A list of useful payloads and bypass for Web Application Security and Pentest/CTF

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

OpenFuck exploit updated to linux 2018 - Apache mod_ssl < 2.8.7 OpenSSL - Remote Buffer Overflow

Privilege Escalation Enumeration Script for Windows

JAWS - Just Another Windows (Enum) Script

Linux privilege escalation auditing tool

PowerSploit - A PowerShell Post-Exploitation Framework

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Defeating Windows User Account Control

windows-kernel-exploits Windows平台提权漏洞集合

A library of pretexts to use on offensive phishing engagements.