A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
hydra
A list of resources for those interested in getting started in bug bounties
📱 objection - runtime mobile exploration
Next generation web scanner
A curated list of awesome infosec courses and training resources.
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
:key: Hash type identifier (CLI & lib)
Hacking Toolkit
:hammer: Manage your website via terminal
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Routopsy - Hacking Routers with Routers
Open-source agentic security operations platform:
Capture The Flag competition challenge write-ups