s4n7h0 Goto Github PK

nse

Some works on Nmap Scripts (NSE)

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

payloads

Git All the Payloads! A collection of web attack payloads.

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

practical-reverse-engineering-using-radare2

Training Materials of Practical Reverse Engineering using Radare2

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

python-docx

Create and modify Word documents with Python

pythonpentest

A repository for large scripts from my book.

r2-scripts

Multiple radare2 rpipe scripts

raptor

Web-based Source Code Vulnerability Scanner

readme-template

README.md template for your open-source project

reaper

Vulnerability Workflow Management Tool

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

resources

Reverse Engineering Resources

resume

Markdown -> PDF/HTML resumé generator

s4n7h0

script-bucket

Scripts developed for my researches in various languages - bash, python and lot more.

scripts

Scripts I use during pentest engagements.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security-research

Misc resources and documents on my security research

smashing_the_browser

Smashing The Browser: From Vulnerability Discovery To Exploit

thezoo

A repository of LIVE malwares for your own joy and pleasure

threatelligence

Threatelligence is a simple cyber threat intelligence feed collector, using Elasticsearch, Kibana and Python to automatically collect intelligence from custom or public sources. Automatically updates feeds and tries to further enhance data for dashboards.

timesketch

Collaborative forensics timeline analysis

workshop2015

xvwa

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.