Traxes

ktf. Kernel Test Framework

onefuzz. A self-hosted Fuzzing-As-A-Service platform

hotwax. Coverage-guided binary fuzzing powered by Frida Stalker

mitm_relay. Hackish way to intercept and modify non-HTTP protocols through Burp & others.

findrpc. Idapython script to carve binary for internal RPC structures

pwn_jenkins. Notes about attacking Jenkins servers

ccat. Cisco Config Analysis Tool

doh-client. DNS over HTTPS client

ghidra_bridge. Python 3 bridge to Ghidra's Python scripting

joshuto. ranger-like terminal file manager written in Rust

PUBG-map-hack. Map hack solution for PUBG

pcileech-webradar. CS:GO DMA Cheat (caution, seems to be detected by ESEA and FaceIt)

cwe_checker. cwe_checker finds vulnerable patterns in binary executables

gdbgui. Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.

villoc. Visualization of heap operations.

misc. Miscellaneous programs/scripts to make your life a little less painful

arm_exploitation. Exploitation on ARM-based Systems (Troopers18)

protobuf-inspector. 🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

static-arm-bins. Statically compiled ARM binaries for debugging and runtime analysis

afl-dyninst. American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries

IDAGolangHelper. Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary

golang_loader_assist. Making GO reversing easier in IDA Pro

awesome-frida. Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

tech-interview-handbook. Curated coding interview preparation materials for busy software engineers

BasicBlocks. Pin tool for printing the address of each basic block executed in a program.

spiderfoot. SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

linux_kernel_cves. Tracking CVEs for the linux Kernel

domato. DOM fuzzer

ysoserial.net. Deserialization payload generator for a variety of .NET formatters

kleefl. Seeding fuzzers with symbolic execution

cb-multios. DARPA Challenges Sets for Linux, Windows, and macOS

Exploit-Challenges. A collection of vulnerable ARM binaries for practicing exploit development

dr_checker. DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

HUNT. Python

awesome-web-security. 🐶 A curated list of Web Security materials and resources.

SwishDbgExt. Incident Response & Digital Forensics Debugging Extension

LIEF. LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

pefile. pefile is a Python module to read and work with PE (Portable Executable) files

netdata. The fastest path to AI-powered full stack observability, even for lean teams.

loadlibrary. Porting Windows Dynamic Link Libraries to Linux

RedTips. Red Team Tips as posted by @vysecurity on Twitter

rtfm. A database of common, interesting or useful commands, in one handy referable form

trolldrop. :trollface: AirDrop trollfaces to everyone.

OfficeMalware.

ssh_scan. DEPRECATED - A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

BugId. Detect, analyze and uniquely identify crashes in Windows applications

icmpsh. Simple reverse ICMP shell

pupy. Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Ebowla. Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

the-backdoor-factory. Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

secure-ios-app-dev. Collection of the most common vulnerabilities found in iOS applications

RootKits-List-Download. This is the list of all rootkits found so far on github and other sites.

lighthouse. A Coverage Explorer for Reverse Engineers

mimipenguin. A tool to dump the login password from the current linux user

gitpitch. Markdown Presentations for Tech Conferences, Training, Developer Advocates, and Educators.

Pentest-Scripts. Github for the scripts utilised during Penetration test

thefuck. Magnificent app which corrects your previous console command.

How-to-Make-a-Computer-Operating-System. How to Make a Computer Operating System in C++

Sherlock. PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

BashBunny. Hak5 BashBunny Payloads

iaito. This project has been moved to:

binjascripts. Scripts for Binary Ninja

libc-database. Build a database of libc offsets to simplify exploitation

ripr. Package Binary Code as a Python class using Binary Ninja and Unicorn Engine

TriforceAFL. AFL/QEMU fuzzing with full-system emulation.

acsac-course. Python

docker-nfqueue-scapy. Docker container for intercepting packets with scapy from a netfilter queue (nfqueue)

AuthMatrix. AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

OSX-Peristant-BackDoor. Take full control of a OSX user or root account via command line.

python-fire. Python Fire is a library for automatically generating command line interfaces (CLIs) from absolutely any Python object.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

the_silver_searcher. A code-searching tool similar to ack, but faster.

interpreter-bugs. Fuzzing results for various interpreters.

