New ways of breaking app-integrated LLMs

Golden collection of weak passwords

WiFi arsenal

DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discove…

Easy files and payloads delivery over DNS

A CLI tool to convert your codebase into a single LLM prompt with source tree, prompt templating, and token counting.

RTL8812AU/21AU and RTL8814AU driver with monitor mode and frame injection

smbclient-ng, a fast and user friendly way to interact with SMB shares.

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Generates millions of keyword-based password mutations in seconds.

IP over ICMP

A curated list of GPT agents for cybersecurity

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

研究利用golang各种姿势bypassAV

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

game of active directory

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

i will upload more templates here to share with the comunity.

Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

Locally saves webpages to your hard disk with images, css, js & links as is.

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

Send phishing messages and attachments to Microsoft Teams users

WireGuard VPN installer for Linux servers

An IIS short filename enumeration tool

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Deserialization payload generator for a variety of .NET formatters

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

Easily and securely send things from one computer to another 🐊 📦