Open-source offensive security platform for conducting phishing campaigns that weaponizes iCalendar automatic event processing.

real time face swap and one-click video deepfake with only a single image

Instant voice cloning by MIT and MyShell. Audio foundation model.

📝 A text file containing 479k English words for all your dictionary/word-based projects e.g: auto-completion / autosuggestion

Mythic C2 agent targeting Linux and Windows hosts written in Rust

Small tool to Grab subdomains using Shodan api.

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Adversary Emulation Framework

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

Download autonomous system list organized by ASN

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

External Playbooks for Public Access

Android Reverse-Engineering Workbench for VS Code

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Active Directory and Internal Pentest Cheatsheets

Hardware/IOT Pentesting Wiki

fabric is an open-source framework for augmenting humans using AI.

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Ghidra is a software reverse engineering (SRE) framework

Navigate the CVE jungle with ease.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Find and verify credentials

Community curated list of templates for the nuclei engine to find security vulnerabilities.

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Nuke a whole AWS account and delete all its resources.

An OOB interaction gathering server and client library

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

Fast and configurable TLS grabber focused on TLS based data collection.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)