The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Interesting APT Report Collection And Some Special IOCs

Notes about attacking Jenkins servers

HostHunter a recon tool for discovering hostnames using OSINT techniques.

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a maliciou…

A security tool to fingerprint PNG libraries used by web applications

Asynchronous wordlist based DKIM scanner