H8to

followers

following

stars

Organizations

rootcologne

Sebastian Haas's starred repositories

BloodHound

Six Degrees of Domain Admin

Language:PowerShellGPL-3.09865 376 510

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

Language:ShellGPL-3.06496 337 423

Psychson

Phison 2251-03 (2303) Custom Firmware & Existing Firmware Patches (BadUSB)

Language:C#MIT4113 384 237

dirtycow.github.io

Dirty COW

Language:HTML3348 189 46

WiFi-Pumpkin-deprecated

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

Language:Python3091 267 496

b374k

PHP Webshell with handy features

Language:CSSMIT2393 141 34

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

Language:PythonApache-2.02325 62 25

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

Language:PerlGPL-2.01702 51 18

Hob0Rules

Password cracking rules for Hashcat based on statistics and industry patterns

SCANNER-INURLBR

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

Language:PHPGPL-2.0872 114 11

XssPy

XssPy - Web Application XSS Scanner

Language:PythonMIT834 63 22

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

Language:PythonGPL-3.0530 24 6

vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

Language:PerlGPL-3.0324 35 13

Metaphor

Metaphor - Stagefright with ASLR bypass

Language:PythonGPL-3.0311 32 16

CANToolz

CANToolz - framework for black-box CAN network analysis

Language:PythonNOASSERTION305 46 5

CVE-2015-1701

Win32k LPE vulnerability used in APT attack

Language:CBSD-2-Clause286 34 2

RSPET

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

Language:PythonMIT260 33 24

sticky_keys_hunter

A script to test an RDP host for sticky keys and utilman backdoor.

Language:ShellGPL-3.0257 16 4

bravia-auth-and-remote

Shell snippets to auth and send remote control commands to Sony Bravia TVs

Language:ShellISC249 27 12

codewarrior

code-searching tool and static code analysis - Beta

Language:CBSD-3-Clause220 12 15

dymerge

🔓 A dynamic dictionary merger for successful dictionary based attacks.

Language:PythonMIT217 25 9

bugbountydash

[depreciated] Terminal dashboard for bug bounty hunters that use HackerOne and Bugcrowd

Language:JavaScript189 15 2

malusb

Malicious USB

Language:CLGPL-3.0170 24 5

xxeserve

XXE Out of Band Server.

Language:Ruby169 7 2

blind-sql-bitshifting

A blind SQL injection module that uses bitshfting to calculate characters.

Language:PythonMIT111 15 1

domain

Setup script for Regon-ng

Language:Python4 30

public-pentesting-reports

Curated list of public penetration testing reports released by several consulting firms

2 30