Information Gathering

pwndexter/invoke-edrchecker

PowerShell script that enumerates running processes, loaded DLLs, services, registry, and drivers to detect the presence of AV, EDR, and logging…

wipi-hunter/pifinger

📡🔍Searches for wifi-pineapple traces and calculate wireless network security score 🍍

synacktiv/mindmaps

Azure mindmap for penetration tests

moniik/poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

thumpbo/cve-2025-30208-exp

CVE-2025-30208-EXP

bishopfox/pwn-pulse

Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)

tigmint/tigmint

Web-based OSINT framework for social media intelligence gathering, including Twitter and Instagram analysis, account discovery, and metadata…

nccgroup/lazydroid

bash script to facilitate some aspects of an Android application assessment

mpgn/heartbleed-poc

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

chaelsoo/zetsu

A personal RAG system for offensive security knowledge

micro-joan/d4ta-hunter

Automated OSINT framework for ethical hacking audits. Collects employee emails, password hashes, subdomains, and IPs via BreachDirectory and…

cytopia/urlbuster

Powerful mutable web directory fuzzer to bruteforce existing and/or hidden files or directories.

nomi-sec/nvd-exploit-list-ja

🔍NVD exploit & JVN(Japan Vulnerability Notes) easy description

a3h1nt/dnsrr

Bash-based DNS enumeration tool performing forward/reverse bruteforce, cache snooping, and zone transfer to extract DNS records and subdomains.

luispl77/433screen-signalhacker

Full duplex 433 MHz Signal jammer, recorder, decoder and hacking multitool device based on ESP32 microcontroller and RFM69HW radios. This version of…

dirsoooo/recon

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix…