A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🕵️‍♂️ Offensive Google framework.

The Rogue Access Point Framework

Web path scanner

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

fsociety Hacking Tools Pack – A Penetration Testing Framework

A swiss army knife for pentesting networks

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

CTFs as you need them

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

HTTP parameter discovery suite.

Using the jedi autocompletion library for VIM.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A cross-version Python bytecode decompiler

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Striker is an offensive information and vulnerability scanner.

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.

ReverShellGenerator - A tool to generate various ways to do a reverse shell

Xenotix Python Keylogger for Windows.