A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find s…

Websec interview questions by tib3rius answered

Blind XSS SVG

Huge Collection of Wordpress Exploits and CVES

List of Github repositories and articles with list of dorks for different search engines

Build a Jekyll blog in minutes, without touching the command line.

patch ext

make frida strong, bypass frida detection.

A way to delete a locked, or current running executable, on disk.

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Face Depixelizer based on "PULSE: Self-Supervised Photo Upsampling via Latent Space Exploration of Generative Models" repository.

Fuzzing harness for testing proprietary image codecs supported by Skia on Android

Some scripts useful for red team activities

afl++ is afl 2.56b with community patches, AFLfast power schedules, qemu 3.1 upgrade + laf-intel support, MOpt mutators, InsTrim instrumentation, unicorn_mode and a lot more!

Detect Frida for Android

Basically a script thrift shop

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

bash poc scripts to exploit open fpm ports

Leaked Muddyc3 C2 source.

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

✨ Build a beautiful and simple website in literally minutes. Demo at http://deanattali.com/beautiful-jekyll

A minimalist Jekyll theme for running a personal blog

Parse scope definitions to Burp Suite / ZAP compatible formats for import