FindGPPPasswords, A cross-platform tool to find and decrypt Group Policy Preferences passwords from the SYSVOL share using low-privileged domain accounts.

DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!

Janus-Series: Unified Multimodal Understanding and Generation Models

A PoC for Early Cascade process injection technique.

the LLM vulnerability scanner

TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and penetration tests with the tokens generated working out of t…

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

Nikto web server scanner

Automatic SQL injection and database takeover tool

Hardened your Windows OS against forensics analysis

Phishing Tool & Information Collector

cve-search - a tool to perform local searches for known vulnerabilities

Exploitation Framework for Embedded Devices

List of API's for gathering information about phone numbers, addresses, domains etc

Weaponized web shell

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

This repository contains a comprehensive testing designed for evaluating the performance and resilience of Endpoint Detection and Response (EDR) systems

A curated list of various bug bounty tools

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.

GCPGoat : A Damn Vulnerable GCP Infrastructure

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

List of Github repositories and articles with list of dorks for different search engines

Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.