A collection of JavaScript engine CVEs with PoCs

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool…

This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermo…

iOS iNalyzer

morpheus - automated ettercap TCP/IP Hijacking tool

An extremely fast and flexible web fuzzer

IDA PDB Loader

Automated victim-customized phishing attacks against Wi-Fi clients

PyJFuzz - Python JSON Fuzzer

USB armory: open source flash-drive-sized computer

A portable, padding oracle exploit API

ooni-probe: network measurement writing framework aimed at detecting network interference.

BackdoorMan is a toolkit that helps you find malicious, hidden and suspicious PHP scripts and shells in a chosen destination.

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

Chromebackdoor is a pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM…

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

New Generation Exploit Development Kit

Helped during my OSCP lab days.

A python program to create a fake AP and sniff data.

Noriben - Portable, Simple, Malware Analysis Sandbox

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Advance URL Fuzzing + Whois Domain running on python

.NET assembly editor, decompiler, and debugger

The Browser Exploitation Framework Project

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Build your own Bad USB Stick for pentesting with wifi and dip switches

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities.

OSS-Fuzz - continuous fuzzing of open source software