✨ Projects

• 📖 PayloadsAllTheThings - A list of useful payloads and bypass for Web Application Security and Pentest/CTF

• 🖥️ HardwareAllTheThings - Hardware/IOT Pentesting Wiki

• 📕 InternalAllTheThings - Active Directory and Internal Pentest Cheatsheets

Other Projects

• SSRFmap - Automatic SSRF fuzzer and exploitation tool
• GraphQLmap - A scripting engine to interact with a GraphQL endpoint for pentesting purposes.
• SMBLoot - A terminal interface for browsing SMB shares, reading remote files, downloading and uploading files, and recursively inspecting remote directory trees.
• Goxifier - Proxychains equivalent for Windows
• SharpLAPS - Retrieve LAPS password from LDAP
• Wordpresscan - Wordpress scanner
• WHID Toolkit - Simple script for the WHID injector - a rubberducky wifi
• Damn Web Scanner - Extension for Chrome/Opera