Nmap - the Network Mapper. Github mirror of official SVN repository.

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

Pentest and manual code review templates -- web/API, cloud (AWS/GCP/Azure), mobile (iOS/Android), thick client, hardware/IoT, plus 11 language-specific code review guides

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

Ruby bindings for Z3 constraint solver library

Vulnerability Intelligence Platform

Binary Exploitation Phrack CTF Challenge

Adversary Emulation Framework

Starkiller is a Frontend for PowerShell Empire.

CVE cache of the official CVE List in CVE JSON 5 format

A Wayland window-stacking compositor

Free and Open Source Reverse Engineering Platform powered by rizin

Ghidra is a software reverse engineering (SRE) framework

EMBA - The firmware security analyzer

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to …

A query aggregator for OSINT based threat hunting

Fast multi-platform (ELF/PE/MachO) binary checksec written in Rust.

This repo Gathers all available cve exploits from github.⚠️ Be careful Malware.

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

MOVED TO: https://cirosantilli.com/linux-kernel-module-cheat/userland-assembly with code at https://github.com/cirosantilli/linux-kernel-module-cheat/tree/master/userland/arch/x86_64 SEE README. x8…

A cheatsheet for exploiting server-side SVG processors.

A pure Ruby code highlighter that is compatible with Pygments

A curated list of awesome framework-agnostic standalone web components

A full-featured BDD unit testing framework for bash, ksh, zsh, dash and all POSIX shells

Generate shell completions for command_kit commands

Mirror of cisa.gov/kev data files