A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Some Skeleton Code in terms of an Assessment

Token-based AngularJS Authentication

The cheat sheet about Java Deserialization vulnerabilities

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

Build cross platform desktop apps with JavaScript, HTML, and CSS

📚 Freely available programming books

Copy the voice of anyone

Sometimes we may not notice if the tone of our emails is overly positive or negative. It's important to occasionally stop and reflect that we are treating the people around us with respect. The Unc…

JavaScript audio decoding framework

Fast subdomains enumeration tool for penetration testers

WPScan is a black box WordPress vulnerability scanner.

This is a webshell open source project

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Usb serial controller for Android

Main body of the script

Android USB host serial driver library for CDC, FTDI, Arduino and other devices.

AIMSICD • Fight IMSI-Catcher, StingRay and silent SMS!

Security advisories

Tools for hacking environment,

ZeroTurnaround ZIP Library

An easy-to-use encryption system utilizing RSA and AES for javascript.

Google Play Unofficial Python API - This project was a PoC and is not maintained anymore. Please feel free to fork it and improve it in any way.

Play with Google Play API :)

Library for reading image metadata

A collection of password dictionaries for use in ethical hacking / cracking of password hashes.