drhack00000

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

singularity

A DNS rebinding attack framework.

JudasDNS

Nameserver DNS poisoning attacks made easy

evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

github-readme-stats

:zap: Dynamically generated stats for your github readmes

pics

File formats dissections and more...

0xpat.github.io

0xpat blog

ghidra

Ghidra is a software reverse engineering (SRE) framework

tweets

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

log4j-resources

Collection of resources for responding to the Log4j set of vulnerabilities.

translated_conti_leaked_comms

Leaked communication of Conti ransomware group from Jan 29, 2021 to Feb 27, 2022

o365-attack-toolkit

A toolkit to attack Office365

emailrep.io

emailrep.io Public API

hershell

Multiplatform reverse shell generator

AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

csrf

Package gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services 🔒

csrf

Logic behind CSRF token creation and verification.

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

xerosploit

Efficient and advanced man in the middle framework

easy-phishing

Easy to Phish anyone Social Media username and password

MailHog

Web and API based SMTP testing

geowifi

Search WiFi geolocation data by BSSID and SSID on different public databases.

ThePhish

ThePhish: an automated phishing email analysis tool

SocialFish

Phishing Tool & Information Collector

blackeye

This is the updated version of blackeye with ngrok

awesome-command-control

A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.