Parse NTLM challenge messages over HTTP and SMB
updated at Nov. 8, 2024, 3:06 a.m.
Auditing for TLS certificates.
updated at Nov. 6, 2024, 11:54 a.m.
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
updated at Nov. 6, 2024, 6:42 a.m.
A front-end JavaScript toolkit for creating DNS rebinding attacks.
updated at Nov. 1, 2024, 6:29 p.m.
A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.
updated at Oct. 30, 2024, 2:38 a.m.
Scan your code for security misconfiguration, search for passwords and secrets.
updated at Oct. 26, 2024, 2:18 a.m.
A multiple reverse shell session/client manager via terminal
updated at Oct. 24, 2024, 1:25 p.m.
Pillage web accessible GIT, HG and BZR repositories
updated at Oct. 16, 2024, 11:18 a.m.
Stealing CSRF tokens with CSS injection (without iFrames)
updated at Oct. 15, 2024, 6:22 a.m.
vulnerable web application for training
updated at Oct. 5, 2024, 1:08 p.m.
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
updated at Oct. 5, 2024, 12:50 p.m.
A simple tool to convert the IP to a DWORD IP
updated at Oct. 5, 2024, 12:43 p.m.
A script that inspects multi-byte character sets looking for characters with specific user-defined properties
updated at Oct. 5, 2024, 12:43 p.m.