Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Burp Suite Certified Practitioner Exam Study

Instant API security through API discovery, automated business logic testing and runtime detection.

HTML smuggling is not an evil, it can be useful

Collection of useful FRIDA Mobile Scripts

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

In this repo, I have created a subdomain enumeration function that grab subdomains in deep.

LFI to RCE via phpinfo() assistance or via controlled log file

MASS SCANNER FOR PROXYNOTSHELL (CVE-2022-41082 & CVE-2022-41040)

This repository is a collection of powershell functions every hacker should know

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

evilginx2 + gophish

VLAN attacks toolkit

experimental kiosk evasion bruteforce payload

Most of the notes, resources and scripts I used to prepare for the OSCP and pass it the first time.

Simple python script that helps you to detect SQL injection "Error based" by sending multiple requests with different payloads and check for 152 regex pattern for different databases.

Source Code Management Attack Toolkit

Powerful framework for rogue access point attack.

This is an application I am developing to automatically convert powershell scripts into ready to use Ducky scripts

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.