pich4ya Goto Github PK

aart

Vulnerable Web App - your server will be at risk if it is deployed

adape-script

Active Directory Assessment and Privilege Escalation Script

asm_prog_ex

Linux Port for Xorpd's Assembly Course

backup-fuzzer

File Backup Fuzzer

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

cookiecatcher

CookieCatcher

credssp

A code demonstrating CVE-2018-0886

csrf-land

Cross-site request forgery Learning Platform

cve-2022-42475

POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon

docker-osquery

Dockerfiles for containerized osquery

electron-builder

A complete solution to package and build a ready for distribution Electron app with “auto update” support out of the box

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gdog

A fully featured Windows backdoor that uses Gmail as a C&C server

git-workshop-day-1

hack-me-bot

Vulnerable Line bot for demonstration and education

hack-night

Hack Night is an open weekly training session run by the ISIS lab.

hunt

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

invoke-obfuscation

PowerShell Obfuscator

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

just_html

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

metasploit-framework

Metasploit Framework

metasploit-vps-installer

Metasploit installer for Debian (Jessie) VPS.

ms-teams-rce

oas

ระบบบัญชีออนไลน์ Online Accounting System (OAS)

openvas-docker

A Docker container for Openvas

pentest-scripts

just my random stuffs, feel free to clone/fork

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework