Magic hashes – PHP hash "collisions"

Simple orchestration & configuration management

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Syntax-aware grep for PHP code.

Reads and writes Sqons.

Resources for topics mentioned in the "Pentesting for Developers" training

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

Bring Your Own Filesystem

This repo collects examples of intentional and unintentional hacks of media sources

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PHP remoteStorage Server

Database Schema Versioning Tool for MySQL

Wiki-like CTF write-ups repository, maintained by the community. 2014

Lightweight, single file, FastCGI client for PHP

ASCIIFlow

Bash function to run tasks in parallel and display pretty output as they complete.

A simple & straight-to-the-point PHP profiling extension with its built-in web UI

Allows for using native PHP files as config files in PHP!

JavaScript Client-Side Bitcoin Wallet Generator

This is a list of open source, lightweight, readable implementations of various protocols and technologies.

A pocket-sized implementation of Bitcoin

Stuff about it-security that might be good to know

A platform for developing, testing, building, deploying and running CouchDB hosted apps.

Web service to map IP addresses to AS information, using iptoasn.com

A list of Free Software network services and web applications which can be hosted on your own servers

Updated list of public BitTorrent trackers

OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora

The book documenting the curl project, the curl tool, libcurl and more. Simply put: everything curl.