2023HW漏洞整理

ES ToolKit is a standalone solution to navigate and backup data for a wide range of Elasticsearch and Kibana versions.

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

bypass-url-parser

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

grep rough audit - source code auditing tool

Opensource rebuild of the XCOM Apocalypse Engine that requires the original files to run.

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

Dex to Java decompiler

Cloudflare Tunnel client (formerly Argo Tunnel)

Real-time face swap for PC streaming or video calls

Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

PDF Files for Pentesting

Differential fuzzing REPL for HTTP implementations.

Access large language models from the command-line

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

Remote CLI tools at your fingertips

a signal handler race condition in OpenSSH's server (sshd)

OpenMW is an open-source open-world RPG game engine that supports playing Morrowind. Main repo and issue tracker can be found here: https://gitlab.com/OpenMW/openmw/

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX