Repositories list

• paas-cloud-goat

  Public
  PaaS Cloud Goat is a simulated vulnerable Salesforce application providing hands-on experience with penetration testing of custom Salesforce applications.

  Apex

  •

  GNU Affero General Public License v3.0

  •3•2•0•0•Updated Nov 21, 2024Nov 21, 2024

• npk

  Public
  A mostly-serverless distributed hash cracking platform

  JavaScript

  •154•795•10•7•Updated Apr 6, 2024Apr 6, 2024

• ERC.Xdbg

  Public
  An Xdbg Plugin of the ERC Library.

  windowscsharpexploitation+ 3exploitation-frameworkx64dbg-pluginexploit-development

  C#

  •

  MIT License

  •1•26•0•0•Updated Feb 1, 2024Feb 1, 2024

• cazt

  Public
  Cloud AuthZ Trainer - A a simulator of cloud-provider responsible REST APIs. It includes a lab manual for getting hands-on practice with how to attack authorization vulnerabilities in a cloud API.

  Python

  •

  GNU Affero General Public License v3.0

  •1•2•0•0•Updated Oct 24, 2023Oct 24, 2023

• Slackor

  Public
  A Golang implant that uses Slack as a command and control server

  pythongolangpenetration-testing+ 6pentestred-teamremote-admin-toolc2command-and-controlpenetration-testing-tools

  Python

  •

  GNU General Public License v3.0

  •108•458•4•4•Updated Feb 25, 2023Feb 25, 2023

• pymetasploit3

  Public
  Python3 Metasploit automation library

  PowerShell

  •

  MIT License

  •5•20•0•2•Updated Dec 8, 2022Dec 8, 2022

• sqlinator

  Public
  Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS

  pluginsecurityxss+ 3webappsmitmproxysqlinjection

  Python

  •21•81•1•4•Updated Dec 8, 2022Dec 8, 2022

• autorelayx

  Public
  Automatically perform advanced NTLM hash relay attacks

  Python

  •5•14•0•3•Updated Nov 4, 2022Nov 4, 2022

• WinAPRS-Exploits

  Public
  A collection of exploits, shellcode, and tools related to CVE-2022-24702

  shellwordpress

  Python

  •

  Creative Commons Zero v1.0 Universal

  •2•8•0•0•Updated Apr 1, 2022Apr 1, 2022

• ERC.Net

  Public
  A collection of tools for debugging Windows application crashes.

  C#

  •

  GNU General Public License v3.0

  •2•9•0•0•Updated Mar 14, 2022Mar 14, 2022

• SOC2-guide

  Public
  Documenting SOC 2 tools and processes

  MIT License

  •15•1•0•0•Updated Jan 19, 2022Jan 19, 2022

• java-deserialization-exploits

  Public
  A collection of curated Java Deserialization Exploits

  javaexploitscve+ 1deserialization-rce

  Python

  •219•590•2•1•Updated May 16, 2021May 16, 2021

• postman-integration-aws

  Public
  Postman Integration is an extension for burp to generate Postman collection fomat json file.

  Java

  •

  MIT License

  •9•1•0•0•Updated Apr 7, 2021Apr 7, 2021

• webvulns-db

  Public
  Webvulns-db scripts

  Python

  •2•1•0•0•Updated Apr 7, 2021Apr 7, 2021

• AppSec-2014-Presentation

  Public
  Presentation for Application Hacking 101 at AppSec 2014

  4•2•0•0•Updated Apr 6, 2021Apr 6, 2021

• IP-sampler

  Public
  Ping sweep a list of subnets then save a random % sample of the hosts that are up

  Python

  •10•9•0•0•Updated Apr 6, 2021Apr 6, 2021

• Doozer

  Public
  Password cracking utility

  Python

  •31•51•0•0•Updated Apr 6, 2021Apr 6, 2021

• Nmap-Extensions

  Public
  Extensions to Nmap written for the NSE

  Lua

  •8•5•0•0•Updated Apr 6, 2021Apr 6, 2021

• HashBot

  Public
  IRC bot for cracking hashes

  Python

  •13•18•3•0•Updated Apr 6, 2021Apr 6, 2021

• iOS-11.1.2-15B202-Jailbreak

  Public
  iOS 11.1.2 (15B202) Jailbreak

  ios11jailbreak

  C

  •98•431•9•0•Updated Apr 6, 2021Apr 6, 2021

• AnomalousCookie

  Public
  Find anomalies using AnomalousCookie!

  Python

  •

  MIT License

  •6•6•0•0•Updated Apr 6, 2021Apr 6, 2021

• DeathMetal

  Public
  Red team & penetration testing tools to exploit the capabilities of Intel AMT

  Python

  •

  Other

  •34•255•3•1•Updated Apr 6, 2021Apr 6, 2021

• Git-Scrapers

  Public
  Collect OSINT from git repositories

  githubgitosint+ 1developers

  Ruby

  •

  Other

  •8•18•3•0•Updated Apr 6, 2021Apr 6, 2021

• Vampire

  Public
  Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.

  active-directorybloodhoundcobalt-strike+ 2cnaaggressor

  Python

  •

  Other

  •19•77•1•0•Updated Apr 6, 2021Apr 6, 2021

• LambProxy

  Public
  HTTP Proxy using Amazon Lambda for source IP cycling

  Python

  •

  GNU General Public License v3.0

  •0•15•0•0•Updated Apr 6, 2021Apr 6, 2021

• Red-Baron

  Public
  Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

  securityterraforminfrastructure-as-code+ 3security-toolsterraform-modulered-teams

  HCL

  •

  GNU General Public License v3.0

  •260•881•9•3•Updated Apr 6, 2021Apr 6, 2021

• freezeout

  Public
  Notes on acquiring a domain user list via kerberos

  credentialsbruteforcenmap+ 4kerberosmsfusername-checkerlateral-spray

  Python

  •1•1•0•0•Updated Apr 6, 2021Apr 6, 2021

• Empire

  Public
  Empire is a pure PowerShell post-exploitation agent.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •2.8k•3•0•0•Updated Nov 4, 2015Nov 4, 2015

• twittor

  Public
  A fully featured backdoor that uses Twitter as a C&C server

  Python

  •

  MIT License

  •216•5•0•0•Updated Sep 9, 2015Sep 9, 2015