A deliberately vulnerable banking application designed for practicing secure code reviews and API security testing. Features common vulnerabilities found in real-world applications, making it an id…

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

The First Open Source Bug Bounty Platform

Powerful android apk editor - aapt/aapt2 independent

Remove Certificate Pinning from APKs

Useful Google Dorks for WebSecurity and Bug Bounty

Extract JavaScript source trees from Sourcemap files

vBank is a vulnerable bank application that demonstrates how to exploit common REST and GraphQL API vulnerabilities, such as those listed in the OWASP API Security Top 10.

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing s…

Asset inventory of over 800 public bug bounty programs.

A library for detecting known secrets across many web frameworks

EDRSandblast-GodFault

This map lists the essential techniques to bypass anti-virus and EDR

Chegg Unlocks - Deploy in Fly.io

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

Tools and Techniques for Red Team / Penetration Testing

A curated list of various bug bounty tools

SWS-Recon is a Python Tool designed to performed Reconnaissance on the given target website- Domain or SubDomain. SWS-Recon collects information such as Google Dork, DNS Information, Sub Domains, P…

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…