infodox

webtorrent

⚡️ Streaming torrent client for the web

peerflix

Streaming torrent client for node.js

OSXAuditor

OS X Auditor is a free Mac OS X computer forensics tool

xsscrapy

XSS spider - 66/66 wavsep XSS detected

android-unpacker

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

mana

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM

probe

OONI Probe network measurement tool for detecting internet censorship

iloot

OpenSource tool for iCloud backup extraction

Altman

the cross platform webshell tool in .NET

sasquatch

vmcloak

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

md5-password-cracker.js

Crack MD5 passwords with JavaScript Web Workers

sslstrip2

SSLStrip version to defeat HSTS

skypipe

A magic pipe in the sky for the command line

vga666

Passive VGA adapter 666 for Raspberry-Pi B+

tinfoleak

Get detailed information about a Twitter user activity

skpd

Process dump to executable ELF for linux

SLOTSCREAMER

linux-syscall-hooker

A Linux kernel module that locates the system call table in memory and hooks uname. Contributions welcome!

PeachOrchard

Peach Fuzzer Web Frontend

ravenhid

This device silently hunts its prey, swooping in to gather RFID cards.

ddk-hardware

Schematic and board files.

toorcon_2013

See my shmoocon talk repo for updated code:

evil_sysread

Evil Linux kernel module that hooks sys_read system call and lets a user get a reverse shell or execute shellcode in the kernel.

CHUCKWAGON

shmoocon_2014_talk

Talk material for Shmoocon 2014

BlueRed

BlueRed is a web application fuzzer

Deity

A Kippo plugin that attacks back

mallodroid

Find broken SSL certificate validation in Android Apps

HotelLock