SpiderLabs

HostHunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

DoHC2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

MCIR

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

SharpCompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

snappy

Nmap-Tools

SpiderLabs shared Nmap Tools

cribdrag

cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys

jboss-autopwn

A JBoss script for obtaining remote shell access

Airachnid-Burp-Extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

cve_server

Simple REST-style web service for the CVE searching

IOCs-IDPS

This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)

msfrpc

Perl/Python modules for interfacing with Metasploit MSGRPC

BurpNotesExtension

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

BlackByteDecryptor

groupenum

ModSecurity-log-utilities

Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.

Firework

Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.

OWASP-CRS-Documentation

Documentation for the OWASP CRS project

microphisher

µphisher spear phishing tool (reference implementation)

deblaze

Performs method enumeration and interrogation against flash remoting end points.

pingback

modsec-sdbm-util

Utility to manipulate SDBM files used by ModSecurity. With that utility it is possible to _shrink_ SDBM databases. It is also possible to list the SDBM contents with filters such as: expired or invalid items only.

advisories-poc

masher

multiple password 'asher using Python’s hashlib

OWASP-CRS-regressions

Regression tests for OWASP CRS v3

Jorogumo

Red Team Stored XSS SVG phishing-companion tool with the ability to serve a malicious login page, or clone an html page and implement custom javascript. It then generates a relevant SVG.

zpminternational

REvil_config

Configuration file for REvil / Kaseya July campaign

Grandoreiro-decryptor

Grandoreiro decryptor and DGA generator (26.May.2022)