DarthSoda

followers

following

stars

DarthSoda's repositories

awesome-osint

:scream: A curated list of amazingly awesome OSINT

NOASSERTION010

badlnk

Reverse Shell in Shortcut File (.lnk)

Language:Shell010

beef

The Browser Exploitation Framework Project

Language:JavaScript000

chisel

A fast TCP tunnel over HTTP

Language:GoMIT010

Citadel

My small collection of pentesting scripts

000

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

GPL-3.0000

CrackMapExec

A swiss army knife for pentesting networks

Language:PythonBSD-2-Clause010

evil-winrm

The ultimate WinRM shell for hacking/pentesting

Language:RubyLGPL-3.0010

FBBrute

Facebook Brute Force

000

Findsploit

Find exploits in local and online databases instantly

NOASSERTION000

gophish

Open-Source Phishing Toolkit

Language:GoNOASSERTION010

gtfo

Search gtfobins and lolbas files from your terminal

Language:PythonGPL-3.0010

impacket

Impacket is a collection of Python classes for working with network protocols.

Language:PythonNOASSERTION010

joomscan

OWASP Joomla Vulnerability Scanner Project

Language:Perl 6GPL-3.0010

kerbrute

An script to perform kerberos bruteforcing by using impacket

Language:PythonApache-2.0010

linux-exploit-suggester

Linux privilege escalation auditing tool

Language:ShellGPL-3.0010

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

Language:XSLT010

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

MIT000

OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan (py2) in scripts folder. Py3 port coming. Custom ISO coming.

Language:CMIT010

pspy

Monitor linux processes without root permissions

GPL-3.0000

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT010

sherlock

🔎 Hunt down social media accounts by username across social networks

Language:PythonMIT010

sipvicious

SIPVicious OSS is a set of security tools that can be used to audit SIP based VoIP systems.

Language:Python010

Sublist3r

Fast subdomains enumeration tool for penetration testers

GPL-2.0000

tusk

Refined Evernote desktop app

MIT000

Umbraco-RCE

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Language:PythonMIT010

wesng

Windows Exploit Suggester - Next Generation

BSD-3-Clause000

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Language:CMIT010

Windows-Privilege-Escalation

Windows Privilege Escalation Techniques and Scripts

BSD-3-Clause000

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

BSD-3-Clause000