fronthunter

FrontHunter FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. Domain Fronting? Really? I know, I know… domain fronting is pretty old. But the truth is, it’s still useful as just another feature to include in your C2 infrastructure. When it comes ...

AwesomeXSS

AwesomeXSS This repository is a collection of Awesome XSS resources. Contributions are welcome and should be submitted via an issue. Awesome contents Challenges Reads & Presentations Tools Mind maps DOM XSS Payloads Polyglots Tags and event handlers Context breaking HTML context Attribute context...

Arduino-Netcat-Backdoor

Arduino - Netcat - Backdoor for Windows Name suggestions welcome. Proof Of Concept. Not intended for real life use. I can't take responsibillity for stuff other people do with this Attacks a Windows machine running Windows 7 or later, creating a persistent Backdoor. Funtionallity The Arduino-scri...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

LetMeFuckIt-Scanner

LetMeFuckIt Scanner AutoPWNED Scanner and Exploit Magento The Scanner explores the SQLi Vulnerability 1.9.1.0 CE of Magento. The vulnerability was fixed in Patch SUPEE-5344 , however, the scanner is used to locate and test systems that did not apply the security patch. LetMeFuckIt was written in...

cve-2016-0040

cve-2016-0040 poc for cve-2016-0040 bug found and exploited by Meysam Firozi @R00tkitSmm this poc help write arbitrary data to arbitrary address in windows kernel for more info see ny blog : http://ioctl.ir/index.php/2016/02/13/cve-2016-0040-story-of-uninitialized-pointer/...

rep-chrome

rep+ rep+ is a lightweight Chrome DevTools extension inspired by Burp Suite's Repeater, now supercharged with AI. I often need to poke at a few requests without spinning up the full Burp stack, so I built this extension to keep my workflow fast, focused, and intelligent with integrated LLM suppor...

CVE-2024-53255

CVE-2024-53255 boid CMS 2.1.1 - reflected Cross-Site Scripting XSS Description: A reflected XSS vulnerability exists in the /admin?page=media endpoint in the file parameter, allowing an attacker to inject arbitrary JavaScript code Steps to exploit: 1- Login to the CMS and Navigate to the delete...

blackout-public

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website...

Red-Teaming-TTPs

!CAUTION This repository contains cheatsheets, notes, and scripts related to my learning in cybersecurity, particularly Red Teaming. You'll find a variety of resources that I've compiled over the years, including: Cheatsheets : Quick reference guides for common tools and techniques. Guides :...

turbinia

Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...

zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Try it curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' Benchmarks Metric| Zeroboot| E2B|...

LinkFinder

About LinkFinder LinkFinder is a python script written to discover endpoints and their parameters in JavaScript files. This way penetration testers and bug hunters are able to gather new, hidden endpoints on the websites they are testing. Resulting in new testing ground, possibility containing ne...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

evilginx2

Evilginx 3.0 Evilginx is a man-in-the-middle attack framework used for phishing login credentials along with session cookies, which in turn allows to bypass 2-factor authentication protection. This tool is a successor to Evilginx, released in 2017, which used a custom version of nginx HTTP server...

Gxss

Project is now Deprecated as Dalfox has discovery option which can be used to identify reflecting params dalfox file urls.txt --skip-xss-scanning -o reflecting.txt Gxss v4.0 A Light Weight Tool for checking reflecting Parameters in a URL. Inspired by kxss by @tomnomnom. Installation go install...

SSRFmap

SSRFmap SSRF are often used to leverage actions on other services, this framework aims to find and exploit these services easily. SSRFmap takes a Burp request file as input and a parameter to fuzz. Server Side Request Forgery or SSRF is a vulnerability in which an attacker forces a server to...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

BeaconHunter

BeaconHunter Behavior based monitoring and hunting tool built in C leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons. Author :...

scarce-apache2

ScaRCE Framework - CVE-2021-41773 Hunter This tool can scan websites with CVE-2021-41773 Vulnerability that are affecting Apache2 Webserver, ScaRCE can run too for executing Remote Command Injections at the webservers that found from the scanning method Only if the MODCGI is Enabled at the target...