A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 31 · Most stars
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
hydra
A list of resources for those interested in getting started in bug bounties
Program for determining types of files for Windows, Linux and MacOS.
📱 objection - runtime mobile exploration
Next generation web scanner
A curated list of awesome infosec courses and training resources.
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
XSS'OR - Hack with JavaScript.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Automated Red Team Infrastructure deployement using Docker
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
:key: Hash type identifier (CLI & lib)
Hacking Toolkit
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
:hammer: Manage your website via terminal
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
The unix-way web crawler
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups