Praetorian

Hob0Rules

Password cracking rules for Hashcat based on statistics and industry patterns

pentestly

Python and Powershell internal penetration testing framework

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

DVRF

The Damn Vulnerable Router Firmware Project

trudy

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

pyshell

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

mitm-vm

An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.

gladius

Automated Responder/secretsdump.py cracking

vulcan

a tool to make it easy and fast to test various forms of injection

epictreasure

radare, angr, pwndbg, binjitsu, ect in a box ready for pwning

proxylogon-exploit

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.

hashcatJS

An implementation of the hashcat rules engine in javascript

ruby_hashcat

Command line wrapper, Library, and Rest API for oclHashcat.

dert

DNS Enumeration and Reconnaissance Tool

Okta_Watering_Hole

Next Generation Phishing Tool For Internal / Red Teams

ctf-writeups

Collection of Praetorian solutions to CTF challenges

bsidesaustin

burp-wcf-gzip

Burp extension for decoding WCF-gzipped requests.

gcloud-lockdown

Scripts to demonstrate VPC Service Controls between tenant and shared projects

highlight

Text file to BMP image with box drawing and blurring from the command line

simuvex

A symbolic execution engine for the VEX IR

aws-labs

enumerate-iam

Enumerate the permissions associated with AWS credential set

rpi-setup

set up rpi for zbwardrive

0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.

bundlerAuditTest

A Rails application containing multiple vulnerabilities used for demonstration purposes

aws-terraform-iot

Use Terraform to scaffold a reference AWS architecture for IoT usage

NPMTest

Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].