secforks

Transcribed video lessons of HackerOne to pdf's

A curated list of amazingly awesome Burp Extensions

Useful tools and scripts used during Penetration Tests.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

Curated list of Unix binaries that can be exploited to bypass system security restrictions

Penetration Testing / OSCP Biggest Reference Bank

list of useful commands, shells and notes related to OSCP

Chrome extension and Express server that exploits keylogging abilities of CSS.

Wipe and reinstall a running Linux system via SSH, without rebooting. You know you want to.

PHPMailer < 5.2.18 Remote Code Execution

We try to break the recaptcha for the Merry Christmas for all!

Linux bind shell with anti-reverse engineering techniques

"Reverse Engineering for Beginners" free book

A python program, to create a fake AP, and sniff data.

A collection of various awesome lists for hackers, pentesters and security researchers

little scripts in which you can find (maybe) interesting things

F-Scrack is a single file bruteforcer supports multi-protocol

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform va…

Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

PoC for Dirty COW (CVE-2016-5195)

Brand New Code Injection for Windows

Playing with the Tigress binary protection. Automatic deobfuscation using symbolic execution and LLVM.

A crappy tool used in our private PS4 jailbreak

Python keylogger with multiple features.

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector

Dirty COW

Ciplerli.st - strong ciphers for NGINX, Apache and Lighttpd

Vulnerability scanner for Linux/FreeBSD, agentless, written in Go

Bless is a high quality, full featured hex editor.