Trà Đá Hacking

🐶 A curated list of Web Security materials and resources.

Curated list of public penetration test reports released by several consulting firms and academic security groups

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Simplify format string exploitation.

An admin panel finder script written in python.

Domain Password Audit Tool for Pentesters

OSS-Fuzz - continuous fuzzing of open source software

Exploit toolkit CVE-2017-0199 - v3.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malicious (Obfuscated) RTF file and deliver …

Advanced vulnerability scanning with Nmap NSE

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

ripgrep combines the usability of The Silver Searcher with the raw speed of grep.

Patch PE, ELF, Mach-O binaries with shellcode

CATPHISH project - For phishing and corporate espionage

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Develo…

Nishang - PowerShell for penetration testing and offensive security.

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

A repository for learning various heap exploitation techniques.

php Non-AlphaNumeric Encoder

Show info about the author by facebook photo url

WebApp Information Gatherer

Course materials for Modern Binary Exploitation by RPISEC

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

An exploit for Apache Struts CVE-2017-5638

Credentials recovery project