Stars
An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector
Automation for internal Windows Penetrationtest / AD-Security
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
PingCastle - Get Active Directory Security at 80% in 20% of the time
Bloodhound Reporting for Blue and Purple Teams
Autoswagger by Intruder - detect API auth weaknesses
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security,…
Automated evasive phishing infrastructure
A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.
This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.
A web application that assists network defenders, analysts, and researchers in the process of mapping adversary behaviors to the MITRE ATT&CK® framework.
Cursor Machine ID / Device ID Reset (Supports ≥ 0.45.0; Windows/macOS/Linux)
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
A small python app to embed "secret" user data into a carrier image by manipulation of the Discrete Cosine Transform (DCT) AC coefficients. This application was developed for a graduate-level unive…
Học các lỗ hổng web với Portswigger và Burpsuite
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
A collection of android security related resources
This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.
A cheat sheet that contains advanced queries for SQL Injection of all types.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Setup and deploy CTFd and challenge for beginner