My Private Website Pentesting Tool

Just like a ghost, Ghost_Dir is capable of detecting hidden subdirectories that other scanning tools may not be able to find. It acts silently, without leaving any traces, and is able to penetrate into obscure areas of the web page that usually go unnoticed.

OWASP LLM (Large Language Model) Top 10

Subdomain lookup tool using https://subdomainfinder.c99.nl/

Security notes

This repository is all about the POC and Tools that can be leveraged down for initial access in red teaming engagements.

Useful info about tools and methods

THM DESCRIPTION: Get started with Cyber Security in 24 Days - Learn the basics by doing a new, beginner friendly security challenge every day leading up to Christmas.

A collection of awesome penetration testing and offensive cybersecurity resources.

Offensive Security Scripts (OSS) - Repository of random scripts I've written for offensive purposes.

Pages documenting my Pentesting journey.

PortScanner is a C# tool for identifying open ports on target systems, crucial for network security. It offers fast, multi-threaded scanning and detailed reports, perfect for network administrators and cybersecurity professionals.

This have 150+ books for start your career in the Penetration testing or cybersecurity

LSASSExtractor is a lightweight tool designed to capture memory dumps of the LSASS process on Windows systems. By leveraging the Windows API, it locates the target process and creates a memory dump, which can be analyzed to extract sensitive information such as passwords, encryption keys, and authentication tokens.

Denum is a tool designed for the reconnaissance phase of penetration testing and is especially valuable for bug bounty hunters. It helps in gathering and cleaning domain names from URLs to extend the scope of their search by efficiently extracting and standardizing core domain names and subdomains.

Your Ultimate Companion for Security Testing and Vulnerability Tracking

Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It supports bulk domain scanning and logs detailed results for analysis.

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Offensive Security Research, Corporate Espionage Investigation

All knowledge I gained from CTFs, real life penetration testing and learning by myself.