Repositories list

• CTF-SQL-Injection-Login

  Public
  SQL Injection login as admin challenge - single button deploy, just set your custom CTF Flag in the setup process!

  HTML

  •5•2•0•1•Updated Jan 1, 2024Jan 1, 2024

• cve

  Public
  Gather and update all available and newest CVEs with their PoC.

  MIT License

  •854•0•0•0•Updated Feb 16, 2022Feb 16, 2022

• PoCs

  Public
  A list of CVE's with Proof of Concepts

  HTML

  •2•0•0•0•Updated Jun 17, 2021Jun 17, 2021

• UhOh365

  Public
  A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

  Python

  •103•0•0•0•Updated Oct 23, 2019Oct 23, 2019

• Markdown-XSS-Payloads

  Public
  XSS payloads for exploiting Markdown syntax

  179•0•0•0•Updated Aug 16, 2019Aug 16, 2019

• lan-js

  Public
  Probe LAN devices from a web browser.

  JavaScript

  •

  Other

  •7•0•0•0•Updated May 28, 2019May 28, 2019

• collisions

  Public
  Hash collisions

  Python

  •192•0•0•0•Updated Feb 23, 2019Feb 23, 2019

• Python-dsstore

  Public
  A library for parsing .DS_Store files and extracting file names

  Python

  •

  MIT License

  •56•0•0•0•Updated Oct 16, 2018Oct 16, 2018

• hacking_slot_machines

  Public
  Hacking slot machines.

  C++

  •34•2•0•0•Updated Sep 20, 2018Sep 20, 2018

• botnets

  Public
  This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

  C++

  •747•2•0•0•Updated Sep 2, 2018Sep 2, 2018

• dref

  Public
  DNS Rebinding Exploitation Framework

  JavaScript

  •70•0•0•0•Updated Aug 22, 2018Aug 22, 2018

• trackerjacker

  Public
  Like nmap for mapping wifi networks you're not connected to, plus device tracking

  Python

  •

  MIT License

  •189•2•0•0•Updated Aug 13, 2018Aug 13, 2018

• css3-side-channel-attack

  Public
  https://www.evonide.com/side-channel-attacking-browsers-through-css3-features/

  HTML

  •

  MIT License

  •5•0•0•0•Updated May 31, 2018May 31, 2018

• GPON

  Public
  Exploit for Remote Code Execution on GPON home routers (CVE-2018-10562) written in Python. Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.

  Python

  •69•0•0•0•Updated May 10, 2018May 10, 2018

• vuejs-serverside-template-xss

  Public
  Demo of a Vue.js app that mixes both clientside templates and serverside templates leading to an XSS vulnerability

  PHP

  •22•0•0•0•Updated Feb 26, 2018Feb 26, 2018

• CSS-Keylogging

  Public
  Chrome extension and Express server that exploits keylogging abilities of CSS.

  CSS

  •432•0•0•0•Updated Feb 20, 2018Feb 20, 2018

• dns2proxy

  Public
  Offensive DNS server

  Python

  •163•0•0•0•Updated Jan 1, 2018Jan 1, 2018

• dnsd

  Public
  Dynamic authoritative name server

  JavaScript

  •

  Apache License 2.0

  •67•0•0•0•Updated Sep 20, 2017Sep 20, 2017

• kalirouter

  Public
  intercepting kali router

  Shell

  •79•1•0•0•Updated Aug 25, 2017Aug 25, 2017

• SecGen

  Public
  Create randomly insecure VMs

  Ruby

  •

  GNU General Public License v3.0

  •376•0•0•0•Updated Aug 16, 2017Aug 16, 2017

• Awesome-Hacking

  Public
  A collection of various awesome lists for hackers, pentesters and security researchers

  Creative Commons Zero v1.0 Universal

  •9.1k•5•0•0•Updated Aug 6, 2017Aug 6, 2017

• jaqen

  Public
  Jaqen - Simple DNS rebinding

  Go

  •

  BSD 2-Clause "Simplified" License

  •15•0•0•0•Updated Jul 25, 2017Jul 25, 2017

• wifi-cracking

  Public
  Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat 🖧

  MIT License

  •1.1k•0•0•0•Updated Jul 24, 2017Jul 24, 2017

• Bella

  Public
  A pure python, post-exploitation, data mining tool and remote administration tool for macOS.

  Python

  •

  MIT License

  •128•1•0•0•Updated Feb 11, 2017Feb 11, 2017

• DVCS-Pillage

  Public
  Pillage web accessible GIT, HG and BZR repositories

  Shell

  •59•0•0•0•Updated Jan 19, 2017Jan 19, 2017

• CTF-Wordpress-Metasploit

  Public
  PHP

  •

  Other

  •3•2•0•0•Updated Jan 5, 2017Jan 5, 2017

• CTF-SQL-Injection-AuthCode

  Public
  SQL Injection bypass auth code challenge - single button deploy, just set your custom CTF Flag in the setup process!

  HTML

  •3•2•0•0•Updated Jan 2, 2017Jan 2, 2017

• HackMe-File-Upload-Challenges

  Public
  Hack your friend's online MMORPG game - specific focus, php file upload scripts

  PHP

  •14•100•1•0•Updated Jan 2, 2017Jan 2, 2017

• CTF-XSS

  Public
  XSS cookie stealing challenge - single button deploy, just set your custom CTF Flag in the setup process!

  PHP

  •8•7•1•0•Updated Jan 1, 2017Jan 1, 2017

• CTF-SQL-Truncation

  Public
  SQL Truncation challenge - single button deploy, just set your custom CTF Flag in the setup process!

  PHP

  •2•1•0•0•Updated Jan 1, 2017Jan 1, 2017