A list of useful payloads and bypass for Web Application Security and Pentest/CTF

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

A collection of hacking tools, resources and references to practice ethical hacking.

A list of resources for those interested in getting started in bug bounties

hydra

Program for determining types of files for Windows, Linux and MacOS.

📱 objection - runtime mobile exploration

windows-kernel-exploits Windows平台提权漏洞集合

Tools and Techniques for Red Team / Penetration Testing

A fast, simple, recursive content discovery tool written in Rust.

game of active directory

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Cyber Security ALL-IN-ONE Platform

All about bug bounty (bypasses, payloads, and etc)

Next generation web scanner

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

An automated e-mail OSINT tool

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

A curated list of awesome infosec courses and training resources.

linux-kernel-exploits Linux平台提权漏洞集合

The Network Execution Tool

The ultimate WinRM shell for hacking/pentesting

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

Phishing Tool & Information Collector

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Collection of the cheat sheets useful for pentesting

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

A Security Tool for Bug Bounty, Pentest and Red Teaming.