Tools

rsrdesarrollo/generator-burp-extension

Everything you need about Burp Extension Generation

w01fh4cker/screenconnect-authbypass-rce

Exploit script for CVE-2024-1708 and CVE-2024-1709 in ConnectWise ScreenConnect, enabling authentication bypass and remote code execution with user…

neo-neo6/cve-2025-65018-heap-buffer-overflow-in-libpng-ps4-ps5-

Proof-of-concept exploit for a heap buffer overflow in libpng on PS4/PS5. Generates a malicious PNG that triggers the vulnerability when opened in…

mak-/parameth

This tool can be used to brute discover GET and POST parameters

d4vinci/cwff

Create your Custom Wordlist For Fuzzing

sviim/clearml-cve-2024-24590-rce

With this script you can exploit the CVE-2024-24590

svenstaro/genact

🌀 A nonsense activity generator

wkovacs64/pwl

Password Lense: reveal character types in a password

perufitlife/dotclaude-security

Scan a repo's .claude/ config (settings.json hooks, MCP servers, env, allowed-tools) for the RCE & API-key-exfiltration footguns (CVE-2025-59536,…

ilianazz/young-domain-guard

Browser extension that warns users about recently registered domains to prevent phishing attacks. Queries RDAP to check domain age and displays…

ag3ntsc4rn/autorun-audit

Find code that runs without you asking: repo files that execute on folder open (VS Code tasks, agent hooks, MCP, devcontainers) and Python…

mandatoryprogrammer/thermoptic

A next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.

imthenachoman/how-to-secure-a-linux-server

Step-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…

wocanilo/cve-2019-14537

CVE-2019-14537 PoC

ristbs/contextmenuhijack

Execute a payload at each right click on a file/folder in the explorer menu for persistence

rosesecurity/anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…

mohamed--abdel-maksoud/pisiguard

Browser extension that detects PII and sensitive data in AI chats, masks it with placeholders before sending, and restores originals in replies—all…