🃏 Delightful JavaScript Testing.

Metasploit Framework

Open-Source Shellcode & PE Packer

A Comprehensive Web Fuzzer and Content Discovery Tool

A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2

A Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer

DirBuster for Node.js

http://blog.grossman.io/how-to-write-async-await-without-try-catch-blocks-in-javascript/

HTTP Header Analysis Vulnerability Tool

Execute commands via Node.js debug port and inspector protocol

No description.

Example of a complex Ansible deploy

A browser extension to detect when zero-width characters are used to fingerprint cut/copied/pasted text.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

No description.

PowerSploit - A PowerShell Post-Exploitation Framework

Python Helper Utilities for SEH Overwrite Based Exploits

Do you want to easily find out which line of your code is printing that thing? This is the right module for you!

IEEE 802.21 experiment

List of Awesome Asset Discovery Resources

ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,swift-llvm-clang 5.0(waiting support swift obfuscator)

WPScan rewritten in Python + some WPSeku ideas

Based on https://bigcode.wordpress.com/2016/12/21/mingw-windows-icon-resource-example/

No description.

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

Rules for the Detection Engine in Elastic Security

GEF - GDB Enhanced Features for exploit devs & reversers

UNIX-like reverse engineering framework and command-line toolset

No description.

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Metasploit CTF 2020 - Five of Hearts Writeup - RISC-V Buffer Overflow with NX and Canary

Node.js library to easy calculate MD*, SHA*, etc fingerprint of a public/private key in HEX encoding.

A collection of awesome readme templates to display on your profile

A little tool to play with Windows security

Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

Defeating Windows User Account Control

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

.NET Project for performing Authenticated Remote Execution

Collection of CobaltStrike beacon object files

No description.

SSH tarpit that slowly sends an endless banner

an android-win bt test.

Example of webapp based on LoopBack, Gulp, JSPM, Angular2 & PostCSS

No description.

🎲 Mock or extend your GraphQL API with faked data. No coding required.

A bitcoin trading bot written in node - https://gekko.wizb.it/

🗂 The perfect Front-End Checklist for modern websites and meticulous developers

getsystem via parent process using ps1 & embeded c#

ODAT: Oracle Database Attacking Tool

A post-exploitation agent powered by Python, IronPython, C#/.NET

Constrained Language Mode + AMSI bypass all in one

👽 A free, fast and beautiful API request builder (web alternative to Postman) https://postwoman.io

Weaponized web shell

Tutorial on how to write the dumbest obfuscator I could think of.

Evalulate javascript like the built-in javascript eval() method but safely.

Wiki-like CTF write-ups repository, maintained by the community. 2016

:no_entry: offsec batteries included

Nmap - the Network Mapper. Github mirror of official SVN repository.

NetRipper - Smart traffic sniffing for penetration testers

Capture The Flag Binary fuzzer for Heap challanges

A collection of easy-to-understand guides to programming tools

A list of cool features of Git and GitHub.

Some setup scripts for security research tools.

A local emulator for Google Cloud Functions that allows you to deploy, run, and debug your Cloud Functions on your local machine before deploying them to the production Google Cloud Functions service.

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings; Evade DLP/MLS Devices; Defeat Data Whitelisting Controls; Social Engineering of Analysts; Evade AV Detection

notes to remember about binary exploitation, the stack and heap

Convert a base64 string to a Uint8Array in Node and the browser

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

A curated list of awesome Machine Learning frameworks, libraries and software.

https://iwantmore.pizza/posts/quickzip-seh-win10-wow64.html

The BloodHound C# Ingestor

Permission based access control for your angular applications

This project lets you connect your Antigravity IDE chat to Discord

RogueMaster Flipper Zero Firmware

The most popular Ethereum development framework

Unleash the power of lodash inside your GraphQL queries

Use Sass-like markup in your CSS

An interactive guide to updating the version of Angular in your apps

Ethereum JavaScript API

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

Generate RFC-compliant UUIDs in JavaScript

Python implementation of Metasploit's pattern_create/pattern_offset.

x86 ASCII AND-SUB Encoder

Corelan Repository for mona.py

Unified repository for different Metasploit Framework payloads

Horizon is the client facing HTTP API server for the Stellar ecosystem

Libra’s mission is to enable a simple global currency and financial infrastructure that empowers billions of people.

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

Rex library for dealing with Powershell Scripts

Rex provides a variety of classes useful for security testing and exploit development.

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

No description.

No description.

Get a ready-to-use GraphQL API for your schema

fast HTTP/1.1 benchmarking tool written in Node.js

Empire is a PowerShell and Python post-exploitation agent.

No description.

Terminal based YouTube player and downloader

hackjam.angular

The repository for high quality TypeScript type definitions.

The best stupid idea for fixing problems in node modules.

