A list of useful payloads and bypass for Web Application Security and Pentest/CTF

⏬ Dumb downloader that scrapes the web

YOLOv5 🚀 in PyTorch > ONNX > CoreML > TFLite

Automatic SQL injection and database takeover tool

E-mails, subdomains and names Harvester - OSINT

Fast subdomains enumeration tool for penetration testers

A swiss army knife for pentesting networks

Web application fuzzer

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Common User Passwords Profiler (CUPP)

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Tool for Active Directory Certificate Services enumeration and abuse

Fancy reverse and bind shell handler

BloodyAD is an Active Directory Privilege Escalation Framework

SMBMap is a handy SMB enumeration tool

Test tool for CVE-2020-1472

Orange Cyberdefense mindmaps

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

Automatic SSTI detection tool with interactive interface

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Active Directory Integrated DNS dumping by any authenticated user

Python version of the C# tool for "Shadow Credentials" attacks

command line pastebin for google appengine

Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑…

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

AD ACL abuse

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel