dawnscanner

Dawnscanner - The raising security scanner for ruby web applications dawn is a source code scanner designed to review your web applications for security issues. The tool is able to scan web applications written in Ruby and it supports all major MVC Model View Controller frameworks, out of the box...

RAT-via-Telegram

RAT-via-Telegram Dviros's notes: Windows Remote Post Breach Tool via Telegram Python 2.7, Originally created by Ritiek, Forked and modified by mvrozanti and then myself. The whole purpose of this tool is to demonstrate as a "PoC" the control of an already breached machine, via Telegram. As the sa...

C2-Hunter

C2-Hunter C2-Hunter is a program designed for malware analysts to extract Command and Control C2 traffic from malwares in real-time. The program uses a unique approach by hooking into win32 connections APIs. With C2-Hunter, malware analysts can now intercept and analyze communication in real-time...

SharpStrike

SharpStrike SharpStrike is a post-exploitation tool written in C that uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command...

FalconHound

FalconHound NOTE: As of the BloodHound CE 7.0 release, the default database has been switched to Postgres. This version of FalconHound still relies on Neo4j to be the default database. If you want to keep using FalconHound while running the latest BloodHound version, add the following line to you...

caplets

Caplets bettercap's interactive sessions can be scripted with .cap files, or caplets, the following are a few basic examples, look at this repo for more. To install / update the caplets on your computer: git clone https://github.com/bettercap/caplets.git cd caplets sudo make install Or, from with...

nextdns

NextDNS CLI Client NextDNS CLI is a command-line tool that allows you to use NextDNS's DNS-over-HTTPS DoH service with advanced capabilities. Although the most advanced features will only work with NextDNS, this program can work as a client for any DoH provider or a mix of NextDNS + another DNS...

Karta

/$$ /$$ /$$ | $$ /$$/ | $$ | $$ /$$/ /$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$$$$/ | $$ /$$ $$| $$/ | $$ | $$ $$ /$$$$$$$| $$ / | $$ /$$$$$$$ | $$\ $$ /$$ $$| $$ | $$ /$$ /$$ $$ | $$ \ $$| $$$$$$$| $$ | $$$$/| $$$$$$$ |/ / /|/ / / Purpose "Karta" Russian for "Map" is an IDA Python plugin that...

4nonimizer

If you like the 4nonimizer, please help us with whatever you want! What is 4nonimizer? It is a bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers OpenVPN, whether free or paid. By default, it includes several...

ArchStrike

ArchStrike ArchStrike is shutting down This should come as no surprise to those who've been paying attention, but the project hasn't been getting maintained for a while now. Over time, most of the killer applications provided by ArchStrike have gained official upstream packages, and the list of...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Unlock an Android phone or device by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! 📱 How it works It uses a USB OTG cable to connect the locked phone to the Nethunter device. It emulates a keyboard,...

Mimir

Mimir OSINT Threat Intel Interface - Named after the old Norse God of knowledge. Mimir functions as a CLI to HoneyDB which in short is an OSINT aggregative threat intel pool. Starting the program brings you to a menu the options for which are as follows. 1. Fetch Threat Feed 5. Visualize Top...

ZeroCrumb

ZeroCrumb Dumping App Bound Protected Credentials & Cookies Without Privileges. Explanation ZeroCrumb bypasses the Chrome Elevation Service by impersonating a Chrome instance using Transacted Hollowing, Effectively allowing us to use the IElevator COM interface to decrypt the App Bound Key. Then,...

MailRipV2

Mail.Rip V2.1337 Your SMTP checker / SMTP cracker for mailpass combolists including features like: proxy-support SOCKS4 / SOCKS5 with automatic proxy-scraper and checker, e-mail delivery / inbox check and DNS lookup for unknown SMTP-hosts. Made for easy usage and always working! Overview Legal...

TheTimeMachine

TheTimeMachine v3.0 - Weaponizing Wayback for Recon, BugBounties, OSINT & More! You’ve heard of time travel in movies and comics, right? Well, this isn’t fiction anymore 😎. TheTimeMachine lets you dig through the past of any web app by scraping archived URLs from the Wayback Machine — and helps y...

smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

SoIG

SoIG The Instagram OSINT Tool gets a range of information from an Instagram account that you normally wouldn't be able to get from just looking at their profile. Getting Started The information includes : profile : Username, Profile Name, URL, Followers, Following, Number of Posts, Bio, Profile...

CVE-2023-29343

CVE-2023-29343 This is PoC for arbitrary file write bug in Sysmon version 14.14 After last patch Sysmon would check if Archive directory exists and if it exists it would check if archive directory is owned by NT AUTHORITY\SYSTEM and access is only granted to NT AUTHORITY\SYSTEM. If both condition...

dwn

🥽 dwn dockerpwn - a docker attack tool manager introduction dwn is a "docker-compose for hackers". Using a simple YAML "plan" format similar to docker-compose, image names, versions and volume / port mappings are defined to setup a tool for use. features With dwn you can: Configure common pentest...