Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

spring-cloud-function SpEL RCE, Vultarget & Poc

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

Red Teaming Tactics and Techniques

Arsenal is just a quick inventory and launcher for hacking programs

CrackQL is a GraphQL password brute-force and fuzzing utility.

A curated list of Smart Contract Security materials and resources For Researchers