pich4ya

pich4ya's Stars

• OWASP/CheatSheetSeries

  The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

  Language:Python27.5k5684393.8k

• vulhub/vulhub

  Pre-Built Vulnerable Environments Based on Docker-Compose

  Language:Dockerfile17.4k5761814.4k

• boardgameio/boardgame.io

  State Management and Multiplayer Networking for Turn-Based Games

  Language:TypeScript10k144557705

• BloodHoundAD/BloodHound

  Six Degrees of Domain Admin

  Language:PowerShell9.7k3755091.7k

• Tib3rius/AutoRecon

  AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

  Language:Python5k102166864

• khast3x/h8mail

  Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

  Language:Python4.1k124130515

• amlweems/xzbot

  notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

  Language:Go3.5k390232

• newbit1/rootAVD

  Script to root AVDs running with QEMU Emulator from Android Studio

  Language:Shell1.4k1787176

• oskarsve/ms-teams-rce

  1.1k37978

• hausec/ADAPE-Script

  Active Directory Assessment and Privilege Escalation Script

  Language:PowerShell1.1k543210

• fransr/postMessage-tracker

  A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

  Language:JavaScript1k365142

• worawit/blutter

  Flutter Mobile Application Reverse Engineering Tool

  Language:C++8632185135

• Cyber-Buddy/APKHunt

  APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

  Language:Go72513773

• TheWover/DInvoke

  Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

  Language:C#6601419107

• hardik05/Damn_Vulnerable_C_Program

  An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

  Language:Rust656157132

• peterferrie/win-exec-calc-shellcode

  A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)

  Language:Assembly36620089

• major/cis-rhel-ansible

  Ansible playbooks for CIS Benchmarks on RHEL/CentOS 6

  3418226185

• xorpd/asm_prog_ex

  Exercises for Assembly language course

  Language:Assembly326302114

• NetSPI/ESC

  Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

  Language:C#27410240

• kozmic/laravel-poc-CVE-2018-15133

  PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

  Language:Dockerfile2476738

• tkyaji/cordova-plugin-crypt-file

  This plugin to encrypt the source files.

  Language:JavaScript1782990116

• WaTF-Team/WaTF-Bank

  WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS

  Language:C1277342

• Hamz-a/boring-flutter

  Language:Python716016

• destine21/ZIPFileRaider

  ZIP File Raider - Burp Extension for ZIP File Payload Testing

  Language:Python701312

• B3nac/deeplink-fuzz.sh

  A Bash wrapper for radamsa that can be used to fuzz exported activities and deep links.

  Language:Shell502012

• stupidpupil/https-keyscript

  Allow a machine with an encrypted boot drive to passwordlessly boot by fetching a key over HTTPS.

  Language:Shell4271110

• omerporze/brokentooth

  POC for CVE-2018-4327

  Language:Objective-C41309

• mainframed/NC110-OMVS

  NetCat 110 with changes to support OMVS on z/OS

  Language:C9302

• Bankde/Hack-me-bot

  Vulnerable Line bot for demonstration and education

  Language:Python7202

• torrentalle/Ubuntu1804-CIS

  Ubuntu 18.04 CIS Hardening Ansible Role

  Language:Makefile2100