ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!
A VSCode Workspace based hacking environment utils. Starting your Note-Driven Hacking experience.
PS / Bash / Python / Other scripts For FUN!
A modular tool to search for known vulnerabilities, exploits and more across various data sources
Web wrapper of niklasb/libc-database
SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive in…
secator - the pentester's swiss knife
An automation tool to install the most popular tools for bug bounty or pentesting.
My useful files for penetration tests, security assessments, bug bounty and other security related stuff
Wiki漏洞库管理系统&网络安全知识库-渗透测试常见漏洞知识库文档-该网站收集了Web应用层漏洞、中间件安全缺陷、系统配置不当、移动端（Android）安全问题、权限提升、RCE、网络设备及IOT安全。
ChatGPT加持的，多人在线协同信息安全报告编写平台。目前支持的报告类型：渗透测试报告，APP隐私合规报告。
👮 Security advisories of Nextcloud
PHP Security Checker ====================
Cover various security approaches to attack techniques and also provides new discoveries about security breaches.
搜集大量网络安全行业开源项目，旨在提供安全测试工具，提升渗透测试效率。 项目收集的思路： 一个是以攻击/漏洞视角出发的开源项目，经网络安全爱好者实践总结出的经验。 一个是从渗透测试流程出发，沿着信息收集到内网渗透的思路，总结出漏洞扫描、漏洞利用、后/域渗透等。 这个收集是一个长期…
Signing-key abuse and update exploitation framework
ShadowPhish is an advanced APT awareness toolkit designed to simulate real-world phishing, malware delivery, deepfakes, smishing/vishing, an…
Scripts, plugins, and information for working with Samsung's Shannon baseband.
Youtube as C2 channel - Control Windows systems uploading QR videos to Youtube
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol
A C# tool for extracting information from SCCM PXE boot media.
This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.
Hunt down social media accounts by username across social networks
This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublis…