A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

📝 An opinionated, unstyled static blogging template — built with Astro, Tailwind, and shadcn/ui.

pwninit - automate starting binary exploit challenges

Backdooring VSCode Projects

A curated list of wordlists for bruteforcing and fuzzing

The Open Source kanban (built with Meteor). Keep variable/table/field names camelCase. For translations, only add Pull Request changes to wekan/i18n/en.i18n.json , other translations are done at ht…

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Lightweight NVIDIA GameStream Client, for LG webOS TV and embedded devices like Raspberry Pi

Card-style Hugo theme designed for bloggers

POC exploit for CVE-2024-49138

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

A generator of weird files (binary polyglots, near polyglots, polymocks...)

A fast DOM based XSS vulnerability scanner with simplicity.

Pen Test Report Generation and Assessment Collaboration

Tool for Active Directory Certificate Services enumeration and abuse

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Run PowerShell command without invoking powershell.exe

A light-weight first-stage C2 implant written in Nim (and Rust).

Generates malicious LNK file payloads for data exfiltration

HTTP parameter discovery suite.

All about bug bounty (bypasses, payloads, and etc)

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

A cheat sheet that contains advanced queries for SQL Injection of all types.

A markup-based typesetting system that is powerful and easy to learn.

🔗 The 𝘥𝘦 𝘧𝘢𝘤𝘵𝘰 standard, self hosted, powerful and customizable, URL shortener in PHP

HackerOne "in scope" domains

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …