A collection of awesome penetration testing resources, tools and other shiny things

An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

Automatic SSTI detection tool with interactive interface

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

Hidden parameters discovery suite

MetaInjector is a tool designed to test security by injecting malicious payloads (such as XSS, SQL Injection, remote code execution, etc.) into image metadata. The tool supports image formats such…

Misc notes from Google's Cybersecurity Professional Certificate

A tool to check a bunch of URLs that contain reflecting params.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

8 Lessons, Kick-start Your Cybersecurity Learning.

[FORK] Patches needed to build VMware (Player and Workstation) host modules against recent kernels

Fast web fuzzer written in Go

Automatic SSRF fuzzer and exploitation tool

A wrapper around grep, to help you grep for things

Find domains and subdomains related to a given domain

Web Security Scanner

recon for bug hunters

Fetch all the URLs that the Wayback Machine knows about for a domain

A python script that finds endpoints in JavaScript files

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Phishing Tool & Information Collector

The fastest dork scanner written in Go.

Living Off The Land (LOTL) persistent Reverse shell

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Hijack services that relies on QR Code Authentication.