kabadjo

mhn

Modern Honey Network

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

apt2

automated penetration toolkit

azazel

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

backdoorme

powerful auto-backdooring utility

BruteX

Automatically brute force all services running on a target.

censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

censys-subdomain-finder

⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.

CrackMapExec

A swiss army knife for pentesting networks

demiguise

HTA encryption tool for RedTeams

EQGRP

Decrypted content of eqgrp-auction-file.tar.xz

FakeImageExploiter

Use a Fake image.jpg (hide known file extensions) to exploit targets

GPON

Python exploit for Remote Code Execution on GPON home routers (CVE-2018-10562). Initially disclosed by VPNMentor (https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/), kudos for their work.

impacket

Impacket is a collection of Python classes for working with network protocols.

knock

Knock Subdomain Scan

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

metasploit-framework

Metasploit Framework

morphHTA

morphHTA - Morphing Cobalt Strike's evil.HTA

OSINT-Framework

OSINT Framework

Public

A collection of all my publicly released material.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwdtest

recon-my-way

This repository created for personal use and added tools from my latest blog post.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

routersploit

The Router Exploitation Framework

security-research

ShellPop

Pop shells like a master.

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

Sublist3r

Fast subdomains enumeration tool for penetration testers

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.