A big list of Android Hackerone disclosed reports and other resources.

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

Your favorite operating systems in one place. A network-based bootable operating system installer based on iPXE.

ScriptSentry finds misconfigured and dangerous logon scripts.

grep rough audit - source code auditing tool

Apply a divide and conquer approach to bypass EDRs

Python3 terminal application that contains 405 Neo4j cyphers for BloodHound data sets and 388 GUI cyphers

Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.

StandIn is a small .NET35/45 AD post-exploitation toolkit

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Maximizing BloodHound. Max is a good boy.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

An open-source, free protector for .NET applications

A collection oneliner scripts for bug bounty

A C# penetration testing tool to discover low-haning web fruit via web requests.

Ultimate Solidity, Blockchain, and Smart Contract - Beginner to Expert Full Course | Python Edition

CrackQ: A Python Hashcat cracking queue system

Most advanced XSS scanner.

HTTP parameter discovery suite.

Tool for Active Directory Certificate Services enumeration and abuse

Python implementation for CVE-2021-42278 (Active Directory Privilege Escalation)

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit