an awesome list of honeypot resources

👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

All-in-One malware analysis tool.

SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi

Detect and bypass web application firewalls and protection systems

Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.

An interactive cheatsheet tool for the command-line

A smarter cd command. Supports all major shells.

Automatic SSRF fuzzer and exploitation tool

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A simple tool for bypassing file upload restrictions.

File upload vulnerability scanner and exploitation tool.

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

Weaponized web shell

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

Penetration tests guide based on OWASP including test cases, resources and examples.

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

🎯 SQL Injection Payload List

Powerful RSA cracker for CTFs. Supports RSA, X509, OPENSSH in PEM and DER formats.

Burp plugin able to find reflected XSS on page in real-time while browsing on site

XSS payloads designed to turn alert(1) into P1

Find exploits in local and online databases instantly

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Spotify for the terminal written in Rust 🚀

real time face swap and one-click video deepfake with only a single image

Never ever ever use pixelation as a redaction technique

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)