Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

• UpdatedSep 17, 2024
• Python

A python based tool for exploiting and managing Android devices via ADB

• UpdatedMar 12, 2023
• Python

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

• UpdatedOct 17, 2025

WindUI is a open source UI library for Roblox Script Hubs

• UpdatedDec 18, 2025
• Lua

Exploiting challenges in Linux and Windows

• UpdatedDec 22, 2019
• Python

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

• UpdatedAug 11, 2023
• C

Do you want to use x64dbg instead of immunity debugger? oscp eCPPTv2 buffer overflow exploits pocs

• UpdatedJan 20, 2024

Framework for exploiting local vulnerabilities

• UpdatedNov 18, 2023
• Python

Data+code for NFT launch guide blogpost.

• UpdatedOct 13, 2021
• Jupyter Notebook

Challenges and vulnerabilities exploitation.

• UpdatedDec 26, 2020
• Python

Improper Authorization Vulnerability in Confluence Data Center and Server

• UpdatedNov 15, 2023
• Python

Uncategorized utilities

• UpdatedJan 5, 2019
• Python

The best backdoor scanner there is.

• UpdatedFeb 5, 2024
• Lua

Kernel Mode DLL Manual Mapper

• UpdatedNov 2, 2024
• C++

With xshellex you can paste any kind of c-shellcode strings in x64dbg, ollydbg & immunity debugger

• UpdatedAug 11, 2023
• C

✨Universal Aim Assist Framework✨

• UpdatedNov 14, 2024
• Lua

Blockchain Attack Vectors & Vulnerabilities to Smart Contracts

• UpdatedDec 27, 2022
• HTML

Hacking training websites list and tutorials

• UpdatedMay 6, 2025
• HTML

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

• UpdatedFeb 22, 2023

In this article, we will implement a Twist Attack with an example and show how, using certain points on the secp256k1 elliptic curve, we can get partial private key values ​​and restore a Bitcoin Wallet within 5-15 minutes using “Sagemath pollard rho function: (discrete_log_rho)” and “ Chinese Remainder Theorem” .

• UpdatedJan 22, 2023
• HTML