Vulnerable API. Contribute to InsiderPhD/Generic-University development by creating an account on GitHub.

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing - erev0s/VAmPI

Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities. - GitHub - snoopysecurity/dvws-node: Damn Vulnerable Web Services is a vulnerable application with a web service and an API that can be used to learn about webservices/API related vulnerabilities.

This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development) - ne0z/DamnVulnerableMicroServices

A simple Node.js Express REST app with some OWASP vulnerabilities. - GitHub - layro01/node-api-goat: A simple Node.js Express REST app with some OWASP vulnerabilities.

A very vulnerable implementation of a GraphQL API. - ivision-research/vulnerable-graphql-api

Intentionaly very vulnerable API with bonus bad coding practices - tkisason/vulnapi

completely ridiculous API (crAPI). Contribute to OWASP/crAPI development by creating an account on GitHub.

Android security insights in full spectrum. Contribute to d78ui98/APKDeepLens development by creating an account on GitHub.

KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync). - GitHub - helviojunior/knowsmore: KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

Compiled Binaries for Ghostpack (.NET v4.0). Contribute to r3motecontrol/Ghostpack-CompiledBinaries development by creating an account on GitHub.

This project is aimed at providing technical guides on various hacking topics. The most advanced topics are Active Directory and Web services. Other topics will be added. The ultimate goal is centralize all hacking techniques

These are notes about all things focusing on, but not limited to, red teaming and offensive security.

For more info on the project, click on the logo.

If you want to contribute, check out our contribution guide. Our criteria list sets out what we define as a LOLBin/Script/Lib. More information on programmatically accesssing this project can be found on the API page.

MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the ATT&CK® Navigator.

If you are looking for UNIX binaries, please visit gtfobins.github.io.
If you are looking for drivers, please visit loldrivers.io.

Helps you create requests faster, saving precious time on development.

Never ever ever use pixelation as a redaction technique - GitHub - BishopFox/unredacter: Never ever ever use pixelation as a redaction technique

The Network Execution Tool. Contribute to Pennyw0rth/NetExec development by creating an account on GitHub.

Learn to use NetExec

🦚 A web-app pentesting suite written in rust . Contribute to pwnwriter/kanha development by creating an account on GitHub.

⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal. - GitHub - pwnwriter/haylxon: ⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal.