Swissky

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SSRFmap. Automatic SSRF fuzzer and exploitation tool

InternalAllTheThings. Active Directory and Internal Pentest Cheatsheets

GraphQLmap. GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

HardwareAllTheThings. Hardware/IOT Pentesting Wiki

Wordpresscan. WPScan rewritten in Python + some WPSeku ideas

DamnWebScanner. Another web vulnerabilities scanner, this extension works on Chrome and Opera

SharpLAPS. Retrieve LAPS password from LDAP

Vulny-Code-Static-Analysis. Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

WHID_Toolkit. Simple script for the WHID injector - a rubberducky wifi

Nephelees. Néphélées (Νεφήλαι, Nephḗlai) : cloud nymphs greek - also NTDS cracking tool on Google Cloud

swisskyrepo.github.io. Source of swisskyrepo.github.io - Public

jsleak. Upgrading jsleak with a CI/CD and new rules

ygo-meta-deck. Deck analysis with OpenAI