Remote Code Injection In Log4j

A list of public penetration test reports published by several consulting firms and academic security groups.

examples of regular expression dos attack

An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch

A collection of random OSINT scripts

A curated list of awesome resources about Electron.js (in)security

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

bash scripting thing!

Windows Privilege Escalation Labs

Fast web fuzzer written in Go

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Python to Golang

A collection of custom security tools for quick needs.

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, …

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Open Redirect Payloads

JNDI Attacking Tool

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet