JShunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security v…

Timeroasting scripts by Tom Tervoort

Awesome information for WebSockets security research

Windows Local Privilege Escalation Cookbook

Cloud-native search engine for observability. An open-source alternative to Datadog, Elasticsearch, Loki, and Tempo.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

Search for documents in a domain through Search Engines (Google, Bing and Baidu). The objective is to extract metadata

An MS Sharepoint and Frontpage Auditing Tool

bingip2hosts is a Bing.com web scraper that discovers websites by IP address

Identify virtual hosts by similarity comparison

Simple script to extract useful informations from the combo BloodHound + Neo4j

Agent Zero AI framework

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Blinks is a powerful Burp Suite extension that automates active scanning with Burp Suite Pro and enhances its functionality. With the integration of webhooks, this tool sends real-time updates when…

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Utility program to perform multiple operations for a given subnet/CIDR ranges.

Your Next Store: Modern Commerce with Next.js and Stripe as the backend.

A tool for parsing breached passwords

Self hosted newsletter app

Web-based SQLite database browser written in Python

Uses BigQuery and GitHub Archive to create something like TimeHop for GitHub.

🍦 Never use print() to debug again.

Attack Surface Management Platform

Weaponized web shell

A pandoc LaTeX template to convert markdown files to PDF or LaTeX.

The lazier way to manage everything docker