reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

Gather and update all available and newest CVEs with their PoC.

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Grab cam shots & GPS location from target's phone front camera or PC webcam just sending a link.

Web Fuzzing Box - Web 模糊测试字典与一些Payloads

👶 BabySploit Beginner Pentesting Toolkit/Framework Written in Python 🐍

These are my checklists which I use during my hunting.

Hack Victim android Camera Using Link with Termux/Kali-linux

Everything needed for doing CTFs

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure code reviews. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn pentesting and secure coding practices.

A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse engineers, and low-level programmers.

⌨️ Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

A Powerful Phishing Tool with 50+ phishing templates. For more about Dark-Phish tool please visit the website.

A living document for penetration testing and offensive security.

The Black Hat GraphQL Book Repository

GoPhish Templates that I have retired and/or templates I've recreated.

CTF challenges designed and implemented in machine learning applications

Collocation of technical documentation and guides for devops, developers, pentesters, systems administrators and other IT professionals website

Totally Insecure Web Application Project (TIWAP)