initstring

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

evil-ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

uptux

Linux privilege escalation checks (systemd, dbus, socket fun, etc)

pentest-methodology

Short checklists for penetration testing methodology

lxd_root

Linux privilege escalation via LXD

lyricpass

Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.

pentest-tools

General stuff for pentesting - password cracking, phishing, automation, Kali, etc.

switcheroo

Universal LAN-based SSRF Attack Primitive

pyshell

Simple netcat-like binary for Windows, created with python and py2exe.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

MemPG

Memorable Passphrase Generator - create secure random passphrases that sound like sentences

gitrob

Reconnaissance tool for GitHub organizations

andrankEnum

Tool to get the top android apps for bug bounty purpose

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

dhcp4

DHCP4 library written in Go.

metasploit-framework

Metasploit Framework

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

PiHoleBlocklist

PiHole and AGH Blocklists

urban-dictionary-word-list

Script and sample dataset of all urban dictionary entry names (around 1.4 million total)

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

stockpile

A CALDERA plugin

test

umdmusic-downloader

Python script to download top billboard singles from umdmusic.com