HTTP parameter discovery suite.

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Collection of scripts & fingerprinting tricks for Shodan.io

Dex to Java decompiler

XXE Out of Band Server.

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

Bug Bounty Roadmaps

A big list of Android Hackerone disclosed reports and other resources.

A collected list of awesome security talks

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Sysmon configuration file template with default high-quality event tracing

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

Basics on commands/tools/info on how to assess the security of mobile applications

Test tool for CVE-2020-1472

HttpDoom is a tool for response-based inspection of websites across a large amount of hosts for quickly gaining an overview of HTTP-based attack surface.

Typed interactions with the GitHub API v3

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

hydra

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

CeWL is a Custom Word List Generator

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

A curated list of different AFL forks and AFL inspired fuzzers with detailed equivalent academic papers and AFL-fuzzing tutorials

OneForAll是一款功能强大的子域收集工具

HTTrack Website Copier, copy websites to your computer (Official repository)

🐛 A list of writeups from the Google VRP Bug Bounty program

Adversary Tactics - PowerShell Training