1111 Open source projects that are alternatives of or similar to Ssti Payloads

Team Fortress 2, but with a lot of fixes, QoL improvements and performance optimizations!

BertQA - Attention on Steroids

Multi Tool Subdomain Enumeration

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

Quick SQLMap Tamper Suggester

Library for injecting a shared library into a Linux or Windows process

Web path scanner

Infection vector that bypasses AV, IDS, and IPS. (For now...)

Kubernetes Common Configuration Scoring System

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

A REPL for D

Hacking Toolkit

Python Remote Administration Tool (RAT)

A wiki focusing on aggregating and documenting various SQL injection methods

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

❤️ Simple UI for pincode verification

Use a Fake image.jpg to exploit targets (hide known file extensions)

IotShark - Monitoring and Analyzing IoT Traffic

Algorithmic, Data Structures, Frontend and Pentest - Programming challenges and competitions to improve knowledge.

ARCANUS is a customized payload generator/handler.

This header file enforces Clang warnings to bu turned-on for specific flags (almost everyone, at least each one I was able to find).

Powerfull XSS Scanning and Parameter analysis tool&gem

Web Application recon automation

kube-scan: Octarine k8s cluster risk assessment tool

🚰 binary data "streams+" via data producers, data consumers, and pull flow.

A tiny, intuitive, robust, caching solution for injecting SVG files inline into the DOM.

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Code scanner library for Android, based on ZXing

Письма к студентам курса

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

Armbian kernel mirrors

⛵️ An Xcode Source Editor Extension that helps navigating to many places easier

A tool to test security of json web token

HERCULES is a special payload generator that can bypass antivirus softwares.

Skater .NET Obfuscator is an obfuscation tool for .NET code protection. It implements all known software protection techniques and obfuscation algorithms.

👨‍💻 30 Days of Code by HackerRank Solutions in C++, C#, F#, Go, Java, JavaScript, Python, Ruby, Swift & TypeScript. PRs Welcome! 😄

code

code obscure for object-c project. 方便强大的OC工程代码自动混淆工具

China's first CTFTools framework.中国国内首个CTF工具框架,旨在帮助CTFer快速攻克难关

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

OpenSSL对称算法、哈希校验、非对称算法、证书管理、SSL安全

Remote exploitation framework written in Python

This ansible role gets information from an AWS VPC and generate a graphical representation of security groups

The main Open Source portal for Comcast

Writing custom backdoor payloads with C# - Defcon 27 Workshop

SwiftDI the new way to use your dependency in Swift 5.1

Integration of Clair and Docker Registry

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

Automatically brute force all services running on a target.

GUI and API library to work with Engine assets, serialized and bundle files

A neovim plugin to run lines/blocs of code (independently of the rest of the file), supporting multiples languages

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

A JupyterLab extension to apply Black formatter to code within codecell.

Azure Storage Simplified

Proton Framework is a Windows post-exploitation framework similar to other Windows post-exploitation frameworks. The major difference is that the Proton Framework does most of its operations using Windows Script Host, with compatibility in the core to support a default installation of Windows 2000 with no service packs all the way through Windows 10.

Test the accuracy of Endpoint Detection and Response (EDR) software with simple script which executes various ATT&CK/LOLBAS/Invoke-CradleCrafter/Invoke-DOSfuscation payloads

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️