nyxgeek

frigate

NVR with realtime local object detection for IP cameras

trufflehog

Find and verify secrets

py-spy

Sampling profiler for Python programs

gephi

Gephi - The Open Graph Viz Platform

interactsh

An OOB interaction gathering server and client library

CVE-2021-4034

CVE-2021-4034 1day

cloudfox

Automating situational awareness for cloud penetration tests.

TeamFiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

ThemeEngine

OS X App to edit compiled .car files

cookie_crimes

Read local Chrome cookies without root or decrypting

keylogger

A no-frills keylogger for macOS.

lyncsmash

locate and attack Lync/Skype for Business

arpy

Mac OSX ARP spoof (MiTM) tool that can also plug into Gource

Keysteal

A macOS <= 10.14.3 Keychain exploit

gitlab-watchman

Finding exposed secrets and personal data in GitLab

Jamf-Attack-Toolkit

Suite of tools to facilitate attacks against the Jamf macOS management platform.

adfsbrute

A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

VulInfo

These are the vulnerabilities discovered by Galaxy Lab.

WhiteChocolateMacademiaNut

Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies

kooky

Go code to read cookies from browser cookie stores.

LDAPPER

LDAP Querying without the Suck

VOODOO

Man in the Browser Framework

CVE-2020-11022-CVE-2020-11023

Little thing put together quickly to demonstrate this CVE

burp-dump

A Burp plugin to dump HTTP(S) requests/responses to a file system

pentest-lab

Pentest Lab on OpenStack with Heat, Chef provisioning and Docker

ChromeCookieDecryptor

Decrypt cookie values in Chrome Sqlite DB on Mac OX S, use Openssl

hosts

defcon-28-mud-source-with-core

DC28 MUD Source with coremud

defcon-areatemplate

DEFCON Gurbalib Area template for mog.ninja