Search public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub, with CVSS, EPSS and CISA KEV context.

Generate voice cloned audio recording using tortoise-tts for security awareness testing

User Enumeration of Microsoft Teams users via API

ESP8266 based droneID spoofing Throwie example for DJI DroneID (Remote Drone Identification broadcast)

Ruby port of PyDUML

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Python implementation for PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

A natural evolution of Burp Suite's Repeater tool

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

[ab]using Unicode to create tragedy

An Xposed and adbi based module which is capable of hooking both Java and Native methods targeting Android OS.

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

Security profiling for blackbox Android

Platform for Architecture-Neutral Dynamic Analysis

The ChameleonMini is a versatile contactless smartcard emulator compliant to NFC. The ChameleonMini was developed by https://kasper-oswald.de. The device is available at https://shop.kasper.it. For…

Soot - A Java optimization framework

The Rogue Access Point Framework

Snowman decompiler

The ONLY hacker friendly proxy for webapp pentests.

"Just Another ReVersIng Suite" or whatever other bullshit you can think of

A standalone Java Decompiler GUI

Diaphora, the most advanced Free and Open Source program diffing tool.

CTF Writeups

A simple paginator for Jekyll sites.