KING SABRI

godofwar. GodOfWar - Malicious Java WAR builder with built-in payloads

jwtear. Modular command-line tool to parse, create and manipulate JWT tokens for hackers

CVE-in-Ruby. Exploits written & ported to Ruby - no Metasploit

ServerlessRedirector. Serverless Redirector in various cloud vendor for red team

sqlmap-tamper-api. SQLMap tamper api to accept tamper scripts from all languages

goCabrito. Super organized and flexible script for sending phishing campaigns

DotNetToJScriptMini. A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.

chkdfront. Check Domain Fronting (chkdfront) - It checks if your domain fronting is working

MSI-AlwaysInstallElevated. A Collection of templates that can be used for abusing window's AlwaysInstallElevated policy

BufferOverflow-Kit. We collect many tools used in buffer overflow development in one place, repeating with new idea is not a shame - thanks China :)

AssemblyLoader. Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()

Burp_Suite_Extension_Ruby. BurpSuite Extension Ruby Template to speed up building a Burp Extension using Ruby

creds-harvester. A simple, yet highly customizable, script to use with cloned websites for phishing and credentials harvesting

AggressorScripts. A collection of Cobalt Strike aggressor scripts

USBNinjaPayloads. A centralized place to collect USB Ninja payloads

hacker-gems. Hacker-gems installs most needed gems for hackers

Spammers. A collection of files sent by spammers to my email

ruby-port-forward. an easy way to port forwarding using ruby

sql. a console-based tool to connect to MSSQL server for red teamer and pentesters

nipper_parser. NipperPrser gem is an unofficial parser for Titania Nipper Studio XML report.

nessus-search. parse nessus report and search for specific data

kingsabri-blog.

soap_enumerator. Soap Enumerator converts WSDL document into Ruby objects. Inspired by SoapUI

getCabrito. Email open & click tracking server for goCabrito

HackerNote. Hacker's Note - A command-line tool creates gitbook compatible structure for pentest and read team projects documentation.

Bash-scripts. Some Bash scripts

kingsabri.gituhub.io. KING SABRI's blog

nmap-did-what. Nmap Dashboard Mini Project

wordpress-exploit-framework. A Ruby framework for developing and using modules which aid in the penetration testing of WordPress powered websites and systems.

mimipenguin. A tool to dump the login password from the current linux user

Cheatsheets. Penetration Testing/Security Cheatsheets

Some_Pentesters_SecurityResearchers_RedTeamers. Some Pentesters, Security Researchers, Red Teamers which i learned from them a lot...

RubyCat. RubyCat - A Pure Ruby NetCat Alternative

bigip2ip. Extracting the private IP of servers behind F5 loadbalancer from cookies

Books2Ruby. Rubyfu initiative: Convert scripts written in information security books to ruby

OSCE. Collection of things made during my preparation to take on OSCE

WebShellConsole. WebShellConsole is a small interactive console connect simple web shell from command line using GET

injection-C. C++

ScareCrow. ScareCrow - Payload creation framework designed around EDR bypass.

unidecode2en. ASCII transliterations of Unicode text to English.

Awesome-Profile-README-templates. A collection of awesome readme templates to display on your profile

c-sharp-memory-injection. A set of scripts that demonstrate how to perform memory injection in C#

Misc. PowerShell

API-Security. OWASP API Security Project

Learning-C. A series of mini-projects used to learn C for beginners

Sharp-rportfwd. C#

pentest-bookmarks. a collection of handy bookmarks

ninja-firewall. Ruby

sqli-browser. CLI-based browser for manual SQLi exploitation.

avet. AntiVirus Evasion Tool

ExpDev-Scripts. collection of helper scripts I use during exploitation development

yasuo. A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

rex. Rex provides a variety of classes useful for security testing and exploit development.