Stars
A proof-of-concept Remote Desktop (RDP) session hijack utility
🗝️ Background program that skips the phone option and chooses the USB security key in Windows FIDO/WebAuthn prompts.
Research on the Gallagher / Cardax access control system
Sophos Deobfuscation Tool. Deobfuscates passwords obfuscated with Sophos Obfuscation Tool.
Herramienta para evadir disable_functions y open_basedir
getsystem via parent process using ps1 & embeded c#
Information released publicly by NCC Group's Cyber Incident Response Team
rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments
A framework for exploiting padding oracles in network-based applications
A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)
Find interesting Amazon S3 Buckets by watching certificate transparency logs.
A tool to dump the login password from the current linux user
Distributed password cracker for operating over high latency networks of loosely coupled hosts.
An HTML5 management interface for KVM guests
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
Snowflake is a tool for exploiting randomness vulnerabilities by seed recovery attacks targetting the rand() and mt_rand() generators in PHP applications.
A tool to calculate default passwords for some Thomson routers