Static-Flow

BurpSuiteAutoCompletion

This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.

CloudCopy

This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapshot permission.

ParameterMiner

Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, ParameterMiner! Pipe in a list of javascript urls and ParameterMiner pulls all the variable names.

goRecorder

During pentesting I often miss screenshots of events for reports due to the quick pace of testing and a lack of foreknowledge about what will be important. To remedy that problem (and also to teach myself go) I built a command line tool that implements the "clip that" functionality of gaming consoles to allow me to save the last minute of screen activity as images to later view.

BurpSuiteAutoRepeaterNaming

This extension replaces the default repeater tab name with the URL path of the repeater request.

BurpRequestCleaner

This extension redacts potentially sensitive header and parameter values from requests using Shannon Entropy analysis.

LORC

LORC - Low Orbit RECON Cannon

aem-rce

Python and Metasploit module for exploiting Adobe Experience Manager (AEM) default credentials which can be used to achieve RCE

GoPatternMatcher

This tool allows for quickly searching for a specified pattern within HTTP Response bodies. Simply pipe in a list of URLs, specify your pattern and hit enter.

ratt

Recon All The Things (R.A.T.T.) provides a quick and easy way to spider a target ( or multiple targets ) and retrieve infomation key to further recon steps such as javascript files, relative/absolute paths referenced on the page, headers used in requests, and more!

Console

Faction C2 Framework Console Service

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Hibernate-Injection-Study

Study about HQL injection exploitation.

XSSContentDiscover

This is a PoC for an attack path I've seen on multiple engagements I wanted to standardize.

braindump

BrainDump is a simple, powerful, and open note taking platfform that makes it easy to organize your life.

Codiad

Web Based, Cloud IDE

DocumentServer

ONLYOFFICE Document Server is an online office suite comprising viewers and editors for texts, spreadsheets and presentations, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.

gophish

Open-Source Phishing Toolkit

govultr

Vultr Go API client

hackvertor

machat

An open source chat server implemented in Go

screenshot

Go library to capture desktop to image

townhall-news-extension

This Chrome Extension pulls in the top 5 news stories about all the politicians and government bodies that represent your area. Simply load the chrome extension and navigate to https://www.facebook.com/townhall/?tab=directory.