Ledger Nano / Nano S / Blue JavaScript APIs for Node.js and browsers

Blazingly fast CRC implementations for node.js and browser

No description.

lambda theme for oh my fish

Go Web Application Penetration Test

Stellar's public monorepo of go code

A WebAssembly shell project, set up with task runners, testing and CI+test coverage for both JS and C++

Monitor linux processes without root permissions

Scripted Local Linux Enumeration & Privilege Escalation Checks

Main Stellar client library for the Javascript language

No description.

Leggila su https://dantt.github.io/lettera-aperta-a-michele-serra/

Upgrade your netcat shell today!

A very intelligent browser based Webpack dashboard

A reactive programming library for JavaScript

Kali Linux Offensive Security Certified Professional Survival Exam Guide

Scripts I developed to help complete the OSCP certification.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Monorepo for ngrx codebase

A wrapper directive for clipboard.js

No description.

Node.js body parsing middleware

It's Hacktoberfest!! SendGrid is giving out shirts if you make pull requests!

The largest Node.JS best practices list. Curated from the top ranked articles and always updated

experimental http2 client for node and the CLI

What is the fastest method to parse JSON files?

Library for accessing arbitrarily nested, possibly nullable properties on a JavaScript object.

W3C XML Encryption implementation for node.js (http://www.w3.org/TR/xmlenc-core/)

🎯 Use Gulp with WordPress. An advanced & heavily documented Gulp WordPress boilerplate to help you kickstart a build-workflow for your WordPress plugins and themes. Gulp WordPress!

a package manager for javascript

Jest mock for the what-wg fetch polyfill

Isomorphic WHATWG Fetch API, for Node & Browserify

JSON logger for Node.js and browser.

Production Process Manager for Node.js apps with a built-in Load Balancer.

No description.

No description.

GRV is a terminal interface for viewing git repositories

Just requiring this JavaScript library makes things feel better

use ~ in require and import calls

The official Angular library for Firebase.

Advanced logging middleware for @ngrx/store applications

dts-gen creates starter TypeScript definition files for any module or library.

Convert React JavaScript code to TypeScript with proper typing

My blog

:bar_chart: Declarative Charting Framework for Angular2 and beyond!

Plugin helper for Fastify

:earth_africa: GraphQL server for Express, Connect, Hapi and Koa

A crazy fast HTTP router

Come and join the Entria team

Plugin to get and set alias for fields in Mongoose schemas to reduce db memory footprint

Send us a pull request by editing expansions.txt

For slim progress bars like on YouTube, Medium, etc

Linux tool to show progress for cp, mv, dd, ... (formerly known as cv)

Minimalistic starter project to quick start a Node.js back-end application in JavaScript ES6 with Flowtype, async/await & ES6 modules.

Minimalistic project template to jump start a Node.js back-end application in TypeScript. TSLint, Jest and type definitions included.

Utility to help find out why Node isn't exiting

This is an article with video tutorial and tool to gain a meterpreter shell by exploiting CVE-2017-0199 (Word RTF RCE) vulnerability.

Framework Independent Cassandra Object Models (ORM) for NodeJS

Boilerplate + examples for React Native (iOS, Android), React (isomorphic, Material-UI), Relay, GraphQL, JWT, Node.js, Apache Cassandra, DynamoDB, waterline

:train: The server shared by all of the GitHunt client examples

GraphQL syntax highlighting, linting, auto-complete, and more!

Reactive motion for JavaScript. In development.

Daemon to ban hosts that cause multiple authentication errors

TensorFlow-based neural network library

Example Foxx Service using GraphQL

GraphQL Schema for a Blog App

Angular 2 API client generator from swagger json

MongoDB migration framework

A Node.js migration framework for MongoDB

Automatically installs a git pre-commit script in your git repository which runs your `npm test` on pre-commit

a trainable robot that responds to activity on GitHub

A curated list of XML Signature, XML Encryption, SAML, WS-Security and other XML Security related libraries, projects, and references

Modern, fast, powerful Node.js web framework with microservices support

Specification for interoperability of common algebraic structures in JavaScript

A mixin library for ES6

Recall what you did on the last working day. Psst! or be nosy and find what someone else in your team did ;-)

Fast and low overhead web framework, for Node.js

Everything you need to know to get the job.

Docker applied in development, devops, testing, product management etc.

Dynamic tracing for javascript, in javascript (similar dtrace, ktap etc)

generate massive amounts of fake data in Node.js and the browser

:bird: :zap: Bluebird is a full featured promise library with unmatched performance.

Library and command line tool to detect SHA-1 collision in a file

A terminal built on web technologies

A collection of JavaScript engine CVEs with PoCs

A Yarn-based, opinionated monorepo management tool

🌲 super fast, all natural json logger 🌲

Course materials for Modern Binary Exploitation by RPISEC

JSON for the ES5 era. (Not an official successor to JSON.)

Creates a .lnk file with unicode chars that reverse the file extension and adds a .txt to the end to make it appear as a textfile. Payload is a powershell webdl and execute

A complete, yet simple, starter for Angular using webpack

RxJS Workshop exercises for MLOC.js

Linux privilege escalation auditing tool

Deploy part of PM2