puzzlepeaches's repositories
sneaky_gophish
Hiding GoPhish from the boys in blue
Log4jUnifi
Exploiting CVE-2021-44228 in Unifi Network Application for remote code execution and more.
awesome-password-spraying
Everything and anything related to password spraying
cloudcheck
Check if a list of IPs are associated with a cloud or CDN provider quickly.
CredMaster
Refactored & improved CredKing, uses FireProx API method of IP rotation instead of Lambdas
gingersnap
A Go project template
offensive-azure
Collection of offensive tools targeting Microsoft Azure
enum4linux-ng
A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.
favirecon
Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.
git-rotate
Leveraging GitHub Actions to rotate IP addresses during password spraying attacks to bypass IP-Based blocking
nuclearpond
Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
onedrive_user_enum
onedrive user enumeration - pentest tool to enumerate valid o365 users
playwright_stealth
playwright stealth
porch-pirate
Porch Pirate is the most comprehensive recon / OSINT client and framework for Postman that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.
proxybroker2
The New (auto rotate) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS (Packaged)
ShadowClone
Unleash the power of cloud
snickerdoodle
Python cookiecutter project template.
TeamFiltration
TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts
terraform-nuclear-pond
Backend for Nuclear Pond
what-vpn
Identify servers running various SSL VPNs based on protocol-specific behaviors