Beast code in Giters

manuelsommer's starred repositories

PwnFox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

Language:JavaScript99200

docem

A tool to embed XXE and XSS payloads in docx, odt, pptx, xlsx files (oxml_xxe on steroids)

Language:Python49100

smbcrawler

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

Language:PythonMIT14100

BloodHound

Six Degrees of Domain Admin

Language:GoApache-2.091500

free-API-security-test-action

APIsec|SCAN - Free API security testing using Github actions

Language:Python8400

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Language:Python1050100

365-Stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

Language:PHPNOASSERTION41000

GOAD

game of active directory

Language:PowerShellGPL-3.0468800

ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines

Language:Open Policy AgentCC0-1.0146700

FarsightAD

PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain compromise

Language:PowerShellCC0-1.09300

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

Language:PowerShellNOASSERTION183600

oneliner-bugbounty

oneliner commands for bug bounties

38600

LFISuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

Language:PythonGPL-3.0163600

liffy

Local file inclusion exploitation tool

Language:PythonGPL-3.074200

crAPI

completely ridiculous API (crAPI)

Language:JavaApache-2.0103000

zora

Zora is an open source solution that helps you achieve compliance with Kubernetes best practices recommended by industry-leading frameworks. By scanning your cluster with multiple plugins, Zora identifies potential issues, misconfigurations, and vulnerabilities.

Language:GoApache-2.026800

SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

Language:PythonGPL-3.085000

webHunt

Web App bug hunting

54100

dependencytrack-pywrap

This is a python wrapper for the dependency track REST API.

Language:PythonMIT500

guac

GUAC aggregates software security metadata into a high fidelity graph database.

Language:GoApache-2.0122200

vuln-list

NVD, Ubuntu, Alpine

40000

bbot

A recursive internet scanner for hackers.

Language:PythonGPL-3.0412100

Dracnmap

Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and difficult to follow for new users. Hence Dracnmap is designed to perform fast scaning with the utilizing script engine of nmap and nmap can perform various automatic scanning techniques with the advanced commands.

Language:ShellGPL-3.0112800

BobTheSmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

Language:PythonMIT46900

manuel-sommer