PowerShell PKI Module

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

Not The Hidden Wiki - The largest repository of links related to cybersecurity

Various tips & tricks

1500+ Template Machine/Challenges for Hack The Box (HTB) and TryHackMe (THM) for Obsidian

Community curated list of public bug bounty and responsible disclosure programs.

Scrapy, a fast high-level web crawling & scraping framework for Python.

Official home of the DB Browser for SQLite (DB4S) project. Previously known as "SQLite Database Browser" and "Database Browser for SQLite". Website at:

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

HTTP parameter discovery suite.

Potentially dangerous files

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

ASF Infrastructure Team Website Repository

Volatility 3.0 development

WebVulnScanner is a powerful, user-friendly, and highly customizable security tool designed for ethical hackers, penetration testers, and web developers. It helps identify, assess, and report vulne…

OSCP Guide

A curated list of cybersecurity tools and resources.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

😱 A curated list of amazingly awesome OSINT

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Single-file PHP file manager, browser and manage your files efficiently and easily with tinyfilemanager

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

Help Security Researchers to find a worth bugs.

A comprehensive collection of resources, tools, tips, and guides for preparing and succeeding in the OSCP (Offensive Security Certified Professional) certification.

Automated All-in-One OS Command Injection Exploitation Tool.

TCM Security Academy Notes

A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers

A checklist for systematically going through the OWASP Testing Guide V4