d3adpenguin's Stars
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
fuzzdb-project/fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
mandiant/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
NullArray/AutoSploit
Automated Mass Exploiter
xoreaxeaxeax/sandsifter
The x86 processor fuzzer
scipag/vulscan
Advanced vulnerability scanning with Nmap NSE
mattnotmax/cyberchef-recipes
A list of cyber-chef recipes and curated links
0x90/wifi-arsenal
WiFi arsenal
trustedsec/hate_crack
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
hashcat/hashcat-utils
Small utilities that are useful in advanced password cracking
umpox/zero-width-detection
Invisibly inserting usernames into text with Zero-Width Characters
the-robot/sqliv
massive SQL injection vulnerability scanner
rastating/wordpress-exploit-framework
A Ruby framework designed to aid in the penetration testing of WordPress systems.
rfunix/Pompem
Find exploit tool
IAIK/ZombieLoad
Proof-of-concept for the ZombieLoad attack
ultrasecurity/webkiller
Tool Information Gathering Write By Python.
nongiach/sudo_inject
[Linux] Two Privilege Escalation techniques abusing sudo token
rek7/mXtract
mXtract - Memory Extractor & Analyzer
ernw/ss7MAPer
SS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use: https://github.com/0xc0decafe/ss7MAPer/
0x90/bluetooth-arsenal
Bluetooth hacking tools
francisck/DanderSpritz_docs
The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers
0x90/wps-scripts
WPS hacking scripts
brav0hax/smbexec
openss7/openss7
openss7 STREAMS and protocol stacks
akibsayyed/safeseven
SS7 Assessment Tool
peterpt/fuzzbunch
Shadow Brokers NSA fuzzbunch tool leak . With windows auto instalation script
0x90/ss7-arsenal
SS7 tools and scripts
Cyb0r9/quasar
Quasar : An Information Gathering Framework For Lazy Penetration Testers
BlackMathIT/Ransomware
Experimental examples of Ransomware in different languages