An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Pentest Report Generator

PeTeReport is an open-source application vulnerability reporting tool.

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Burp Suite Certified Practitioner Exam Study

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Contextual Content Discovery Tool

🐛 A list of writeups from the Google VRP Bug Bounty program

DevSecOps Training

CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

network visualization & pentest reporting

RubberDucky like payloads for DigiSpark Attiny85

Java web common vulnerabilities and security code which is base on springboot and spring security

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP

Grab target's webcam shots by link

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user