Pinned Repositories
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
awesome-web-hacking
A list of web application security
cortana-scripts
A collection of Cortana scripts that you may use with Armitage and Cobalt Strike.
Docker-Exorcise
Exploit Docker Daemon - Unprotected TCP Socket
ExploidingCAN
NSA's IIS 6.0 exploit that creates a remote backdoor.
iOSRestrictionBruteForce
Crack iOS Restriction Passcodes with Python
MCSC-Lab
MCSC Lab containing the Malware, Malware.vbs and Deobfuscator.
MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
operative-framework-HD
operative framework HD is the digital investigation framework, you can interact with websites, email address, company, people, ip address ... interact with basic/graphical view and export with XML, JSON
PullAllJs
An automated tool that pulls and organizes All JS files from web targets.
0thm4n3's Repositories
0thm4n3/cve-2020-14882
Bash script to exploit the Oracle's Weblogic Unauthenticated Remote Command Execution - CVE-2020-14882
0thm4n3/Docker-Exorcise
Exploit Docker Daemon - Unprotected TCP Socket
0thm4n3/PullAllJs
An automated tool that pulls and organizes All JS files from web targets.
0thm4n3/0thm4n3.github.io
0thm4n3/AD-Red-Team-Hacking-Course
Active Directory Pentesting Full Course - Red Team Hacking
0thm4n3/Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
0thm4n3/bloodyAD
BloodyAD is an Active Directory Privilege Escalation Framework
0thm4n3/cuttlefish
Transactional email server with a lovely web interface
0thm4n3/cve-2020-0796
CVE-2020-0796 - a wormable SMBv3 vulnerability. How to work.
0thm4n3/CVE-2020-5902
CVE-2020-5902 BIG-IP
0thm4n3/CVE-2021-3156
Root shell PoC for CVE-2021-3156
0thm4n3/DahuaConsole
Dahua Console, access internal debug console and/or other researched functions in Dahua devices. Feel free to contribute in this project.
0thm4n3/docker-vulnerable-dvwa
Damn Vulnerable Web Application Docker container
0thm4n3/Eumio
A collection of assets for my flipper zero
0thm4n3/exphub
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
0thm4n3/ghost
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device. Ghost Framework gives you the power and convenience of remote Android device administration.
0thm4n3/IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
0thm4n3/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
0thm4n3/malicious-pdf
Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator
0thm4n3/osi.ig
Information Gathering Instagram.
0thm4n3/paradoxiaRAT
ParadoxiaRat : Native Windows Remote access Tool.
0thm4n3/PwnFox
PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
0thm4n3/qark
Tool to look for several security related Android application vulnerabilities
0thm4n3/Red-Teaming-Toolkit
A collection of open source and commercial tools that aid in red team operations.
0thm4n3/smuggler
Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
0thm4n3/sploitcraft
🏴☠️ Hacking Guides, Demos and Proof-of-Concepts 🥷
0thm4n3/TProxer
A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.
0thm4n3/wstg
The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.
0thm4n3/xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
0thm4n3/XXEinjector
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.