dumpit

An exploit for SHAREit <= v 4.0.38

dwarf

Full featured multi arch/os debugger built on top of PyQt5 and frida

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

github-readme-stats

:zap: Dynamically generated stats for your github readmes

jsfscan.sh

Automation for javascript recon in bug bounty.

konan

Konan - Advanced Web Application Dir Scanner

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

malware-samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

malware-samples-1

A collection of malware samples caught by several honeypots i manage

malwaresearch

A command line tool to find malwares on http://openmalware.org

mind-maps

Mind-Maps of Several Things

mobile-nuclei-templates

mobilehackingcheatsheet

Basics on commands/tools/info on how to assess the security of mobile applications

momenbasel

ms-dos

The original sources of MS-DOS 1.25 and 2.0, for reference purposes

one-lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

oneforall

OneForAll是一款功能强大的子域收集工具

orkestra

Android Inspection framework

parrot-plymouth

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcileech

Direct Memory Access (DMA) Attack Software

pentest-cheat-sheets

A collection of snippets of codes and commands to make your life easier!

photon

Incredibly fast crawler designed for OSINT.

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

python-sec-lib

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

qrljacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

r3d-buck3t

Penetration Testing, Vulnerability Assessment and Red Team Learning

re-ios-apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.