mb1689

tortbleed

Modification of Samiux's Heartbleed Reload scanner to allow direct scanning of .onion addresses

Analyzr.info

The Best

Android-IMSI-Catcher-Detector

Detect and avoid IMSI-Catcher attacks!

attacking-drupal

Scripts used to augment the penetration testing process of Drupal web applications.

BDFProxy

Patch Binaries via MITM: BackdoorFactory + mitmProxy

beef_injection_framework

Inject beef hooks into HTTP traffic and track hooked systems from cmdline

binnavi

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

Data-Security

Enterprise Data Loss Prevention - Profile, Classify, Protect Enterprise Data

dnstwist

Generate and resolve domain variations to detect typo squatting, phishing and corporate espionage

EMVemulator

This Android app collects Mag-Stripe data and CVC3 codes from PayPass cards and emulates that informations.

exploits

Miscellaneous exploit code

FinFly-Web

fuckshitup

Multi Vulnerabilities Scanner written in PHP.

homebrew-gnuradio

GNU Radio Formulae for Homebrew

JavaUnserializeExploits

Mobile-Security-Framework-MobSF

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

pwnwiki.github.io

PwnWiki - The notes section of the pentesters mind.

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rickmote

The Rickmote Controller: Hijack TVs using Google Chromecast

rotation.js

Responsive and mobile enabled jQuery plugin to help create rotating content.

shellshocker-pocs

Collection of Proof of Concepts and Potential Targets for #ShellShocker

TCP-32764

some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.

time_trial

Time Trial - A tool for performing feasibility analyses of timing attacks

tools

scripts for pentesting

VAPy

The Voat API wrapper for Python3

Weevely

Stealth tiny web shell

woanware.github.io

xiki

A shell console with GUI features

xssValidator

This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.