Contextual Content Discovery Tool

Next-generation ORM for Node.js & TypeScript | PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, MongoDB and CockroachDB

OneForAll是一款功能强大的子域收集工具

Fast web fuzzer written in Go

A simple program to query nmap xml files in the terminal.

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

Weaponized web shell

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

HTTP parameter discovery suite.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019

Peirates - Kubernetes Penetration Testing tool

Some scripts useful for red team activities

SAML2 Burp Extension

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat…

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Small, fast tool for performing reverse DNS lookups en masse.

Script to scrape untappd.com content

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Collection of Aggressor scripts for Cobalt Strike 3.0 pulled from multiple sources

📇 A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

A desktop App to add STIX-2 objects to TAXII-2.0 servers

HackBar plugin for Burpsuite

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location