pondim Goto Github PK

action-regex-match

🔍 GitHub Action to do regex matching

adfspoof

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.

amass

In-depth Attack Surface Mapping and Asset Discovery

apktool

A tool for reverse engineering Android apk files

applicationinsights-java

Application Insights for Java

aptsimulator

A toolset to make a system look as if it was the victim of an APT attack

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

atproto

Social networking technology created by Bluesky

auto_wordlists

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-rce-techniques

Awesome list of techniques to achieve Remote Code Execution on various apps!

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

bluesky

experiment orchestration and data acquisition

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bypass-paywalls-chrome

Bypass Paywalls web browser extension for Chrome and Firefox.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

checkmarx-plugin

This plugin adds an ability to perform automatic code scan by Checkmarx server and shows results summary and trend in Jenkins interface.

chrome-bandit

Programmatically extract saved passwords from Google Chrome

cloudandcontainercompromisesimulator

Simulates a compromise in a cloud and container environment

cobaltstrike-beacon-data

Open Dataset of Cobalt Strike Beacon metadata (2018-2022)

collisions

Hash collisions and their exploitations

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

cookiecutter

A command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, VueJS projects.

covid-19-geographical-animations

credbandit

Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system