Syzik

sherlock

Hunt down social media accounts by username across social networks

phoneinfoga

Information gathering framework for phone numbers

gophish

Open-Source Phishing Toolkit

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

maigret

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

HELK

The Hunting ELK

IntruderPayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

SSRFmap

Automatic SSRF fuzzer and exploitation tool

lsassy

Extract credentials from lsass remotely

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

hashes

Magic hashes – PHP hash "collisions"

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

ntlmv1-multi

NTLMv1 Multitool

SMBetray

SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over the wire in cleartext.

gosecretsdump

Dump ntds.dit really fast

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

Cloud-Security-Research

Cloud-related research releases from the Rhino Security Labs team.

LDAPWordlistHarvester

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

alpaca

A local HTTP proxy for command-line tools. Supports PAC scripts and NTLM authentication.

bambdas

Bambdas collection for Burp Suite Professional and Community.

ccmpwn

modifyCertTemplate

ADCS cert template modification and ACL enumeration

osgint

OSINT tool to find informations about a github user (email2username, username2email, creation date ...)

pp-finder

PP-finder Help you find gadget for prototype pollution exploitation

ADcheck

Assess the security of your Active Directory with few or all privileges.

Bug-Bounty-Wordlists

OUned

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

MailPermute

Generate email permutations from a name and verify if this email exist with different providers (gmail, duckduckgo, yahoo, yandex)