jmongrel Goto Github PK

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

android-forensics-references

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

aws-redteam-adlab

burp-spray

This extension allows a user to specify a lockout policy in order to automate a password spray attack via Intruder.

clutch

Fast iOS executable dumper

cowabunga

iOS 14.0-15.7.1 & 16.0-16.1.2 MacDirtyCow ToolBox

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

fastchat

The release repo for "Vicuna: An Open Chatbot Impressing GPT-4"

fuzz-upnp

Fuzzing UPnP

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

home

Random arfarf activities

ipanema

Ipanema is a tool for iOS ipa application security assessment.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

linkedint

LinkedIn Recon Tool

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

metasploit-framework

Metasploit Framework

minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.

mvt

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.

mvt-indicators

Index and collection of MVT compatibile indicators of compromise.

nanodump

The swiss army knife of LSASS dumping

nikto

Nikto web server scanner

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

o365-attack-toolkit

A toolkit to attack Office365

owasp-fstm

The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with conducting firmware security assessments.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

phishery

An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector