3B853B

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

AutoBlue-MS17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

InternalAllTheThings

Active Directory and Internal Pentest Cheatsheets

freezegun

Let your Python tests travel through time

factory_boy

A test fixtures replacement for Python

pyjwt

JSON Web Token implementation in Python

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

SSRFmap

Automatic SSRF fuzzer and exploitation tool

awesome-reversing

A curated list of awesome reversing resources

pencode

Complex payload encoder

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

dotnet-libs

O repositório de bibliotecas para dotnet que utilizamos em outros projetos.

clone

Uma forma de fazer git clones organizadamente.

py-libs

O repositório de bibliotecas em Python que utilizamos em outros projetos.

requests-cache

Persistent HTTP cache for python requests

Smap

a drop-in replacement for Nmap powered by shodan.io

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

DOMPurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

chisel

A fast TCP/UDP tunnel over HTTP

NetExec

The Network Execution Tool

nightmare

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

evil-winrm

The ultimate WinRM shell for hacking/pentesting

mimikatz

LAPSToolkit

Tool to audit and attack LAPS environments

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

smbmap

SMBMap is a handy SMB enumeration tool

windapsearch

Python script to enumerate users, groups and computers from a Windows domain through LDAP queries