Valurk

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

CVE-2024-21111

Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability

dploot

DPAPI looting remotely and locally in Python

wpfinger

wpfinger is a red-team WordPress scanning tool

CVE-2020-1472

Test tool for CVE-2020-1472

WhatWaf

Detect and bypass web application firewalls and protection systems

Bluetooth-LE-Spam

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

fcm_server_key

Tool to extract & validate google fcm server keys from apks

Android-Responder

Scripts for running Responder.py in an Android (rooted) device.

kbd-audio

🎤⌨️ Acoustic keyboard eavesdropping

Pentest-Cheatsheets

GitHacker

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

GitHack

A `.git` folder disclosure exploit

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

thc-hydra

hydra

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

LaZagne

Credentials recovery project

Inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

SSLUnpinning_Xposed

Android Xposed Module to bypass SSL certificate validation (Certificate Pinning).

wifiphisher

The Rogue Access Point Framework

PhoneSploit-Pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

GIUDA

Ask a TGS on behalf of another user without password

sievePWN

An android application which exploits sieve through android components.

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

Flux-Keylogger

Javascript keylogger with web panel

GodPotato