TsukiCTF

FileRise. 🗂️ FileRise – lightweight, self-hosted file manager & storage hub with granular ACLs, resumable uploads, encrypted folders, WebDAV & SSO. Fully Docker / Unraid compatible.

esp8266_deauther. Affordable WiFi hacking platform for testing and learning

esp8266_beaconSpam. Creates up to a thousand WiFi access points with custom SSIDs.

Image-Hosting. Image hosting web application with docker support

As-You-Go-GPT. As-You-Go GPT is an intuitive and interactive application that enables users to have a conversation with AI on-the-fly. The program is designed to assist with chat sessions, file handling, and URL content retrieval, making it an indispensable tool for users who need AI-powered assistance in real-time.

pspy. Monitor linux processes without root permissions

DiscordChatExporter. Saves Discord chat logs to a file

dotfiles. my dotfiles for VMs

vulnerable-code-snippets. Twitter vulnerable snippets

Lovely-Potato. Automating juicy potato local privilege escalation exploit for penetration testers

RemoveAdblockThing. The intrusive "Ad blocker are not allowed on YouTube" message is annoying. This open-source project aims to address this issue by providing a solution to bypass YouTube's ad blocker detection

Portscan. Hardcoded nmap command automation for CTFs / Bug Bounties / OSCP

php_filter_chain_generator. Python

Snoop-Core. Capturing network packets and extracting DNS queries

Watchdog. Reverse Proxy Middleware to Sniff for Malicious Packets

Pizza-Builder. JavaScript

Books-REST-API. MVC REST API for book information

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

network. C

CarbonCopy. A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

OSCP-Archives. An archive of everything related to OSCP

AutoBlue-MS17-010. This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

cryptoalltheway. Jupyter Notebook

Phantom-Evasion. Python antivirus evasion tool

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

gdb-dashboard. Modular visual interface for GDB in Python

devdocs-desktop. GTK3 application for DevDocs API documentation browser.

impacket. Impacket is a collection of Python classes for working with network protocols.

CrackMapExec. A swiss army knife for pentesting networks

HW5. Hackwestern 5 Project

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

ptf. The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

WhatWeb. Next generation web scanner

byob. An open-source post-exploitation framework for students, researchers and developers.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Reconnoitre. A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.