Stitch. Python Remote Administration Tool (RAT)

scapy. Scapy: the Python-based interactive packet manipulation program & library.

go-observe. 🌌 Go-Observe: A command line Mozilla Observatory client written in Go

fido. Teaching old shellcode new tricks

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

binaryninja-bookmarks. Plugin for BinaryNinja that provides bookmarking functionality

binja-retdec. Binary Ninja plugin to decompile binaries using RetDec API

OSX-KVM. Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

nut. Nut: the development environment, containerized.

reverse-engineering. List of awesome reverse engineering resources

rr. Record and Replay Framework

secretgrind. Secretgrind: a Valgrind analysis tool to detect secrets in memory

Marx. Uncovering Class Hierarchies in C++ Programs

viz-js. Graphviz in your browser

backdoorme. powerful auto-backdooring utility

FLIRTDB. A community driven collection of IDA FLIRT signature files

dress. add symbols back into a stripped ELF binary (~strip)

pwndbg. Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

HEVD-Python-Solutions. Python solutions for the HackSysTeam Extreme Vulnerable Driver

magic-wormhole. get things from one computer to another, safely

python-asn1. Python-ASN1 is a simple ASN.1 encoder and decoder for Python 2.7 and 3.5+.

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

linux-kernel-exploitation. A collection of links related to Linux kernel security and exploitation

MBE. Course materials for Modern Binary Exploitation by RPISEC

wePWNise. WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.

HexRaysPyTools. IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes

gattacker. A Node.js package for BLE (Bluetooth Low Energy) security assessment using Man-in-the-Middle and other attacks

shelling. SHELLING - a comprehensive OS command injection payload generator

ScyllaHide. C++

Responder-Windows. Responder Windows Version Beta

keimpx. Check for valid credentials across a network over SMB

GolangSocks5Server. A simple SOCKS5 server written in Go

dirtycow.github.io. Dirty COW

androidre. Reverse engineering Android

OS-X-10.11.6-Exp-via-PEGASUS. Local privilege escalation for OS X 10.11.6 via PEGASUS

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

luckystrike. A PowerShell based utility for the creation of malicious Office macro documents.

Ponce. IDA 2016 plugin contest winner! Symbolic Execution just one-click away!

Nope-Proxy. TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

BloodHound-Legacy. Six Degrees of Domain Admin

Malleable-C2-Profiles. Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

linux-insides. A book-in-progress about the Linux kernel and its insides.

awesome-devsecops. An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

HTTP-Over-Protocol. HOP: A proxy server to enable arbitrary protocols behind an HTTP proxy

ssh-audit. SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

App-Payload-Injector. Script used to inject executables into OSX .app files

FuzzFlow. Python

fuzzer. A Python interface to AFL, allowing for easy injection of testcases and other functionality.

dnsteal. DNS Exfiltration tool for stealthily sending files over DNS requests.

wcc. The Witchcraft Compiler Collection

defcon-vm. Files from my DEFCON CTF VM.

metame. metame is a metamorphic code engine for arbitrary executables

qemu-cgc. Official QEMU mirror. Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored.

afl. Unofficial American Fuzzy Lop repo

awesome-pentest. A collection of awesome penetration testing resources, tools and other shiny things

mms. Modern Memory Safety in C/C++

NodeFuzz. JavaScript

shadow. jemalloc heap exploitation framework

pokemongo-webspoof. 👾 Play Pokémon Go from your Mac

MacHeap. OS X malloc introspection tool

xss-polygiots. A set of malicious payloads for XSS testing

explib2. JavaScript

PINCE. Reverse engineering tool for Linux

ssh-baseline. DevSec SSH Baseline - InSpec Profile

chef-nginx-hardening. This chef cookbook provides secure nginx configurations.

cis-docker-benchmark. CIS Docker Benchmark - InSpec Profile

ansible-mysql-hardening. This Ansible role provides security configuration for MySQL.

ansible-ssh-hardening. This Ansible role provides numerous security-related ssh configurations, providing all-round base protection.

apache-baseline. DevSec Apache Baseline - InSpec Profile

ansible-collection-hardening. This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL

HttpPwnly. "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS

monks. Procmon alternative for Linux

HERCULES. HERCULES is a special payload generator that can bypass antivirus softwares.

pip3line. Swiss Army knife for raw bytes manipulation & interception

firminator_backend. The first open source vulnerability scanner for firmwares

binwalk. Firmware Analysis Tool

browser-backdoor. BrowserBackdoor is an Electron Application with a JavaScript WebSocket Backdoor and a Ruby Command-Line Listener

OSX-Keylogger. Python keylogger designed for Mac

stuff. Unsorted, raw, ugly & probably poorly usable tools for reversing, exploit and pentest

cemu. Cheap EMUlator: lightweight multi-architecture assembly playground

MacroShop. Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

ScratchABit. Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

Firewall-Rule-Scanner. A project to traverse an archive of ip connections from a server and locate connections of the requested IPs

SMBCrunch. 3 tools that work together to simplify reconaissance of Windows File Shares

jit-spray-poc-for-ksp. C

DOMPurify. DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Tater. Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

bt2. Blaze Telegram Backdoor Toolkit is a post-exploitation tool that leverages the infrastructure of Telegram as a C&C

aws-cli. Universal Command Line Interface for Amazon Web Services

aws2010. AWS Support Scripts

acme-client. secure ACME client

XssPy. XssPy - Web Application XSS Scanner

rupture. A framework for BREACH and other compression-based crypto attacks

EmPyre. A post-exploitation OS X/Linux agent written in Python 2.7

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Privesc. Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

pulsar. Protocol Learning and Stateful Fuzzing

ctf-tools. Some setup scripts for security research tools.

idaplugins-list. A list of IDA Plugins

pydiff. A simple GUI for python's difflib to compare files and directories

fierce. A DNS reconnaissance tool for locating non-contiguous IP space.

PHP-backdoors. A collection of PHP backdoors. For educational or testing purposes only.

JavaSerialKiller. Burp extension to perform Java Deserialization Attacks

LinkLiar. :link: Link-Layer MAC spoofing GUI for macOS

linux-injector. Utility for injecting executable code into a running process on x86/x64 Linux

Rshell. Working Rsh Client With Bind/Reverse Shell

PsexecSpray. Spray SMB with hashes, Then psexec

empire-web. PowerShell Empire Web Interface

certerator. A tool to generate a custom code signing certificate chain and generate instructions to sign a binary. Useful for establishing persistence on a penetration test.

Tzeentch. Android Fuzzing

routersploit. Exploitation Framework for Embedded Devices

samparser. A python script used to parse the SAM registry hive.

preeny. Some helpful preload libraries for pwning stuff.

afl-dyninst. American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries

roper. Return Oriented Programme Evolution with ROPER

IntruderPayloads. A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

pafish. Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

burp-bs. An extension for Burp Suite which provides integration with the Java BeanShell interpreter.

payloads. Git All the Payloads! A collection of web attack payloads.

voltron. A hacky debugger UI for hackers

awesome-infosec. A curated list of awesome infosec courses and training resources.

idiot. Your best is an idiot

advisories. C

ipv6tools. IPv6Tools is a robust modular framework that enables the ability to visually audit an IPv6 enabled network.

ARCANUS. ARCANUS is a customized payload generator/handler.