
a javascript change monitoring tool for bugbounties
Change monitoring app that checks the content of web pages in different periods.
PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.
BC-SECURITY / Empire
Forked from EmpireProject/EmpireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.