SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Repository for information about 0-days exploited in-the-wild.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

Qualys sslabs-scan utility in a tiny docker image

OWASP Domain Protect - prevent subdomain takeover

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Multi-Cloud Security Auditing Tool

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication