Dlat

pentest-tools

Small collection of tools I've written for use on pentest's

API-dnsdumpster.com

(Unofficial) Python API for https://dnsdumpster.com/

CVE-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

demiguise

HTA encryption tool for RedTeams

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

DPAT

Domain Password Audit Tool for Pentesters

EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

flatpipes

A TCP proxy over named pipes. Originally created for maintaining a meterpreter session over 445 for less network alarms.

fuzzbunch

NSA finest tool

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

grammar_nasl_v2

IIS-ShortName-Scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

ipinfo

A Bash shell-script wrapping the IP address information API of http://ipinfo.io

lazys3

marshalsec

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

meltdown-exploit

Meltdown Exploit PoC

multiav

MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.

nmap-grep

Comprehensive parsing script for grepable Nmap output files. Provides a summary table, split hosts files, and URLs for web and SMB hosts.

osx-config-check

Verify the configuration of your OS X machine.

palo.alto.fw.rule.to.csv

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

pepito

Finds sensitive stuff in your git repository by specifying terms to look for

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

spectre-attack-sgx

Spectre attack against SGX enclave

spectre-meltdown-poc

A semi-demi-working proof of concept for a mix of spectre and meltdown vulnerabilities

springbok

A tool for analyzing firewall rules

struts-pwn_CVE-2017-9805

An exploit for Apache Struts CVE-2017-9805

vlany

Linux LD_PRELOAD rootkit (x86 and x86_64 architectures)