thanatoskira,thanat0s,github

red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

reverse_dns_shell

A python reverse shell that uses DNS as the c2 channel

revokechinacerts

Revoke China Certificates.

rex

Rex provides a variety of classes useful for security testing and exploit development.

rhinopoc

Mozilla Rhino deserialization vulnerable POC

rootkits-list-download

This is the list of all rootkits found so far on github and othersites.

ropeme

ROPME is a set of python scripts to generate ROP gadgets and payload.

ropper

You can use ropper to display information about files in different file formats and you can find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC). For disassembly ropper uses the awesome Capstone Framework.

rottenpotato

RottenPotato local privilege escalation from service account to SYSTEM

rtcp

利用Python的Socket端口转发，用于远程维护

s2-046-poc

S2-046-PoC

scanner-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

scanner-server

subdomain、port、folder scanner

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

scrabble

Simple tool to recover .git folder at remote server

sec-chart

Security Flow Chart

secgen

Generate vulnerable virtual machines on the fly (current team development is taking place in the cliffe/SecGen fork)

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.