Lists (15)
Stars
🐧 A list of awesome Linux softwares
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
A list of public penetration test reports published by several consulting firms and academic security groups.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Fluxion is a remake of linset by vk496 with enhanced functionality.
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]
CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
A Nmap XSL implementation with Bootstrap.
A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.
Morpheus - Automating Ettercap TCP/IP (MITM-hijacking Tool)
These are my checklists which I use during my hunting.
PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform
Weaponized Browser-in-the-Middle (BitM) for Penetration Testers
Yet another static code analyzer for malicious Android applications
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
Documentation and Sharing Repository for ThreatPinch Lookup Chrome & Firefox Extension
The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
Chrome browser extension-based Command & Control
This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on…
A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.
Abusing Self-XSS and Clickjacking to trigger XSS