R0niii

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

injection

PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

HTran

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

officeparser

Extract embedded files and macros from office documents.

hostapd-wpe

Modified hostapd to facilitate AP impersonation attacks

LFISuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

pipal

Pipal, THE password analyser

generateJenkinsExploit

VBad

VBA Obfuscation Tools combined with an MS office document generator

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

OSCP_study_guide

Notes of my OSCP study plan

ssrf_proxy

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

XSStrike

Most advanced XSS scanner.

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

payloads

Git All the Payloads! A collection of web attack payloads.

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

SJavaWebManage

SJavaWebManage 采用低版本jdk1.3开发的网站管理工具，支持文件管理/命令执行/数据库管理。

Jaqen

liniaal

Liniaal - A communication extension to Ruler

LinkedInt

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

DomLink

A tool to link a domain with registered organisation names and emails, to other domains.

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names