blackhatethicalhacking

Pentest-Tools

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Osintgram

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

awesome-bugbounty-tools

A curated list of various bug bounty tools

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

ODIN

Automated network asset, email, and social media profile discovery and cataloguing.

GoMapEnum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365 and gather emails on Linkedin

Spray365

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to bypass Azure Smart Lockout and insecure conditional access policies.

WinPwnage

UAC bypass, Elevate, Persistence methods

cryptosteganography

A python steganography module to store messages or files protected with AES-256 encryption inside an image.

shodan_quick_recon

A Python Tool that uses Shodan API's to perform quick recon for vulnerabilities

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud.

swaks

Swaks - Swiss Army Knife for SMTP

fibratus

A modern tool for the Windows kernel exploration and tracing

log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

osmedeus

A Workflow Engine for Offensive Security

reconspider

🔎 Most Advanced Open Source Intelligence (OSINT) Framework for scanning IP Address, Emails, Websites, Organizations.

SandboxDefender

C# code to Sandbox Defender (and most probably other AV/EDRs).

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

sqlmap

Automatic SQL injection and database takeover tool

hashcat

World's fastest and most advanced password recovery utility

WitnessMe

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Parth

Heuristic Vulnerable Parameter Scanner

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

wholeaked

a file-sharing tool that allows you to find the responsible person in case of a leakage

bheh_zsh_config

BHEH Official Zsh Config

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

ZipExec

A unique technique to execute binaries from a password protected zip

NimGetSyscallStub

Get fresh Syscalls from a fresh ntdll.dll copy