Command-line program to download videos from YouTube.com and other video sites

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

Python Serverless Microframework for AWS

Generic automation framework for acceptance testing and RPA

Fast subdomains enumeration tool for penetration testers

so-vits-svc fork with realtime support, improved interface and more features.

📱 objection - runtime mobile exploration

A GPT-empowered penetration testing tool

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

🎉🌩️ Dynamic DNS (DDNS) service based on Cloudflare! Access your home network remotely via a custom domain name without a static IP!

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

pwning IPv4 via IPv6

Software to identify the different types of hashes -

Plex HTTP Anidb Metadata Agent (HAMA)

Decrypts and logs a process's SSL traffic.

Source code for the book "Violent Python" by TJ O'Connor. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards and refactored to eliminate dependency issues invo…

Minimal python wrapper for Twitter's REST and Streaming APIs

Domain Password Audit Tool for Pentesters

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

Python related videos and metadata powering PyVideo.

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

Exploiting misconfigured firebase databases