A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

APT & CyberCriminal Campaign Collection

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Code samples for No Starch Press Black Hat Go

Fast subdomains enumeration tool for penetration testers

Script repository for the book Cybersecurity Ops with bash

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Linux Shell Scripting Cookbook Third Edition, published by Packt

The most complete open-source tool for Twitter intelligence analysis

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

✍️ A curated list of CVE PoCs.

Exploit for CVE-2019-11043

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Fast web fuzzer written in Go

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, i…

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Download the entire Wayback Machine archive for a given URL.

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

Extract credentials from lsass remotely

The original slurp source

Protect and discover secrets using Gitleaks 🔑

The Rogue Access Point Framework

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.