PocList

PocList A collection of self-written vulnerability POCs and EXPs. After specifying the URL file, the POC script can perform multi-threaded batch scanning of targets for verification; the EXP script can exploit vulnerabilities, such as file reading, uploading webshells, command execution, etc...

SecBugs

Security Bugs Full disclosures for CVE ids, proofs of concept, exploits, 0day bugs and so on...

exploits

Exploits Exploits and proof-of-concept code from the team at Hacker House. Filename| Description ---|--- AirWatchMDMJailbreakBypass.txt| Bypass jailbreak detection on mobile device management AirWatch for IOS adobe-psp.tgz| Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow PSP bypass...

dga-collection

DGA Collection A collection of known Domain Generation Algorithms: Torpig ZeusBot Cryptolocker Necurs Symmi Ranbyus Usage For each DGA, the list of domains can be easily generated: from datetime import date from Necurs import Necurs Compute domains for the current day/period: Necurs.domains Compu...

ForensicMiner

ForensicMiner v1.4 "ForensicMiner, Redefine DFIR Automations" Created & Maintained by: Eilay Yosfan What is ForensicMiner ? ForensicMiner, a PowerShell-based DFIR automation tool, revolutionizes the field of digital investigations. Designed for efficiency, it automates artifact and evidence...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

Ultimate-Social-Scrapers

Ultimate Social Scrapers by Cyfy Labs 📢 Important Update 📢 Cyfy Labs is no longer active. Thank you for all your support on this journey! 🫶 Cyfy Labs provides modern social media scraping tools. Our products enable businesses and researchers to collect hundreds of public data points for use cases...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

Jbin-website-secret-scraper

🎖️ Jbin will gather all the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it. Also if you are looking for a specific string in a page or want to run custom regex then you can do that too now with the new...

DorXNG

DorXNG 🔎🌎 DorXNG is a modern solution for harvesting OSINT data using advanced search engine operators through multiple upstream search providers. On the backend it leverages a purpose built containerized image of SearXNG, a self-hosted, hackable, privacy focused, meta-search engine. Our SearXNG...

all-my-collection-repos

All Resource Collection Projects: All open source security tools I collected: sec-tool-list: More than 21K. Both Markdown and Json format. Github Security Resource Collection Repos: 1000+ Github Repos about Security Resource Collection Reverse Engineering Resources For All Platforms: Windows:...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

Fennec

Fennec 🦊 fennec is an artifact collection tool written in Rust to be used during incident response on nix based systems. fennec allows you to write a configuration file that contains how to collect artifacts. Features 🌟 🦀 A single statically compiled binary 🔬 Execute any osquery SQL query 💻 Execu...

MacHound

What is MacHound MacHound is an extension to the Bloodhound audting tool allowing collecting and ingesting of Active Directory relationships on MacOS hosts. MacHound collects information about logged-in users, and administrative group members on Mac machines and ingest the information into the...

bugz-tools

bugz-tools A collection of tools I wrote for bug bounty or hacking and don't mind publishing it 😄 Donation If my work has been useful for you, feel free to thank me by buying me a coffee or more : Disclaimer All tools here are created to help in penetration testing/bug bounty and not responsible...

Lazymux

Lazymux Lazymux tools installer is very easy to use, only provided for lazy termux users; it's huge list of Many Hacking tools and PEN TESTING! NOTE: Am not Responsible of bad use of this project. Screenshot Requirements • Linux environment • Python 2.x • git Installation and Using Lazymux git...

pentest_lab

Pentest Lab I'm not actively developing on this anymore, but will fix bugs and look at issues and pull requests. Help is appreciated : This local pentest lab leverages docker compose to spin up multiple victim services and an attacker service running Kali Linux. If you run this lab for the first...

harpoon

Harpoon / / / / / // / / / / / / \ / / // / / / // / // / // / / / / // //,// / .//// // // , , "o" o -- -- o / \ o / \ \o / / | X | / / \ / / \ \ / / / -. .- A collection of scripts and payloads and such for hacking containers and k8s junk...

MalPipe

MalPipe //\ | | / / \ / | |/ // | ' \ / \ / //\ \ | | / /| | | | / / /,|/ || ./ | || MalPipe is a modular malware and indicator collection and processing framework. It is designed to pull malware, domains, URLs and IP addresses from multiple feeds, enrich the collected data and export the...

jackdaw

jackdaw gather gather gather What is this? Jackdaw is here to collect all information in your domain, store it in a SQL database and show you nice graphs on how your domain objects interact with each-other an how a potential attacker may exploit these interactions. It also comes with a handy...