A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
86,076 visible repositories in the index
1–24 of 81 · Most stars
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
Using system APIs directly with adb/root privileges from normal apps through a Java process started with app_process.
JumpServer is an Open-source Privileged Access Management (PAM) platform with AI-powered capabilities, providing DevOps and IT teams a unified workspace to securely access SSH, RDP, Kubernetes, databases, websites, RemoteApp, VirtualApp, and more.
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
UVdesk Open Source Community Helpdesk is a comprehensive ticketing support system designed for everyone, offering robust features to streamline customer support and collaboration.
- ticketing-system
- symfony4
- backbonejs
- opensource
A collection of hacking / penetration testing resources to make you better!
- ctf
- hacking
- privilege-escalation
- reverse-engineering
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
- user-namespaces
- linux-containers
Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
- bastion
- bastion-host
- infrastructure
- ssh
Scripted Local Linux Enumeration & Privilege Escalation Checks
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
- gtfobins
- exploit
- privesc
- privilege-escalation
Using system APIs directly with adb/root privileges from normal apps through a Java process started with app_process.
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
- activedirectory
- active-directory
- cheatsheet
- active-directory-cheatsheet
A collection of links related to Linux kernel security and exploitation
- linux-kernel
- kernel-exploitation
- exploit
- privilege-escalation
Linux privilege escalation auditing tool
- exploits
- privilege-escalation-exploits
- kernel-exploitation
- applicable-exploits
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
- exploit
- 0day
- poc
- getshell
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
- infosec
- infosec-reference
- reverse-engineering
- hacking
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
- access-control
- authorization
- rbac
- rebac
A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and compliance.
- golang
- rdp
- vnc
- ssh
📦 Make security testing of K8s, Docker, and Containerd easier.
- penetration
- penetration-testing-tools
- kubernetes
- docker
TranslatedA knowledge base for red teaming and offensive security.
- command-and-control
- execution
- exploit
- initial-access
Linux enumeration tool for pentesting and CTFs with verbosity levels
- hacking
- pentesting
- privilege-escalation
- linux-enumeration
Privilege Escalation Enumeration Script for Windows
- pentest-tool
- windows
- windows-privilege-escalation
- privilege-escalation