Gavin Kramer's starred repositories
Ghostwriter
The SpecterOps project management and reporting engine
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
scam-links
A database of over 24000 scam links used for Discord, Steam and more.
FindUncommonShares
FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.
TwitterIoCsfeed
Collecting IOCs posted on Twitter
Purpleteam
Purpleteam scripts simulation & Detection - trigger events for SOC detections
auto-repeater
Automated HTTP Request Repeating With Burp Suite
Raid-Toolbox
Raid ToolBox (RTB) is a big toolkit of Spamming/Raiding/Token management tools for discord.
can-i-take-over-dns
"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.
AdvancedHuntingQueries
Microsoft 365 Advanced Hunting Queries with hotlinks that plug the query right into your tenant
waf-bypass
Check your WAF before an attacker does
BloodHound
Six Degrees of Domain Admin
spy-extension
A Chrome extension that will steal literally everything it can
InstagramUnfollowers
Check if people follows you back on Instagram.
Discord-Token-Checker
⚡ Discord Token Checker with GUI
DataSurgeon
Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text
Bug_Bounty_Notes
A collection of notes for bug bounty hunting
ars0n-framework
A Modern Framework for Bug Bounty Hunting
WAPT_Framework
A Web Application Penetration Testing Framework build in React with an Node/Express/MongoDB back-end
rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
WinAPI-Fun
A collection of (relatively) harmless prank examples using the Windows API
Kitty-Tools
Kahoot answer client aka "kitty tools". Is the No. 1 BEST (terminal based) Kahoot hacking client ||| (DOESN'T REQUIRE ANY ROOT) (Kahoot Cheat) (Kahoot) (Kahoot Hacking) (Best Cheat) (Kahoot Cheats) (works on any device)
Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
ForceAdmin
Collection of script templates to create infinite UAC prompts forcing a user to run as admin ⚠