One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Alphanumeric Shellcode (x86) Encoder

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Tmux config file. Browser like shortcuts, tweaked to work with my vortex pok3r

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Fast web fuzzer written in Go

Wordlists for creating statistically likely username lists for use in password attacks and security testing

An HTTP toolkit for security research.

Proof of concept for abusing SeLoadDriverPrivilege (Privilege Escalation in Windows)

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Common User Passwords Profiler (CUPP)

Impacket is a collection of Python classes for working with network protocols.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…