reverse-engineering-tutorials

Some Reverse Engineering Tutorials for Beginners

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretx

Extracting api keys and secrets by requesting each url at the your list.

secure-ios-app-dev

Collection of the most common vulnerabilities found in iOS applications

security-bookmarks

security-links

Security Links That i gathered Along the way

shadowbroker

The Shadow Brokers "Lost In Translation" leak

signaturegate

Weaponized HellsGate/SigFlip

smuc

Simplified MITRE Use Cases, it describes the Attack and Detection

starkiller

Starkiller is a Frontend for PowerShell Empire.

statica

subjack

Hostile Subdomain Takeover tool written in Go

tfnp

Techniques For Network Ports

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-nuclei-templates

Nuclei templates

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software

tiny-php-webshell

several list of simple and obfuscate PHP shell

tinyinst

A lightweight dynamic instrumentation library

tools-tbhm

Tools of "The Bug Hunters Methodology V2 by @jhaddix"

training

Training materials crafted and publicly provided by Red Naga members

useful_websites_for_pentester

This repository is to make life of the pentester easy as it is a collection of the websites that can be used by pentesters for day to day studies and to remain updated.

vdr

Vulnerable driver research tool, result and exploit PoCs

virtual-host-discovery

A script to enumerate virtual hosts on a server.

vulfi

whatsapp-rce-patched

cve-2019-11931

winafl

A fork of AFL for fuzzing Windows binaries

windbg-cheat-sheet

My personal cheat sheet for using WinDbg for kernel debugging

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

windows-post-exploitation

Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!