304124 matches found
XSScope
Go beyond the alert XSScope is one of the most advanced GUI Framework for XSS Clientside attacks. It can perform different XSS attack and HTML Injection in real time. Features Perform XSS botnet attacks. Every victim who is affected by XSS payload in the webserver, will contantly bind the payload...
noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Github Action • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies...
tamago
TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors. The projects spawns from the desire of...
LKWA
LKWA Lesser Known Web Attack Lab is for intermediate pentester that can test and practice lesser known web attacks such as Object Injection, XSSI, PHAR Deserialization, variables variable ..etc. Write-ups are welcome. My own walk-through is here . Installation - Local Just clone the git with git...
rmiscout
Description RMIScout enables wordlist and bruteforce attacks against exposed Java RMI interfaces to safely guess method signatures without invocation. It supports multiple Java RMI protocols, method invocation, and exploitation. Feature overview Supports multiple types of Java RMI servers: RMI-JR...
cloud-custodian
Cloud Custodian c7n Cloud Custodian, also known as c7n, is a rules engine for managing public cloud accounts and resources. It allows users to define policies to enable a well managed cloud infrastructure, that's both secure and cost optimized. It consolidates many of the adhoc scripts...
CVE-2025-56503
CVE-2025-56503 Description An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. Affected Product Sublime Text 4, Versio...
ufonet
Website: https://ufonet.03c8.net Description: UFONet - is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 APP/HTTP through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3...
MifareClassicTool
MIFARE Classic Tool MCT An Android NFC app for reading, writing, analyzing, etc. MIFARE Classic RFID tags. Read this information in other languages: English 简体中文 正體中文 Helpful links: MIFARE Classic Tool Donate Version on Google Play Screenshots Help & Info/User Manual Additional stuff Documentatio...
singularity
Singularity of Origin Recent updates: NEW 2025-11-25 : Chrome release 142 added Local Network Access LNA, which prevents DNS rebinding attack techniques implemented in Singularity. Singularity of Origin's LNA-from-Non-Secure-Contexts branch implements support for Trial for Local Network Access fr...
raven
Raven - Advanced Cyber Threat Map Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, 100,000 cities, and can be used in an isolated environment without external lookups!. Structure Offline - Demo Firefox, Chrome or Safari Live - Regression 500 attacks at onc...
PowerShell-Red-Team
PowerShell-Red-Team-Enum Collection of PowerShell functions a Red Teamer may use to collect data from a machine or gain access to a target. I added ps1 files for the commands that are included in the RedTeamEnum module. This will allow you to easily find and use only one command if that is all yo...
MHDDoS
MHDDoS DDoS Testing Toolkit · 57 Methods · Python 3 For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice !CAUTION...
geoip-attack-map
First and Foremost I do not have much time in my life right now to maintain this project. I undertook this challenge as a means to learn JavaScript, and to improve upon the Python I already knew. I'm sure there are several things I could have done differently in my implementation, and I won't be...
RsaCtfTool
RsaCtfTool RSA multi-attack tool that decrypts data from weak public keys and recovers private keys. Overview This tool is a utility designed to decrypt data from weak public keys and attempt to recover the corresponding private key. It offers a comprehensive range of attack options for cracking...
android_hid
androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...
netattack
NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...
uC_mousejack
μC Mousejack Microcontroller Mousejack is a project to get Mousejack attacks into a small embedded device, with the form factor of a key chain. Prototype Mousejack Device Our first iteration uses an Adafruit Feather 32u4 protoboard and a SPI-based NRF24L01+ module. Building the device is...
Max
Maximizing BloodHound with a simple suite of tools Description New Release: dpat - The BloodHound Domain Password Audit Tool DPAT A simple suite of tools: get-info - Pull lists of information from the Neo4j database mark-owned - Mark a list of objects as Owned mark-hvt - Mark a list of objects...