🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

Impacket is a collection of Python classes for working with network protocols.

Six Degrees of Domain Admin

WiFi Penetration Testing & Auditing Tool

Tool for Active Directory Certificate Services enumeration and abuse

Realm is a cross platform Red Team engagement platform with a focus on automation and reliability.

CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) RCE POC

the LLM vulnerability scanner

Bjorn is a powerful network scanning and offensive security tool for the Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers network targets, identifies open ports, exposed services, and potent…

OpenType font that disassembles Z80 instructions

Authenticated Code execution

Code for the paper Breaking reCAPTCHAv2 accepted at COMPSAC 2024

Open Source Alternative to Vercel, Netlify and Heroku.

An open-source post-exploitation framework for students, researchers and developers.

List of helpful publicly available CrowdStrike material.

Red Team C2 Infrastructure built in AWS using Ansible!

A collection of Awesome Google Dorks.

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

a signal handler race condition in OpenSSH's server (sshd)

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Hacking the PixMob infrared (and now also RF!) protocol to enable control of PixMob wristbands at home.

Pre-Built Vulnerable Environments Based on Docker-Compose

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

Open-source tool to enforce privacy & security best-practices on Windows, macOS and Linux, because privacy is sexy

PoC for CVE-2024-27130

A collection of GPT system prompts and various prompt injection/leaking knowledge.

Payloads for Attacking Large Language Models

Build multi-modal Agents with memory, knowledge, tools and reasoning. Chat with them using a beautiful Agent UI.