Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.

yAudit Completed Reports

A curated list of annual cyber security reports

Get up and running with Llama 3.1, Mistral, Gemma 2, and other large language models.

A collection of awesome one-liners for bug bounty hunting.

This repository contains indicators of compromise (IOCs) of our various investigations.

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

You just found a hidden gem 💎 This repo contains a massive amount (8000+) of WordPress related Nuclei templates. Updated daily!

Asset inventory of over 800 public bug bounty programs.

An experimental open-source attempt to make GPT-4 fully autonomous.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

A repository that includes all the important wordlists used while bug hunting.

More than 1000 Artificial Intelligence AI-powered tools - categorized & updated

Metrics

MSDAT: Microsoft SQL Database Attacking Tool

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

msImpersonate - User account impersonation written in pure Python3

Dynamic unpacker based on PE-sieve

MAL-CL (Malicious Command-Line)

Inject Macro and DDE code into Excel and Word documents (reverse shell)