swisskyrepo

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Automatic SSRF fuzzer and exploitation tool

Active Directory and Internal Pentest Cheatsheets

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

Hardware/IOT Pentesting Wiki

WPScan rewritten in Python + some WPSeku ideas

Another web vulnerabilities scanner, this extension works on Chrome and Opera

Retrieve LAPS password from LDAP

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Simple script for the WHID injector - a rubberducky wifi

SMBLoot is a terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspecting remote directory trees.