korgull

DeepBlueCLI

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

GoFetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

how2heap

A repository for learning various heap exploitation techniques.

ortbot

Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book

ssh-mitm

SSH man-in-the-middle tool

webshell

This is a webshell open source project

c2

Covert Channels for C2 Server

tlsfun

Shows details about TLS exchanges over a TCP/IP connection by reconstructing the streams

TinderFaceScraper

A simple script to scrape Tinder profile photos for the purpose of creating a facial dataset.

spraywmi

SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.

sshuttle

Wrong project! You should head over to http://github.com/sshuttle/sshuttle

logstash-codec-netflow

Keyboard-Walk-Generators

Generate Keyboard Walk Dictionaries for cracking

cmty-nexpose-checks

Nexpose Community vulnerability checks

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

syzkaller

syzkaller is an unsupervised coverage-guided kernel fuzzer

XSSChallengeWiki

Welcome to the XSS Challenge Wiki!

tweets_analyzer

Tweets metadata scraper & activity analyzer

PoCs

Proof of Concepts for CVE-2016–3714

PowerUpSQL

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

firmware-mod-kit

http://firmware-mod-kit.googlecode.com/svn/trunk

FiercePhish

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

wycheproof

Project Wycheproof tests crypto libraries against known attacks.

DPAT

Domain Password Audit Tool for Pentesters

PyPhishing

Phishing application to aid in sending emails more simply and allowing for more control over settings.

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Veil-Evasion

Veil Evasion is no longer supported, use Veil 3.0!