PikaChu

CVE-2017-12617. Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

PayloadsAllTheThings. HTML

Frida-Guide. This repository explain how to write frida hook scripts and analysis written hooks.

Proxyshell-Scanner. nuclei scanner for proxyshell ( CVE-2021-34473 )

awesome-web-security.

CVE-2017-8295. Python

Bypassing-Web-Application-Firewalls. Python

web-challenge. web challenges

Learn-Resource. Resource Learn collection

Android-Automatic-MITM-Attack-Script. Python

bin_analyzer. Python

Practical-Malware-Analysis-Labs.

brute-force-secret-key. Script use to detect secret key use to sign cookies

security_whitepapers. Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

gef. Multi-Architecture GDB Enhanced Features for Exploit Devs & Reversers

awesome-CTF. JavaScript

ysoserial.net. C#

BypassAV. This map lists the essential techniques to bypass anti-virus and EDR

Pre-compile-exp. Pre-compile

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

MRF-Practice. a vulnerable android application to practice request forgery.

WindowsExploits. Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

OSEP. PEN-300 collection to help you on your exam.

SharpGmailC2. Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

Vulnerable-By-Design. Python

Path-Scanner. Python

python-pickle. Python

web-backdoor. Python

RedditC2. Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

Resources-Front-End-Beginner. The most essential list of resources for Front-End beginners (🇺🇸 🇬🇧 & 🇫🇷)

Malware.

Mona-Secure-Multi-Owner-Data-Sharing-for-Dynamic-Group-in-the-Cloud. Java

LFI-Scanner. Python

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.