Soufiane Tahiri

Anxun-isoon. I-SOON/Anxun leak related stuff

Mirai-Botnet. Mirai Botnet Client, Echo Loader and CNC source code (for the sake of knowledge)

TeamsNTLMLeak. Leak NTLM via Website tab in teams via MS Office

CitrixSecureAccessAuthCookieDump. Dump Citrix Secure Access auth cookie from the process memory

Vault-8-Hive. Hive solves a critical problem for the malware operators at the CIA.

RansomwareMonitor. A ransomware group monitoring bot written in C#.

Leaked-Password. A database containing 22409485 clear and equivalent sha256 hash passwords

dnspy-mcp. MCP server for .NET reverse engineering workflows (dnSpy/ILSpy ecosystem), built in C#.

RansomwareSimulator.public. Ransomware simulator written in C#

AD-Pentest-Cheatsheet. AD Pentest Cheatsheet by BlackWasp

ransomware_Incident_Response_FR. petit "playbook" qui pourrait servir de base à une réponse à incident lors d'une attaque de type ransomware

ContiLeaks.

deepdarkCTI. Collection of Cyber Threat Intelligence sources from the deep and dark web

Digital-Forensics-Incident-Response. This post is inspired by all the hard working DFIR, and more broadly security professionals, who have put in the hard yards over the years to discuss in depth digital forensics and incident response. (by Jai Minton)

MagentoScanner. Magento Security Scanner

LLMExploiter. A comprehensive security testing framework for Large Language Models based on OWASP Top 10 for LLMs, and NIST AI 600 frameworks. Features advanced false positive reduction, parallel testing, and comprehensive reporting.

Valkyrie. Another OSINT tool

HttpRquestPlayer. This small utility could help you to find authorization bugs.

sqlmap-cheat-sheet. sqlmap cheat sheet

X-Twitter-Mass-Delete-Script. A JavaScript-based tool to bulk delete your X/Twitter posts. This script allows you to delete tweets from specific time periods using X's advanced search features.

ESXi_ransomware_bitcoinWallets. ESXi semi-automated ransomware attacks bitcoin wallets

CitrixSecureAccessSAML. Citrix Secure Access SAML abuse

os-security-assessment. An automated security assessment tool for analyzing operating system vulnerabilities, patch statuses, and end-of-life risks.

ICMP. Send file over ICMP (reverse shell)

ai_llm_risk.

DoubleAgent. Zero-Day Code Injection and Persistence Technique

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Awesome-WAF. 🔥 Everything awesome about web-application firewalls (WAF).

AutoSploit. Automated Mass Exploiter

Ysoserial. Compiled jar version ysoserial (java payloads)

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

randomLists. Random wordlists (dirs,files,xss...)

RedTeaming_CheatSheet. Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

oss-fuzz. OSS-Fuzz - continuous fuzzing of open source software

Cyberwatch. Building a consolidated RSS feed for articles about cyberattacks

Resources-for-Beginner-Bug-Bounty-Hunters. A list of resources for those interested in getting started in bug bounties

Bloodhound-Custom-Queries. Custom Query list for the Bloodhound GUI based off my cheatsheet

CVE-2021-34527. PowerShell

RandomCreditCardNumberGenerator. This is a port of the port of of the Javascript credit card number generator now in C# by Kev Hunter https://kevhunter.wordpress.com

One-Liners. A collection of awesome one-liners for bug bounty hunting.

Amass. In-depth Attack Surface Mapping and Asset Discovery

GraphQLmap. GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

public-pentesting-reports. Curated list of public penetration test reports released by several consulting firms and academic security groups

awesome-osint. :scream: A curated list of amazingly awesome OSINT

Red-Team-Management. HTML

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

CVE-2021-26868. C

sql-injection-payload-list. 🎯 SQL Injection Payload List

HackerArt. A collection of art inspired by the world of cybersecurity and hacking culture.

fuzzdb. Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

RemoteAssemblyLoader. C#

bruteforce-lists. Some files for bruteforcing certain things.

xss-cheat-sheet. Ultimate Cross Site Scripting Attack Cheat Sheet

Probable-Wordlists. Wordlists sorted by probability originally created for password generation and testing