ScriptIdiot

vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.

needle

The iOS Security Testing Framework

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

HardeningKitty

HardeningKitty - Checks and hardens your Windows configuration

ShellGhost

A memory-based evasion technique which makes shellcode invisible from process start to end.

TeamsPhisher

Send phishing messages and attachments to Microsoft Teams users

Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

onedrive_user_enum

onedrive user enumeration - pentest tool to enumerate valid o365 users

RedCloud-OS

RedCloudOS is a Cloud Adversary Simulation Operating System for Red Teams to assess the Cloud Security of Leading Cloud Service Providers (CSPs)

fileless-elf-exec

Execute ELF files without dropping them on disk

SharpToken

Windows Token Stealing Expert

HadesLdr

Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2

evilqr

Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.

AtlasReaper

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

deepsecrets

Secrets scanner that understands code

WMIExec

Set of python scripts which perform different ways of command execution via WMI protocol.

GhostFart

LockScream

macOS Client-Side Phishing lock screen payload

BOFMask

Winsocky

Winsocket for Cobalt Strike.

ADxRay

Active Directory's Health Check script that generates a full HTML report of the environment's health, security and status based on Microsoft's Best Practices.

ropci

So, you think you have MFA? AAD/ROPC/MFA bypass testing tool

SharpDXWebcam

Utilizing DirectX and DShowNET assemblies to record video from a host's webcam

MalwareMorphology

PHISHLET-EVILGINX3

PHISHLET [EVILGINX3] Settings for phishing sites are written in the yaml language. This is a long development of my collection that I have been working on for the last 3 months due to changes in site security rules in particular scripts for bypassing the CloudFlare security. 🙌 I PRESENT to you my collection from the sites : 1Password / Binance

cs2br-bof

BOF_Development_Docker

A VSCode devcontainer for development of COFF files with batteries included.

Group3rExplorer

Fun GUI for Group3rs output log

Terrible-Thick-Client

"Terrible Thick Client" is a vulnerable application developed in C# .NET framework.

go-DripLoader

DripLoader的golang实现