Gray Hat™

#GitHub #Tools An open-source post-exploitation framework for students, researchers and developers. https://github.com/malwaredllc/byob SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking. https://github.com/EnableSecurity/sipvicious #Tools@dilagrafie

Automatically extract documents from images and perspectively correct them with classic computer-vision algorithms. Check out Perspec for a GUI alternative. https://github.com/ad-si/Perspectra #Tools@dilagrafie

Windows rootkit designed to work with BYOVD exploits. https://github.com/ColeHouston/Sunder #Tools@dilagrafie

Search engine for CTF writeups with instant results. https://github.com/sarperavci/ctf-writeups-search #Tools@CyberDilara

GitHub Entreprise Server SAML authentication bypass (CVE-2025-23369) exploit. https://github.com/hakivvi/CVE-2025-23369 #Tools@CyberDilara

HTB: Cicada. https://0xdf.gitlab.io/2025/02/15/htb-cicada.html

HTB: Cicada. https://0xdf.gitlab.io

HTB: Cicada. https://0xdf.gitlab.io/2025/02/15/htb-cicada.html

HTB: Cicada. https://0xdf.gitlab.io/2025/02/15/htb-cicada.html

A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates. https://github.com/xaitax/PatchaPalooza #Tools@CyberDilara

A curated list of various bug bounty tools. https://github.com/vavkamil/awesome-bugbounty-tools

#GitHub #Tools ServerBox - server status & toolbox. https://github.com/lollipopkit/flutter_server_box An open source alternative to searx which provides a modern-looking , lightning-fast, privacy respecting, secure, meta search engine. https://github.com/neon-mmd/websurfx Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx. https://github.com/Checkmarx/kics E4GL30S1NT - Simple Information Gathering Tool https://github.com/C0MPL3XDEV/E4GL30S1NT CLI tool for saving complete web pages as a single HTML file. https://github.com/Y2Z/monolith #Tools@CyberDilara

Safari 1day RCE Exploit. https://github.com/wh1te4ever/WebKit-Bug-256172 #Tools@dilagrafie

#GitHub #Tools SubScan: A Chrome Extension for Bug Bounty Hunters. https://github.com/Ractiurd/SubScan AppSec Ezine Public Repository. https://github.com/Simpsonpt/AppSecEzine Fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. https://github.com/musana/fuzzuli A tool to check for DNS zone transfer vulnerabilities. https://github.com/CandyCaneCapone/ZoneSnatcher PenTestPilot is an automated penetration testing framework that scans open ports, identifies services and versions, maps vulnerabilities via CVE databases, and automatically launches exploits with Metasploit. Modular and customizable for efficient security assessments. https://github.com/svpawar3039/PenTestPilot #Tools@CyberDilara

#GitHub #Tools AppArmor and Seccomp profiles for K8S images. https://github.com/Archguardian-io/Kubernetes-AppArmor-Profiles Meshery, the cloud native manager. https://github.com/meshery/meshery Open Source Application for Advanced LLM Engineering: interact, train, fine-tune, and evaluate large language models on your own computer. https://github.com/transformerlab/transformerlab-app How to find : FUZZ all Endpoints and find leaks Wordlist. https://github.com/Bo0oM/fuzz.txt #Tools@CyberDilara

Bug: SQLi Method: Oneliner https://github.com/h6nt3r/tools/blob/main/oneliners/sql_Injection.md #sqli

Android malware (.apk) can be spread through a fake PDF document by manipulating the file extension in the WhatsApp application. PoC is available in this repo. https://github.com/0x6rss/WhatsApp-extension-manipulation-PoC

Telegram Information Gathering [Kali Linux] https://github.com/sockysec/Telerecon #Tools@CyberDilara

AboutLibraries automatically collects all dependencies and licenses of any gradle project (Kotlin MultiPlatform), and provides easy to integrate UI components for Android and Compose-jb environments. https://github.com/mikepenz/AboutLibraries #Tools@CyberDilara

Artificial Intelligence WILDCHAT-50M: A Deep Dive Into the Role of Synthetic Data in Post-Training https://github.com/penfever/wildchat-50m CycleGuardian: A Framework for Automatic RespiratorySound classification Based on Improved Deep clustering and Contrastive Learning https://github.com/chumingqian/CycleGuardian #Tools@CyberDilara