ossumpossum's Stars
safebuffer/vulnerable-AD
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
zmap/zgrab2
Fast Go Application Scanner
SysSec-KAIST/LTESniffer
An Open-source LTE Downlink/Uplink Eavesdropper
trickest/wordlists
Real-world infosec wordlists, updated regularly
projectdiscovery/cloudlist
Cloudlist is a tool for listing Assets from multiple Cloud Providers.
NoDataFound/hackGPT
I leverage OpenAI and ChatGPT to do hackerish things
projectdiscovery/alterx
Fast and customizable subdomain wordlist generator using DSL
utkusen/socialhunter
crawls the website and finds broken social media links that can be hijacked
rvrsh3ll/TokenTactics
Azure JWT Token Manipulation Toolset
AggressiveUser/AllForOne
AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,
anantshri/svn-extractor
simple script to extract all web resources by means of .SVN folder exposed over network.
ThreatLabz/ransomware_notes
An Archive of Ransomware Notes Past and Present Collected by Zscaler ThreatLabz
assetnote/ghostbuster
Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
binarly-io/SupplyChainAttacks
codingo/dorky
A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon
Josue87/AnalyticsRelationships
Get related domains / subdomains by looking at Google Analytics IDs
spekulatius/infosec-dorks
A Personal Collection of Infosec Dorks
nullenc0de/gofuzz
horizon3ai/CVE-2023-34362
MOVEit CVE-2023-34362
fr0gger/unprotect
Unprotect is a python tool for parsing PE malware and extract evasion techniques.
vah13/SAP_exploit
Here you can get full exploit for SAP NetWeaver AS JAVA
N1arut/Pentesting-Mind-Map
Web Hacking and Red Teaming MindMap
sfewer-r7/CVE-2023-34362
CVE-2023-34362: MOVEit Transfer Unauthenticated RCE
tr3ss/newclei
A Go tool that gets the newest PRs from projectdiscovery/nuclei-templates.
dxnboy/redteam
Luizfsn/offensive-security-practices-cheatsheet
zruvv/OffensiveSecurity
Penetration Testing & Red Team tools & scripts
ZephrFish/MoveIT-WebShellCheck
0xZipp0/SQL-injection-dorks-list
Nice list of google dorks for SQL injection
mhasan-dh/salesforce-scanner
A scanner for Salesforce aura misconfigurations.