A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Most advanced XSS scanner.

Web path scanner

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Intelligent proxy pool for Humans™ to extract content from the internet and build your own Large Language Models in this new AI era

Framework for Man-In-The-Middle attacks

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Mimikatz implementation in pure Python

Tool for Active Directory Certificate Services enumeration and abuse

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

wide range mass audit toolkit

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻

CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002