evilginx3 + gophish

Zimbra unrar vulnerability. Now there are already POC available, it is safe to release our POC.

steal victim images exact location device info and much more

Github based C2 server proof of concept

Simple C2 that uses ssl sockets to communicate with the github api in order to exfil data, run OS commands and upload/download 64bit shellcode in order to inject it using syscalls.

BBT - Bug Bounty Tools (examples💡)

Quick SQLMap Tamper Suggester

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Website FingerPrint Recognition

A simple remote tool in C#.

LimitSwap is fully functional DeFi Trading Bot. No fees. You just need to hold LIMIT Utility token in your wallet to use.

Simple reverse ICMP shell

A fast TCP/UDP tunnel over HTTP

NetRipper - Smart traffic sniffing for penetration testers

ASL HackMe Labs is yet another vulnerabile web application to practice various web based attacks.