rek7
Follow
-
build-canaries Public
Beacon payload toolkit for red teams and researchers. Detects code execution and network requests in tools that process untrusted repositories.
-
-
-
secDevLabs-fine-tuning Public
Forked from globocom/secDevLabsA laboratory for learning secure web and mobile development in a practical manner.
PHP BSD 3-Clause "New" or "Revised" License UpdatedJun 10, 2026 -
interactsh-mcp Public
MCP server wrapping ProjectDiscovery's Interactsh. Lets LLM agents mint OOB callback URLs and poll for interactions to confirm SSRF, log4shell, blind XSS, DNS exfil, etc. Works with the public oast…
-
juice-shop-demo Public
Forked from juice-shop/juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application
TypeScript MIT License UpdatedJan 16, 2026 -
-
pentest-mcp Public
Forked from DMontgomery40/pentest-mcpNOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster, nikto, JtR, hashcat, wordlist building, and more.
JavaScript MIT License UpdatedNov 18, 2025 -
-
-
gpt-researcher Public
Forked from assafelovic/gpt-researcherGPT based autonomous agent that does online comprehensive research on any given topic
Python MIT License UpdatedJul 15, 2024 -
BenchmarkJava Public
Forked from OWASP-Benchmark/BenchmarkJavaJava GNU General Public License v2.0 UpdatedJul 12, 2024 -
AddOnlyPrimes Public
A highly-efficient non-constrained prime number generator that only adds
-
virus Public
Forked from mav8557/virusPolymorphic ELF Virus
Assembly GNU General Public License v3.0 UpdatedApr 10, 2024 -
winfilter Public
Forked from kindtime/winfilterWinlogon and LSA Notification Password Filters
Python UpdatedJul 11, 2023 -
-
damn-vulnerable-js-sca Public
Forked from lunasec-io/damn-vulnerable-js-scaAn intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.
JavaScript Apache License 2.0 UpdatedJan 26, 2023 -
chargen-go Public
Pure Go Implementation of the Chargen Protocol based RFC 864 and RFC 865, with the ability to spoof the source IP.
Go Apache License 2.0 UpdatedJan 8, 2023 -
hacktricks Public
Forked from HackTricks-wiki/hacktricksWelcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
Python Other UpdatedAug 11, 2022 -
patchy Public
Automated Persistence and Lateral Movement using GCP Patch Management
-
GitHubGraduation-2022 Public
Forked from github-education-resources/GitHubGraduation-2022Join the GitHub Graduation Yearbook and "walk the stage" on June 11.
JavaScript UpdatedMay 3, 2022 -
-
mXtract Public
mXtract - Memory Extractor & Analyzer
-
nosferatu Public
Forked from kindtime/nosferatuLsass NTLM Authentication Backdoor
-
ddoor Public
DDoor - cross platform backdoor using dns txt records
-
-
dll-hijacking Public
dll proxying
-
BitRat-Source-Code Public
Forked from Snykes/BitRat-Source-CodeBitRat Source Code
MIT License UpdatedOct 23, 2020 -
Amass Public
Forked from owasp-amass/amassIn-depth Attack Surface Mapping and Asset Discovery
-
postshell Public
PostShell - Post Exploitation Bind/Backconnect Shell