This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.
☆21Nov 11, 2023Updated 2 years ago
Alternatives and similar repositories for Resources
Users that are interested in Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Basic Keylogger in C++☆15Apr 7, 2021Updated 5 years ago
- Reverse engineering analysis of DarkTortilla RAT, a sophisticated malware that steals credit card data, decrypts browser passwords, and e…☆49Sep 5, 2026Updated last month
- DocMan is a document management system designed to improve efficiency and streamline workflows in OSINT (Open-Source Intelligence) invest…☆13Oct 12, 2024Updated 2 years ago
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- ☆11Aug 28, 2020Updated 6 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- WebDiver is a versatile Python script for crawling websites, extracting internal and external links, titles, and descriptions. It's usefu…☆14Nov 18, 2024Updated last year
- CVE-2021-36260☆17Oct 27, 2023Updated 2 years ago
- File hosting and scripted web delivery service extender for AdaptixC2. Host files over HTTP/HTTPS, generate one-liner payloads across 17 …☆36Aug 24, 2026Updated last month
- ☆11Jul 29, 2026Updated 2 months ago
- SOCKS-focused NTLM relay with persistent session packages and a long-lived SessionBank that owns authenticated TCP connections.☆41Aug 3, 2026Updated 2 months ago
- IETF Author Tools UI☆13Jan 10, 2024Updated 2 years ago
- `Web` `Node.js` `JavaScript` `Demo` - Educational dead-man-switch demonstration with a Node.js server, check-in timers and optional email…☆19Sep 16, 2026Updated last month
- 🔎 Username, email & phone OSINT — 9,700+ lookup checks from 19 projects, with profile enrichment, bulk searches, evidence graphs and exp…☆141Updated this week
- A swiss army knife for pentesting networks☆24Mar 16, 2023Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- European Parliament MCP Server - Political intelligence for AI agents☆28Updated this week
- Repository of useful bookmarklets☆12Apr 9, 2025Updated last year
- An inaudible attack vector for voice operated LLMs, Siri, Alexa etc.☆16Jun 23, 2024Updated 2 years ago
- AISecLists - Your AI Red Teaming Arsenal. Discover a curated collection of prompt lists for diverse AI security assessments, including LL…☆16Jan 18, 2025Updated last year
- This repo shows you how to extract satellite images using a CSV file that contains coordinates (latitude and longitude))☆26Nov 10, 2021Updated 4 years ago
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Technical documentation for Copernicus Data Space Ecosystem☆28Updated this week
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- ☆15Aug 14, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- tools and sites usefull for osint☆20Jan 1, 2025Updated last year
- NEAR Wiki☆30Oct 25, 2024Updated last year
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Talk + exploit for bootloder vuln in several Verifone VX devices☆14Sep 26, 2026Updated 3 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- A repository to help share financial-variables that people and tools care about☆17Nov 18, 2025Updated 11 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Sep 11, 2026Updated last month
- ☆37May 19, 2026Updated 4 months ago
- `Cross-platform` `CSV` `GeoJSON` `Dataset` - ATLAS (All The Locations of All Servers) -- 18,110 data centers across 116 countries and 4,1…☆68Sep 16, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This tool shows satellite images for certain coordinates (latitude and longitude) by Overpass API request / raw response☆33Nov 16, 2024Updated last year
- A template ripple.yml file and a ruby script for signing and submitting Ripple transactions using rippled.☆24Mar 6, 2019Updated 7 years ago
- This repository gathers vetted scripts and snippets across several programming languages for use in penetration testing and Capture the F…☆27Jul 8, 2026Updated 3 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- S3 bucket enumerator☆30Apr 7, 2019Updated 7 years ago
- A simple Desktop application for Chrome Remote Desktop, built using Electron.js☆17Aug 8, 2023Updated 3 years ago
- A 100% local, privacy-first alternative to Windows Recall — captures your screen, OCRs it, and lets you semantically search and chat with…☆20Jul 16, 2026Updated 3 months ago