A collection of tips & tricks on how to escape a kiosk mode environment

PingCastle - Get Active Directory Security at 80% in 20% of the time

A community-driven collection of BloodHound queries

SCEP request tool for AD CS and Intune

Improve automated and semi-automated active scanning in Burp Pro

SpaceAPI JSON schema files.

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

This is the data that powers the PortSwigger URL validation bypass cheat sheet.

Nmap - the Network Mapper. Github mirror of official SVN repository.

Converts/manipulates/extracts data from a Nmap scan output.

Bambdas collection for Burp Suite Professional and Community.

This project is aimed at freely providing technical guides on various hacking tools.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A collective of different IRs for the Flipper (maintained)

Active Directory certificate abuse.

Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.

maim (make image) takes screenshots of your desktop. It has options to take only a region, and relies on slop to query for regions. maim is supposed to be an improved scrot.

In-depth Attack Surface Mapping and Asset Discovery

Command wireguard_exporter implements a Prometheus exporter for WireGuard devices. MIT Licensed.