1N3/PrivEsc

Payloads All The Things is an open-source GitHub repository maintained by swisskyrepo that collects payloads and bypass techniques for web application security testing. The README describes it as organized by vulnerability class, with each section containing a README.md write-up, example payloads, and often files for Burp Intruder.

hackingtool is a Python console maintained at Z4nzu/hackingtool that bundles 215 security tools across 21 categories (recon, OSINT, web and wireless attacks, forensics, post-exploitation, and more) behind one menu-driven launcher. An opt-in AI layer maps plain-English goals to the right tool and command. The README frames the project as built for authorized work: bug-bounty hunters, CTF players, OSINT researchers, security researchers or students, penetration testers, red teamers, and blue-team, SOC, or DFIR analysts.

mkcert generates trusted localhost certificates by creating a local CA and installing it in the system trust store—no manual configuration required. It supports wildcards, IP addresses, and S/MIME, and works on macOS, Linux, Windows, Firefox, Chrome, and Java. Mobile devices and Node.js need extra steps: manually install the CA on iOS/Android, and set NODE_EXTRA_CA_CERTS for Node. Guard the rootCA-key.pem—anyone with it can intercept your traffic.

x64dbg is an open-source debugger for Windows built to inspect executables you don't have source code for, aimed squarely at reverse engineering and malware analysis. It ships as separate 32-bit and 64-bit builds, bundles disassembly, assembly patching, and import reconstruction into one download, and can be extended through a documented plugin system.