Original Proof-of-Concepts for React2Shell CVE-2025-55182

MacOS inside a Docker container.

The Network Execution Tool

Projects motion of pixels to a voxel

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for buildi…

ZITADEL - Identity infrastructure, simplified for you.

privat1 :(privatize) contains implementations of various adversarial attack methods on neural networks to object recognition.

Implementation of targeted (FGSM targeted) and untargeted (FGSM untargeted) FGSM attack and of PGD attack for MNIST trained neural network model

A library for detecting known secrets across many web frameworks

Credentials recovery project

Windows Exploit Suggester - Next Generation

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Python tool for converting files and office documents to Markdown.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Fawkes, privacy preserving tool against facial recognition systems. More info at https://sandlab.cs.uchicago.edu/fawkes

Automated decoding of encrypted text without knowing the key or ciphers used

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Obtain GraphQL API schema even if the introspection is disabled

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

An HTTP toolkit for security research.

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.

Cloud replacement for vacuum robots enabling local-only operation

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

60k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

Scripts, files, cheatsheets and more used for pentesting and my OSWE / AWAE exam.

Enjoy the magic of Diffusion models!

MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.