Response Filter Denial of Service (RFDoS) Experimental Scanner

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

URL / IP / Email defanging with Javascript. Make IoC harmless.

FAIR License (Free Access for Individuals and Researchers)

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

Generate customized Password/Passphrase wordlist based on target information

Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)

CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

List of companies that hire security people full remote.

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

Sub-Domain TakeOver Vulnerability Scanner (edoardottt fork)

Discover new target domains using Content Security Policy

Estimate how long it takes to read a text

Golang module exporting general purpose functions I get tired of rewriting every time

CompTIA Security+ SY0-601 notes (passed 788 points)

The Most Advanced Client-Side Prototype Pollution Scanner

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

Master of Science in Cybersecurity, Sapienza University of Rome.

Tool for Active Directory Certificate Services enumeration and abuse

My experiments in weaponizing ONOS applications (https://github.com/opennetworkinglab/onos)

Little Bug Bounty & Hacking Tools⚔️

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Force Remove Copilot, Recall and More in Windows 11

Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

Why is this running?

⚠️ Browser fingerprinting via favicon!

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

BloodyAD is an Active Directory Privilege Escalation Framework