SensePost

objection

📱 objection - runtime mobile exploration

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

ruler

A tool to abuse Exchange services

godoh

🕳 godoh - A DNS-over-HTTPS C2

kwetza

Python script to inject existing Android applications with a Meterpreter payload.

hostapd-mana

SensePost's modified hostapd for wifi attacks.

Frack

Frack - Keep and Maintain your breach data

impersonate

A windows token impersonation tool

wiresocks

A sock, with a wire, so you can tunnel all you desire.

mallet

Mallet is an intercepting proxy for arbitrary protocols

berate_ap

Script for orchestrating mana rogue WiFi Access Points.

UserEnum

Domain user enumeration tool

wpa_sycophant

Evil client portion of EAP relay attack

assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

mydumbedr

mail-in-the-middle

go-out

☄️ go-out - A Golang egress buster.

apostille

punch-q

👊 A small utility to play with IBM MQ

hash-cracker

Script to perform some hashcracking logic automagically

thumbscr-ews

Exchangelib wrapper for pentesting

sockstlsproxy

steampipe-plugin-projectdiscovery

A steampipe plugin to query projectdiscovery.io tools.

cipherchecks

visually see issues with supported cipher suites

dresscode

berate_radius

Alpine hostapd-mana based RADIUS server

hash-cracker-apple-silicon

Script to perform some hashcracking logic automagically

file-read-experiments

A few short scripts to look at the performance of various file read strategies.

arbitrary-object-instantiation

A PHP, Arbitrary Object Instantiation Lab

beacon-pipe-frame-proxy

A toy, C# Cobalt Strike Beacon TCP to Named Pipe Frame Proxy