Notes for efficient and easier engagements - notes over time
☆25Apr 1, 2021Updated 5 years ago
Alternatives and similar repositories for poor-mans-pentest-notes
Users that are interested in poor-mans-pentest-notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- For finding secrets, tokens and other common mistakes made by developers.☆12Oct 21, 2025Updated 9 months ago
- ☆10Apr 2, 2022Updated 4 years ago
- Random perl scripts from 2007 that may be usefull☆15Nov 21, 2015Updated 10 years ago
- A collection of Covid-19 related threat intelligence and resources.☆19Jul 17, 2020Updated 6 years ago
- A Pwning Toolkit☆27May 3, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A semi-automatic osint/recon framework.☆25May 22, 2024Updated 2 years ago
- Docker Challenge creation for CTFd. Allows per team/user containers!☆10Sep 8, 2021Updated 4 years ago
- Ragno is a Passive URL Crawler | Written in Python3 | Fetches URLs from the Wayback Machine, AlienVault's Open Threat Exchange & Common C…☆22Sep 1, 2025Updated 10 months ago
- stack based buffer overflow in MsIo64.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆13Jun 7, 2021Updated 5 years ago
- 这是一个shellcode简单的示例demo，使目标exe程序转换为shellcode可执行程序的一个demo【并不打算后期维护】，两年前写的，我发现被工作磨平了对技术的探索，今天翻到发现的。☆10Sep 23, 2023Updated 2 years ago
- A collection of malware samples caught by DIONAEA Honeypot☆13May 29, 2019Updated 7 years ago
- A look into DDoS protecting OpenVPN servers using iptables BPF☆16Jun 17, 2021Updated 5 years ago
- Burp extension that checks application requests and responses for indicators of vulnerability or targets for attack☆43Dec 23, 2022Updated 3 years ago
- Awesome Pure Data (PD) is a raw list of PureData patches and abstractions☆12Aug 21, 2017Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An MITM based Social Engineering (Phishing)attack POC!☆11Mar 25, 2014Updated 12 years ago
- simple c2 written in python to demonstrate security concepts☆13Sep 17, 2018Updated 7 years ago
- all about android reverse engineering☆12Oct 3, 2020Updated 5 years ago
- Yoink is a quick tool for use with Obsidian that will allow you to take a markdown file and package it up into a folder that will allow y…☆18Aug 31, 2023Updated 2 years ago
- ORhunter is an Open Redirect Vulnerability Scanner which Passively Crawls URLs from 3 Sources & Then Filter Potential URLs based on Param…☆41Oct 2, 2023Updated 2 years ago
- Notification webhook for GoPhish☆57Jun 10, 2024Updated 2 years ago
- ☆14Mar 9, 2023Updated 3 years ago
- Pentesting notes☆19Apr 30, 2026Updated 2 months ago
- Image downloader for various imageboards and image albums written in Python.☆10Sep 21, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Burp extension to track your current IP address. Extension focused for red teams where the attacker needs to log all used IP addresses.☆26Nov 2, 2025Updated 8 months ago
- A wrapper around the Proxmark3 client that will alert the user of specific events☆30Dec 13, 2020Updated 5 years ago
- PoC RCE Reverse Shell for CVE-2020-0796 (SMBGhost)☆11Jun 5, 2020Updated 6 years ago
- Detect Phishing fetching Certificate Transparency Logs☆21Jan 13, 2021Updated 5 years ago
- ☆23Jun 28, 2018Updated 8 years ago
- Surgical python tool to assist in LFI discovery☆13Sep 2, 2018Updated 7 years ago
- Automated Powershell Script to export NessusPro V7 or Nessus IO Scanner Reports - Nessus API☆11Dec 8, 2021Updated 4 years ago
- This is a simple form that uses angular JS to automatically filter for just public Google Docs☆11Aug 21, 2013Updated 12 years ago
- ToyOS is a simple x86 OS that only accepts numeric values into the input stream and returns them to a standard out console.☆12Nov 27, 2025Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- PoC for a kernel rootkit☆10Feb 20, 2020Updated 6 years ago
- A chat application that can ecnrypt messages with remote user's public Key and decrypt messages with local user's private Key☆11Jan 14, 2020Updated 6 years ago
- Simple reverse ICMP shell☆14Apr 30, 2024Updated 2 years ago
- Extracción de subdominios utilizando el servicio de crt.sh, comprobando los certificados TLS/SSL registrados del dominio.☆16Dec 30, 2024Updated last year
- Subdover is a MultiThreaded Subdomain Takeover Vulnerability Scanner Written In Python3☆111Oct 2, 2023Updated 2 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Shared lists of problem domains people may want to block with hosts files☆16Mar 3, 2025Updated last year