Exploi1t

XSStrike

Most advanced XSS scanner.

compaXSS

Bypass XSS Reflected Cross-site scripting

backcookie

Small backdoor using cookie.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

TamerPlatform

We Use Github Extensively and openly. So it becomes dificult to track what's what and what's where. This repository is a master repo to Help with that.

sish

HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Kankra

A Website Spider/Crawler, Python 3.x

xsshell

An XSS reverse shell framework

Kage

Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

servers

DorkNet

Selenium powered Python script to automate searching for vulnerable web apps.

nikto

Nikto web server scanner

ngrok-custom-domain

Attach subdomains to ngrok tunnels

Sn1per

Attack Surface Management Platform

shell-backdoor-list

🎯 PHP / ASP - Shell Backdoor List 🎯

EvilPhisher

Social Media Phisher

byob

An open-source post-exploitation framework for students, researchers and developers.

Blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

Idisagree

Control remote computers using discord bot and python 3.

msf-auxiliarys

My collection of metasploit auxiliary post-modules

beef

The Browser Exploitation Framework Project

Instagram-

Bruteforce attack for Instagram. Now available as a web app at https://yosemite-app.com

twitchslam

A toy implementation of monocular SLAM written while livestreaming

instaloader

Download pictures (or videos) along with their captions and other metadata from Instagram.

QRLJacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

sploits

trape

People tracker on the Internet: OSINT analysis and research tool by Jose Pino

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

ra1nstorm-helper

Automatically configures an environment to run checkra1n