🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Adaptive DLL hijacking / dynamic export forwarding - EAT preserve

Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

Hack-A-Sat Qualifiers Writeups

A large-scale entity and relation database supporting aggregation of properties

Tools for managing DNS across multiple providers

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

Retired TrustedSec Capabilities

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

CVE-2024-34102: Unauthenticated Magento XXE

smbclient-ng, a fast and user friendly way to interact with SMB shares.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container …

Burp Plugin to Bypass WAFs through the insertion of Junk Data

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Tunnel TCP connections through a file

An updated collection of resources targeting browser-exploitation.

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Breizh CTF 2024 - Challenges

Open-source Android/Desktop remake of Civ V

uBO Lite home (MV3)

Pentest Automation Tool_Outils automisation des taches de pentest

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident resp…

WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your…

A roadmap to learn C from Scratch

Bambdas collection for Burp Suite Professional and Community.