Lists (2)
Custom tools
Custom-built penetration testing tools for enumeration, credential validation, and privilege escalation in OSCP/CTF environmentsCVE PoC Implementations
Enhanced and refactored CVE proof-of-concepts with improved code quality, multi-language implementations, and better exploit logicStars
A clean, ATS-friendly, bilingual (English + Arabic) CV you edit as plain text and build with Typst — Docker optional. Fork it and make your own.
The open-source CapCut alternative
AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.
Learn how to design systems at scale and prepare for system design interviews
This repo contains a series of challenges that get harder and harder to exploit
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a s…
goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level (with MITRE ATT&CK mappings) and can scan l…
SelimDroid - Automated Android Dynamic Security Scanner
Username enumeration and username generation tool for penetration testing, OSINT, Active Directory, and red team engagements. Generates username wordlists from real names and common naming conventi…
Linux privilege escalation enumeration tool for OSCP, CPTS, CTFs, and penetration testing. Detects kernel exploits, GTFOBins, Kubernetes misconfigurations, and common privesc vectors.
PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7
CVE-2026-29000 PoC: pac4j-jwt PlainJWT-in-JWE authentication bypass.
Privilege Escalation Enumeration Script for Windows
WAPTLab - Web Application Penetration Testing Lab
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.
windows-kernel-exploits Windows平台提权漏洞集合
Burp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and automated reconnaissance. Supports REST/GraphQL/SOAP…
Don't expect much :) Just expect to learn new things!
A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.
Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-…
Collection of Statically linked binaries for Linux. Suited for Forensics
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.