Sticky notes for pentesting, bug bounty, CTF.

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

Erlang distribution weaknesses and tooling

a signal handler race condition in OpenSSH's server (sshd)

the only cheat sheet you need

basic concept for the latest windows wifi driver CVE

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Collection of reverse shells for red team operations.

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

"VMBreaker" is a specialized tool for virtual machine security testing, offering essential, user-friendly features for efficient penetration testing, without unnecessary complexity.

Magic hashes – PHP hash "collisions"

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

GoldenEye Layer 7 (KeepAlive+NoCache) DoS Test Tool

Herramienta para evadir disable_functions y open_basedir

✯ 一个国内可直连的直播源分享项目 ✯ 🔕 永久免费 直连访问 完整开源 不含广告 完善的台标 直播源支持IPv4/IPv6双栈访问 🔕

A webshell plugin and interactive shell for pentesting a WordPress website.

🎯 XML External Entity (XXE) Injection Payload List

Custom CLI for https://gtfobins.github.io

Knowledge base for The Weekly Challenge club members using Perl, Raku, Ada, APL, Awk, Bash, BASIC, Bc, Befunge-93, Bourne Shell, BQN, Brainfuck, C3, C, CESIL, C++, C#, Clojure, COBOL, Coconut, Crys…