Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

This is a keylogger that collects all the data and e-mail it in a set time with system information which includes device S/N and hardware specs, every button that pushed, screenshots, and copying p…

Keylogger for Windows OS, provided with a log reader

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

掩日 - 免杀执行器生成工具

A OWASP Based Checklist With 80+ Test Cases

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

EXOCET - AV-evading, undetectable, payload delivery tool

This is a repository made by the author to improve his skill in python exploitation

C2 server to connect to a victim machine via reverse shell

Python Fork Bomb

scripts that afford the pentester AV bypass techniques

🔥 Web-application firewalls (WAFs) from security standpoint.

TLS-Attacker is a Java-based framework for analyzing TLS libraries. It can be used to manually test TLS clients and servers or as as a software library for more advanced tools.

A python script that finds endpoints in JavaScript files

This repo is for the youtube video where we have explained how to make a detectable reverse shell undetectable by windows defender

CLI Based KeyLogger

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A keylogger program in bash for cybersecurity students

a simple keylogger in python that sends the keystrokes to the server

WhatsApp Crash With one Message

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

ios-screen-mirror

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

A next-generation crawling and spidering framework.

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester c…

Just a simple keylogger Written in C# and Python3 for the socket it connects to and sends the data to.

SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.