Pentestify

simple_pastie

World's Simplest (Sinatra) Pastie

awesome

:sunglasses: Curated list of awesome lists

opencorporates

(Unofficial) API client for the OpenCorporates service

public-pentesting-reports

Curated list of public penetration testing reports released by several consulting firms

bugbounty-scans

aquatone results for sites with bug bountys

cfdb

Common Findings Database

ctifeeds

Cyber Threat Intelligence Feeds

data

Assorted data from the General Services Administration.

data-1

APTnotes data

domi-owned

IBM/Lotus Domino exploitation

dumpmon

Information Dump Monitor

hardcidr

hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route server is selected at random at runtime.

IIS_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

inetdata

Internet data acquisition

jexboss

JexBoss: Jboss verify and EXploitation Tool

Lilith

Lilith, The Open Source C++ Remote Administration Tool (RAT)

masscan-exclude

I hope to eventually have a pretty complete exclude list for masscan

Mirai-Source-Code

Leaked Mirai Source Code for Research/IoC Development Purposes

NorthKoreaDNSLeak

Snapshot of North Korea's DNS data taken from zone transfers.

php-webshells

Common php webshells. Do not host the file(s) on your server!

pkg-thc-ipv6

thc-ipv6 debian package (part of https://anonscm.debian.org/git/pkg-security/thc-ipv6.git as of 201607)

rdp-rb

Implementation in pure Ruby for Microsoft RDP protocol

ruby-nmap

A Rubyful interface to the Nmap exploration tool and security / port scanner.

ruby-snmp

A Ruby implementation of SNMP (the Simple Network Management Protocol).

RussiaDNSLeak

Summary and archives of leaked Russian TLD DNS data

simple-api-template

webshell

This is a webshell open source project

WhatWeb

Website Fingerprinter

which-cloud

given an ip address, return which cloud provider it belongs to (AWS, GCE, etc)

yankee

Intrigue intelligence analysis