Hippi3Hack3r

Hippi3Hack3r's Stars

• ivan-sincek/ios-penetration-testing-cheat-sheet

  Work in progress...

  Language:JavaScript31356

• libimobiledevice/ideviceinstaller

  Manage apps of iOS devices

  Language:C1.3k262

• optiv/doppelganger

  Doppelgänger is firmware that runs on ESP32 devices that can be embedded within commercially available RFID readers with the intent of capturing access control card data while performing physical security assessments. Doppelgänger keeps the operator's ease of access, maintenance, and operational communications in mind.

  Language:C++139

• ambionics/phpggc

  PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

  Language:PHP3.3k504

• mishmashclone/timip-OSWE

  https://github.com/timip/OSWE

  184

• Hippi3Hack3r/YAVAA

  Yet Another Vulnerable Android Application. The purpose of this app is to teach the exploitation of multiple vulnerabilities in a CTF style environment.

  Language:Kotlin3

• BishopFox/jsluice

  Extract URLs, paths, secrets, and other interesting bits from JavaScript

  Language:Go1.4k96

• ImpostorKeanu/parsuite

  Simple parser framework.

  Language:Python244

• sensepost/wpa_sycophant

  Evil client portion of EAP relay attack

  Language:C19135

• sensepost/hostapd-mana

  SensePost's modified hostapd for wifi attacks.

  Language:C550128

• GoogleCloudPlatform/esp-v2

  A service proxy that provides API management capabilities using Google Service Infrastructure.

  Language:Go272171

• ImpostorKeanu/eavesarp

  Analyze ARP requests to identify intercommunicating hosts and stale network address configurations (SNACs)

  Language:Python6211

• SimplySecurity/SimplyTemplate

  Phishing Template Generation Made Easy

  Language:Python16344

• Kyuu-Ji/Awesome-Azure-Pentest

  A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.

  1k187

• trustedsec/hardcidr

  hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.

  Language:Shell36856

• fuzzdb-project/fuzzdb

  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

  Language:PHP8.3k2.1k

• lgandx/Responder

  Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

  Language:Python5.5k778

• 801labs/OSCP_templates

  72

• TheNerdlist/nerdlist

  list of passwords more likely to be used by sysadmins, general nerds, and folk with access

  Language:Python25767

• NVISOsecurity/MagiskTrustUserCerts

  A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

  Language:Shell1.8k213

• DC801/BM-Badge

  The DC801 Badge Platform for DC28+

  Language:JavaScript569

• ITI/ICS-Security-Tools

  Tools, tips, tricks, and more for exploring ICS Security.

  Language:HTML1.6k440

• Ayrx/proxycat

  Simple transparent proxy setup for Android

  Language:Rust196

• WithSecureLabs/android-keystore-audit

  Language:JavaScript406105

• RedSiege/EyeWitness

  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

  Language:Python5k850

• dafthack/CloudPentestCheatsheets

  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

  2.6k513

• RhinoSecurityLabs/cloudgoat

  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

  Language:Python3k625

• dafthack/MSOLSpray

  A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

  Language:PowerShell913170

• kunte0/phar-jpg-polyglot

  Phar + JPG Polyglot generator and playground (CTF CODE)

  Language:PHP7414

• aosp-mirror/platform_build

  Language:Makefile422718