Performing Indirect Clean Syscalls

Embed a payload inside a PNG file

Phishing Tool & Information Collector

Evasive shellcode loader

A curated list of awesome Android Reverse Engineering training, resources, and tools.

Script for Digispark Attiny85, ATMEGA32U4 to steal passwords, cookies and send to your mail

Session Hijacking Visual Exploitation

Sliver extension to bypass UAC via cmstp written in rust

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

Blazing fast file uploader and awesome bunker written in node! 🚀

evilginx3 + gophish

Open-Source Phishing Toolkit

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

The Havoc Framework

Web and API based SMTP testing

Kernel exploit for Xbox SystemOS using CVE-2024-30088

Curate an inifinite media library

CineSync is a Python based library management tool designed to organize debrid & local libraries without the support of Sonarr & Radarr

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Most advanced XSS scanner.

Emagnet is a tool for find leaked databases with 97.1% accurate to grab mail + password together from pastebin leaks. Support for brute forcing spotify accounts, instagram accounts, ssh servers, mi…

The Life Operational Security (OpSec) Guide provides invaluable insights and actionable recommendations for individuals seeking to enhance their privacy, anonymity, and security in their personal a…

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

60k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

A hacking tool for bug bounties. Sharing and modifying is encouraged!

Contextual Content Discovery Tool

OSINT Tool For Scraping Dark Websites

WordPress Auto Admin Account Creation and Reverse Shell cve-2024-27956 automates the process of creating a new administrator account in a WordPress site and executing a reverse shell on the target …