The Official Bash Bunny Payload Repository

Rewrite of the popular wireless network auditor, "wifite" - original by @derv82

Starter files, final projects, and FAQ for my Complete JavaScript course

Send push notifications to your phone or desktop using PUT/POST

Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.

Add Authentication to your PHP App in 5 Minutes!

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)

evilginx3 + gophish

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

A tool to exchange decryption keys for command and control (C2) beacons and implants through DNS records.

A fake AMSI Provider which can be used for persistence.

Using NRF24L01 as a virtual network device under Linux.

Huge Collection of Wordpress Exploits and CVES

Affordable WiFi hacking platform for testing and learning

A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

Random scripts for generating Flipper data files.

Easily Flash Marauder onto the Flipper Zero Devboard or an ESP32!

Playground (and dump) of stuff I make or modify for the Flipper Zero

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

A compact guide to network pivoting for penetration testings / CTF challenges.

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Sub-GHz Files for the Flipper Zero

🐬 A collection of awesome resources for the Flipper Zero device.

Flipper Zero firmware source code

Flipper Zero Unleashed Firmware

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens