A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
Repository Index
70,234 visible repositories in the index
121–144 of 301 · Most stars
The repository host gives no description.
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
- authentication
- automatic
- call
- coerce
One Time Password (OTP) / 2FA for Node.js and Browser - Supports HOTP, TOTP and Google Authenticator
- hotp
- hmac
- otp
- authenticator
Simple and Lightweight Auth System for CodeIgniter
- hacktoberfest
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
- vault
- kubernetes
- kubernetes-secrets
- golang
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.
linWinPwn is a bash script that streamlines the use of a number of Active Directory tools
- penetration-testing
- pentesting
- active-directory
- hacking
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
A little utility for managing credentials in the cloud
finds publicly known security vulnerabilities in a website's frontend JavaScript libraries
- security-vulnerabilities
- security
- vulnerabilities
- lighthouse
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
Support for OAuth 2 and OpenId Connect (OIDC) in Angular.
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
- jwt
- htpasswd
- service
- golang
Port of TweetNaCl cryptographic library to JavaScript
- crypto
- javascript
- authentication
- signature
A tool for automating cracking methodologies through Hashcat from the TrustedSec team.
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
One rule to crack all passwords. or atleast we hope so.
Browser forensics tool for Google Chrome, other Chromium-based browsers, and Mozilla Firefox
- google-chrome
- hindsight
- chrome
- forensics
A key value store for storing per-developer environment and application keys