Repository Index

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

• ai
• deep-reinforcement-learning
• wpa-psk
• handshakes

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

• python
• exploit
• gdb
• linux

爆破字典

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

• open-source
• pentest
• pentesting
• readteaming

Python Remote Administration Tool (RAT)

• mac-osx
• linux
• payload
• python

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

• hacking
• penetration-testing
• pentesting-tools
• powershell

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

• scanner
• scanner-web
• dirscanner
• pentest-tool

SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Cyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)

• wifi-hacking
• crack-handshake
• wps
• wp8

ART环境下自动化脱壳方案

Tool to scan for secret files on HTTP servers

• security
• websecurity

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.

• anti-crawling
• cloud-native
• crawler
• deception

:hammer: Manage your website via terminal

• php
• security-tools
• python
• pentest

:hammer: A multiple reverse shell session/client manager via terminal

• socket
• python
• ctf
• attack-defense

This script is made to collect the most valiable artifacts for foreniscs or incident reponse investigation rather than imaging the whole har drive.

Breaks Seewo Whiteboard 3's 15-day trial limit; a game enhancement tool by HuskeyDev.

• activate
• activator
• easinote
• seewo

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

The repository host gives no description.

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Handles OAuth and stores slack token

• python
• slack
• oauth
• django

Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)

• actions
• bugbounty
• cicd