Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use HTTP basic

SUDO_KILLER is a tool that can be used for privilege escalation on linux environment by abusing SUDO in several ways. The tool helps to identify

Killshot is a penetration testing framework, information gathering tool & website vulnerability scanner. You can use this tool to spider your website and

The shape of future technology is at the hand of Artificial Intelligence. ‘Artificial intelligence’ and it’s baby ‘Machine Learning’ has become too powerful

Pypykatz is a mimikatz implementation in pure Python. At least a part of it :) Runs on all OS's which support python>=3.6

The idea behind Fuzzowski, was to create the Network Protocol Fuzzer that we will want to use.

PowerZure is a PowerShell script written to assist in assessing Azure security. Functions are broken out into their context as well as the role needed to run

Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS (beta) written in pure Python.

This is ctftool, an interactive command line tool to experiment with CTF, a little-known protocol used on Windows to implement Text Services. This might be

This cheat sheet is about Python. It is one of the most used high-level programming languages. Most coders prefer using Python for developing

XSS-Freak is one of its kind since it crawls the website for all possible links and directories to expand its attack scope. Then it searches them for input

“Zend Framework 3.0.0 has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to

Cracking a single hash with a password list:hashcracker.py SHA256 11a1162b984fef626ecc27c659a8b0eead5248ca867a6a87bea72f8a8706109d -mode list -pwlist

A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness

Raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

Before you start, make sure to backup up an image of your entire disk(s). Tunic does not assist with full disk backup. Read disclaimer for more information.

Legion is an open source, easy-to-use, super-extensible and semi-automated network penetration testing tool that aids in discovery, reconnaissance and

Machine Learning is one of the most popular and trending topics globally, and students are indulging themselves more and more in this field. To give you an