BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

This repo is specially created for all the work done my me as a part of Coursera's Machine Learning Course.

A REST API security testing framework.

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

Stealth post-exploitation framework

Recon Dog is an all in one tool for all your basic information gathering needs.

Python script to inject existing Android applications with a Meterpreter payload.

NXcrypt - 'python backdoor' framework

transform your payload.exe into one fake word doc (.ppt)

HTTPLeaks - All possible ways, a website can leak HTTP requests

Pocs for Antivirus Software‘s Kernel Vulnerabilities

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

full exploit of pwnfest2016, slide and full text of syscan2017

WPSeku - Wordpress Security Scanner

Simple Python tool for backdooring apks files (with meterpreter or shell of Metasploit)

Nginx configuration static analyzer

This book on heap exploitation is a guide to understanding the internals of glibc's heap and various attacks possible on the heap structure. https://heap-exploitation.dhavalkapil.com/

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers

Thefatrat a massive exploiting tool revealed >> An easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular paylo…

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

Security advisories published by Enable Security

A security scanner for HTTP response headers.

Android application vulnerability analysis and Android pentest tool

PEframe is a open source tool to perform static analysis on (portable executable) malware.

✍️ A curated list of CVE PoCs.

Vulnerability Labs for security analysis