all shell backdoor in the world

A powerful obfuscator for JavaScript and Node.js

Golang Secure Coding Practices guide

Defund the Police.

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Extract URLs, paths, secrets, and other interesting bits from JavaScript

A very small, very simple, yet very secure encryption tool.

find dangling domains in a multi cloud environment

Encode and Fuzz Custom Protobuf Messages in Burp Suite

100-Days-of-Hacking

A collection of awesome browser extension useful for OSINT along with their use case.

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

Projects for security students and professionals

Tool for Active Directory Certificate Services enumeration and abuse

Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers

Security-oriented list of resources about industrial network protocols.

🐧 Abuse of Google Colab for cracking hashes.

reverse shell using curl

Pentest Report Generator

A Collection of Android (Samsung) Security Research References

Community curated list of public bug bounty and responsible disclosure programs.

Opensource assets and vulnerability scanning tool

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

This Burp Suite extension allows you to copy HTTP requests without including cookies or tokens.

Create your own vulnerable by design AWS penetration testing playground