Dhayalanb/windows-php-reverse-shell
Simple php reverse shell implemented using binary .
Simple php reverse shell implemented using binary .
A ready-to-go template for building powerful Agent APIs
Grok open release
A CTF styled Poc to extract a secretflag from the kernel space using spectre v1
Contains code for the Master Thesis Computer Science 2020/2021
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
HTTP file upload scanner for Burp Proxy
SymCC: efficient compiler-based symbolic execution
Appsecco training course content on Attacking and Auditing Dockers Containers and Kubernetes Clusters
VLC media player - All pull requests are ignored, please follow https://wiki.videolan.org/Sending_Patches_VLC/
Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!
Reconnaissance tool for GitHub organizations
Curated list of public penetration test reports released by several consulting firms and academic security groups
🤖 A CLI application that prepares Android APK files for HTTPS inspection
Web Fuzzing Discovery and Attack Pattern Database
Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
Infection Monkey - An automated pentest tool
Password Breach Hunting and Email OSINT, locally or using premium services. Supports chasing down related email
This modified exploit of the original exploit by @init_string, takes the command to execute from the command line and runs it as root. No need to compile the snap file evertime for a new payload.
Scanner PoC for CVE-2019-0708 RDP RCE vuln
Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.
Automatic SSRF fuzzer and exploitation tool
IoT Goat is a deliberately insecure firmware based on OpenWrt
A mini webserver with FTP support for XXE payloads
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
A curated list of awesome malware analysis tools and resources
Fake sshd that logs ip addresses, usernames, and passwords.