Single-file PHP shell

Hashtopolis - distributed password cracking with Hashcat

Ruby on Rails Phishing Framework

WhiteWinterWolf's PHP web shell

Advanced Web Shell

Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing

Find AWS S3 buckets and test their permissions.

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Graphical Web interface developed to facilitate the use of security information tools.

Quick SQL Scanner, Dorker, Webshell injector PHP

Tools and datas related to Bug Bounty.

This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/

Whitebox source code review cheatsheet (Based on AWAE syllabus)

this repository is a docker containing some "XSS vulnerability" challenges and bypass examples.

基于CasaOS容器云构建的渗透测试平台 - A Home Cloud Container Platform Built For Learning Penetration And Network Security

A PHP tool to brute force vhost configured on a server.

Yet Another PHP Shell - The most complete PHP reverse shell

Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.