#
Starred repositories
Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
Infection Monkey - An open-source adversary emulation platform
This is the repository which is synced to the gitbook wiki at https://www.netexec.wiki/
Burp Suite Certified Practitioner Exam Study
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
A curated list of various bug bounty tools
A basic tool to check security headers of a website
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Fuzzing JavaScript Engines with Aspect-preserving Mutation
Defences against Cobalt Strike
Apache Traffic Server™ is a fast, scalable and extensible HTTP/1.1 and HTTP/2 compliant caching proxy server.
A simple bastion host setup designed for cloud-hosted lab environments.
Compiled Binaries for Ghostpack
⭕️ AstroWind: A free template using Astro 5 and Tailwind CSS. Astro starter theme.
Responsive Portfolio Website Using HTML, CSS & JavaScript
Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)
Opensource discord bot which generates images using DALL-E from OpenAI