KeySweeper is a stealthy Arduino-based device, camouflaged as a functioning USB wall charger, that wirelessly and passively sniffs, decrypts, logs and reports back (over GSM) all keystrokes from an…

A modern, browser-based frontend to gdb (gnu debugger). Add breakpoints, view stack traces, and more in C, C++, Go, and Rust! Simply run gdbgui from the terminal and a new tab will open in your bro…

A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.

HID attack payload generator for Arduinos

A fully featured backdoor that uses Telegram as a C&C server

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

Emacs interface to Java decompilers

Scripts and whatnot from OSCP education

🔥 A powerful MongoDB auditing and pentesting tool 🔥

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.

Generate Gmail Emailing Keyloggers to Windows on Linux

Dradis Framework: Colllaboration and reporting for IT Security teams

DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.

Proxmark 3 - HID Corporate 1000 bruteforce

MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.

Small collection of tools I've written for use on pentest's

A repository for learning various heap exploitation techniques.

Import arbitrary code from Stack Overflow as Python modules.

low cost software radio platform

A pure python, post-exploitation, data mining tool and remote administration tool for macOS.

Wipe and reinstall a running Linux system via SSH, without rebooting. You know you want to.

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa…

ESP8266 deauther

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

An awesome web-app that uses the concepts of service discovery, external configuration, circuit breaker, among other stuff.

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

some awesome papers

Official repository for mtr, a network diagnostic tool