cptee

cptee's Stars

• trustedsec/unicorn

  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

  Language:Python3.7k812

• Fahrj/reverse-ssh

  Statically-linked ssh server with reverse shell functionality for CTFs and such

  Language:Go899126

• fuzzdb-project/fuzzdb

  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

  Language:PHP8.1k2.1k

• PortSwigger/java-serialized-payloads

  YSOSERIAL Integration with burp suite

  Language:Java408

• pwntester/ysoserial.net

  Deserialization payload generator for a variety of .NET formatters

  Language:C#3.1k463

• frizb/MSF-Venom-Cheatsheet

  Single Page Cheatsheet for common MSF Venom One Liners

  22969

• spaze/hashes

  Magic hashes – PHP hash "collisions"

  68394

• silentsignal/rsa_sign2n

  Deriving RSA public keys from message-signature pairs

  Language:Python23242

• wallarm/jwt-secrets

  659157

• kunte0/phar-jpg-polyglot

  Phar + JPG Polyglot generator and playground (CTF CODE)

  Language:PHP7214

• PortSwigger/serialization-examples

  Language:Java3817

• frohoff/ysoserial

  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

  Language:Java7.5k1.7k

• ambionics/phpggc

  PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

  Language:PHP3.1k484

• ReekElderblood/URL-Hunter

  Check out this JavaScript code that extracts URLs from a web page and linked scripts! Perfect for web scraping and penetration testing

  163

• massgravel/Microsoft-Activation-Scripts

  A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

  Language:Batchfile88.3k8.6k

• jhaddix/tbhm

  The Bug Hunters Methodology

  3.8k784

• sam5epi0l/Beginner-Bug-Bounty-Automation

  Many script that can be modified according to your needs for Information Gathering and Asset discovery in Bug Bounty Hunting (Pull requests are welcome!)

  Language:Python246

• kh4sh3i/smartrecon

  smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

  Language:Shell13137

• vavkamil/awesome-bugbounty-tools

  A curated list of various bug bounty tools

  3.9k628

• gwen001/github-subdomains

  Find subdomains on GitHub.

  Language:Go64399

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go11.6k1.8k

• tomnomnom/meg

  Fetch many paths for many hosts - without killing the hosts

  Language:Go1.6k265

• HeyM1ke/ValorantClientAPI

  Information on Valorant's Private/In-Game API

  Language:Python37649

• newbit1/rootAVD

  Script to root AVDs running with QEMU Emulator from Android Studio

  Language:Shell1.4k173

• NVISOsecurity/MagiskTrustUserCerts

  A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

  Language:Shell1.7k191

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python58.7k14.3k

• squizlabs/PHP_CodeSniffer

  PHP_CodeSniffer tokenizes PHP files and detects violations of a defined set of coding standards.

  Language:PHP10.6k1.5k

• leonhartX/gas-github

  sync gas code to github

  Language:JavaScript3.4k69

• TryCatchHCF/PacketWhisper

  PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

  Language:Python617118

• fortra/impacket

  Impacket is a collection of Python classes for working with network protocols.

  Language:Python13.1k3.5k