ulastemiz Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

amass

In-depth Attack Surface Mapping and Asset Discovery

archivist

A ctypes powered python keylogger.

arp-spoofer

A Simple ARP Spoofer using Scapy

assetnote

Push notifications for passive DNS data

assh

:computer: make your ssh client smarter

atomic-red-team

Small and highly portable detection tests.

autopeer

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

awesome-malware-development

Organized list of my malware development resources

berty

Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bheh-sub-pwner

This bash script tool, will perform advanced subdomain enumeration, save the results, it will then probe the subdomains into urls, save the results in a separate file, it will then resolve all the subdomains into ip addresses and save the results separately.

bheh_php_shell

Black Hat Ethical Hacking | PHP Backdoor Shell v1.0

brew

🍺 The missing package manager for macOS (or Linux)

bsf

Botnet Simulation Framework

build_a_phish

Ansible playbook to deploy a phishing engagement in the cloud.

burp-suite-pro

A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.

cartero

Mailing Phishing Framework - This Branch is UNSTABLE :: Official STABLE master branch at https://github.com/Section9Labs/Cartero

chinadns

Protect yourself against DNS poisoning in China.

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

commix

Automated All-in-One OS Command Injection Exploitation Tool.

commix-testbed

A collection of web pages, vulnerable to command injection flaws.

coredns

CoreDNS is a DNS server that chains plugins

crackmapexec

A swiss army knife for pentesting networks

cve-bin-tool

This tool scans for a number of common, vulnerable components (openssl, libpng, libxml2, expat and a few others) to let you know if your system includes common libraries with known vulnerabilities.