Cysec, pentest, and crypto suite in C++

Exploit for CVE-2022–25765 (pdfkit) - Command Injection

this my repo with notes i take in penetration testing

my notes

The Extractor is a Python script that extracts Google dorks from the official Google Hacking Database (GHDB) XML file and saves them in a CSV file. The script only extracts dorks that contain the "inurl:" operator because they are more specific and useful for targeted web scanning.

A cross-platform python based utility for information gathering and penetration testing automation!

An automated penetration testing tool , that automates web vulnerabilities testing upon a given URL with an endpoint parameter

The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

An automatic SQL injection tool.

Open Source Vulnerability Management Platform

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Infection Monkey - An open-source adversary emulation platform

Run a browser extension in a sandboxed web browser and without any fear of corrupting or loosing your real data.

Web Security Scanner

Helping Ethical Hackers use LLMs in 50 Lines of Code or less..

Set of tools to audit SIP based VoIP Systems

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

Useful scripts to exploit Hack The Box retired machines/challenges

PyAnonymous是一个应用于渗透测试场景下基于Python3的无落地内存马加载解决方案