This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

Trying to tame the three-headed dog.

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Privilege Escalation Enumeration Script for Windows

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

Fast subdomains enumeration tool for penetration testers

Automatic SQL injection and database takeover tool

渗透测试报告/资料文档/渗透经验文档/安全书籍

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

Fluxion is a remake of linset by vk496 with enhanced functionality.

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With …

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

🤖 The Modern Port Scanner 🤖

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Wazuh - 开源安全平台。针对端点和云工作负载的统一 XDR 和 SIEM 保护。

Chunsou（春蒐），Python3编写的多线程Web指纹识别工具,适用于安全测试人员前期的资产识别、风险收敛以及企业互联网资产风险摸查。

灯塔（最新版）指纹添加脚本！

A `.git` folder disclosure exploit

Binaries for the CodeQL CLI

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

OctoMation是一款免费的，具有可视化拖拽功能的编排与自动化产品。通过精心编排的Playbook，OctoMation能够联动数百款安全、网络、IT和SaaS等产品的基础能力。其主要特点包括低代码剧本编排、自动化事件响应、标准化流程操作以及可视化过程监控。 借助OctoMation，运营团队能够开展7x24小时自动化事件响应，不仅可以大幅减少对人员的过度依赖，还能确保团队工作质量始终维…

Developing a more covert Remote Access Trojan (RAT) tool by leveraging Electron's features for command injection and combining it with remote control methods.

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.