Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

A tool for monitoring bug bounty programs across multiple platforms to track scope changes.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

Quelques conseils autour des obligations légales, fiscales et juridique pour la pratique du Bug Bounty en France

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Timeroasting scripts by Tom Tervoort

A python tool to automate KeePass discovery and secret extraction.

POC and Scanner for CVE-2023-24055

Various wordlists FR & EN - Cracking French passwords

A collection of awesome security hardening guides, tools and other resources

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

NTLMv1 Multitool

Dumping DPAPI credz remotely

Directory Services Internals (DSInternals) PowerShell Module and Framework

ShellCheck, a static analysis tool for shell scripts

Search (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)

Converted the text list to binary to save space

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Volatility plugin to retrieve the Full Volume Encryption Key in memory. The FVEK can then be used with the help of Dislocker to mount the volume.

Basic packer using XOR encryption

Random PowerShell scripts mainly focused on post-exploitation capabilities

Post-exploitation tool for attacking Active Directory domain controllers

Privilege Escalation Enumeration Script for Windows

A web front-end for password cracking and analytics

Simple shell script for automated domain recognition with some tools

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

A collection of browser-based side channel attack vectors.

Write JavaScript alert(1) with Katakana characters only