pich4ya's Stars
OWASP/CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
boardgameio/boardgame.io
State Management and Multiplayer Networking for Turn-Based Games
BloodHoundAD/BloodHound
Six Degrees of Domain Admin
Tib3rius/AutoRecon
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
khast3x/h8mail
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
amlweems/xzbot
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
newbit1/rootAVD
Script to root AVDs running with QEMU Emulator from Android Studio
oskarsve/ms-teams-rce
hausec/ADAPE-Script
Active Directory Assessment and Privilege Escalation Script
fransr/postMessage-tracker
A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon
worawit/blutter
Flutter Mobile Application Reverse Engineering Tool
Cyber-Buddy/APKHunt
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.
TheWover/DInvoke
Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.
hardik05/Damn_Vulnerable_C_Program
An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.
peterferrie/win-exec-calc-shellcode
A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)
major/cis-rhel-ansible
Ansible playbooks for CIS Benchmarks on RHEL/CentOS 6
xorpd/asm_prog_ex
Exercises for Assembly language course
NetSPI/ESC
Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.
kozmic/laravel-poc-CVE-2018-15133
PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
tkyaji/cordova-plugin-crypt-file
This plugin to encrypt the source files.
WaTF-Team/WaTF-Bank
WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS
Hamz-a/boring-flutter
destine21/ZIPFileRaider
ZIP File Raider - Burp Extension for ZIP File Payload Testing
B3nac/deeplink-fuzz.sh
A Bash wrapper for radamsa that can be used to fuzz exported activities and deep links.
stupidpupil/https-keyscript
Allow a machine with an encrypted boot drive to passwordlessly boot by fetching a key over HTTPS.
omerporze/brokentooth
POC for CVE-2018-4327
mainframed/NC110-OMVS
NetCat 110 with changes to support OMVS on z/OS
Bankde/Hack-me-bot
Vulnerable Line bot for demonstration and education
torrentalle/Ubuntu1804-CIS
Ubuntu 18.04 CIS Hardening Ansible Role