Simple bash script to bypass "403 Forbidden" messages with well-known methods discussed in #bugbountytips

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

List of Stuff I did to get through the OSCP :D

A proof-of-concept tool for detection and exploitation Object Injection Vulnerabilities in .NET applications

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static a…

🆕 The Multi-Tool Web Vulnerability Scanner.

Red Teaming & Pentesting checklists for various engagements

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

A tool to perform Kerberos pre-auth bruteforcing

An advanced multithreaded admin panel finder written in python.

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Dehashed API CLI

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

Most usable tools for iOS penetration testing

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

Content released at NorthSec 2018 for my talk on prototype pollution

CVE-2019-0604