#1Penetration testing methodologies, frameworks, reporting, and automation tools.
Kitploit recommended

cSploit - The most complete and advanced IT security professional toolkit on Android.
PoCs and exploits for CVEs discovered by NebuSec.

Trying to tame the three-headed dog.

A collection of awesome one-liner scripts especially for bug bounty tips.

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

Low bandwidth DoS tool. Slowloris rewrite in Python.

Ladon大型内网渗透扫描器,PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell,支持批量A段/B段/C段以及跨网段扫描,支持URL、主机、域名列表扫描等。网络资产探测32…


A cheat sheet that contains advanced queries for SQL Injection of all types.

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

Find leaked secrets via github search

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security…