msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

trivy-db

trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

AddUser-SAMR

AddUser-SAMR Create local administrators using the SAMR API, operating at a lower level than net.exe, PowerShell's New-LocalUser or NetUserAdd API. It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated. There are 4 implementations ...

neto

Project Neto: A Toolkit for Analysing Browser Plugins Overview Project Neto is a Python 3 package conceived to analyse and unravel hidden features of browser plugins and extensions for well-known browsers such as Firefox and Chrome. It automates the process of unzipping the packaged files to...

neto

Project Neto: Un conjunto de herramientas para analizar complementos del navegador Descripción general Project Neto es un paquete de Python 3 concebido para analizar y desvelar características ocultas de complementos y extensiones del navegador para navegadores conocidos como Firefox y Chrome...

smtp-tunnel-proxy

📧 Proxy de Túnel SMTP Un túnel encubierto de alta velocidad que disfraza el tráfico TCP como comunicación de correo electrónico SMTP para evadir firewalls de inspección profunda de paquetes DPI. ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌──────────────┐ │ Application │─────▶│ Client │─────▶...

sift

Sift Secrets Credential and sensitive-data exposure triage for file shares. When an open share turns up, the question is never "does this repo have a leaked key". It is "what just got exposed, and what do I have to roll before close of business." sift is built for that question: high recall, a fa...

VMPacker

🛡️ VMPacker Sistema de Protección de Máquina Virtual para ARM64 ELF Traduce instrucciones nativas ARM64 a bytecode de VM personalizado para protección de código a nivel de función 🇨🇳 中文文档 • Características • Arquitectura • Inicio rápido • Uso • Licencia Descripción general VMPacker es un sistema de...

dontgo403

dontgo403 es una herramienta para evitar errores 40X. Instalación Obtén la última versión para tu sistema operativo desde RELEASES Desactualizado por ahora O compílalo por tu cuenta RECOMENDADO: git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build Personalización Si...

goLoL

goLoL goLoL es un escáner de hosts Windows con soporte dual para binarios LOLBAS y LOLDrivers. Enumera las técnicas LOLBAS ejecutables en tu nivel de privilegio actual con mapeos MITRE ATT&CK y puede escanear archivos .sys locales en busca de coincidencias de hash de LOLDrivers...

lst2x64dbg

lst2x64dbg This command extracts all the labels found in the LST file that is given as the single argument. An x64dbg database is created in the current directory based on the extracted labels. The LST file can be generated in IDA from the File menu: Produce file - Create LST file... Example $...

lst2x64dbg

lst2x64dbg Este comando extrae todas las etiquetas encontradas en el archivo LST que se proporciona como único argumento. Se crea una base de datos de x64dbg en el directorio actual basada en las etiquetas extraídas. El archivo LST se puede generar en IDA desde el menú Archivo : Producir archivo ...

NeuroCore

NeuroCore High-Performance Structural Binary Analysis and Visualization Utility Abstract NeuroCore is a native macOS utility engineered for the structural analysis of binary data through high-velocity visualization. By leveraging General-Purpose Computing on Graphics Processing Units GPGPU via...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

titus

Titus: High-Performance Secrets Scanner Titus is a high-performance secrets scanner that detects credentials, API keys, and tokens in source code, files, and git history. It ships with 487 detection rules covering hundreds of services and credential types, drawn from NoseyParker and Kingfisher...

Invoke-Obfuscation

Invoke-Obfuscation v1.8 Introducción Invoke-Obfuscation es un ofuscador de comandos y scripts de PowerShell compatible con PowerShell v2.0+. Antecedentes En el otoño de 2015 decidí comenzar a investigar la flexibilidad del lenguaje de PowerShell y comencé a catalogar las diversas formas de lograr...

volana

volana moon in malagasy Use it ; 🌚hide from; 🌞detected by Shell command obfuscation to avoid SIEM/detection system During pentest, an important aspect is to be stealth. For this reason you should clear your tracks after your passage. Nevertheless, many infrastructures log command and send them to...

workshop_firmware_reverse_engineering

Workshop: Firmware Reverse Engineering This repository contains slides and hands-on materials for Emproof's workshop on firmware reverse engineering, presented at ScapyCon Automotive 2025. The workshop targets a technical audience with minimal security experience and teaches the fundamentals...

smbcrawler

SmbCrawler SmbCrawler es una herramienta directa que toma credenciales y una lista de hosts y 'rastrea' o 'araña' a través de estos recursos compartidos. Características: acepta nombres de host, direcciones IP, rangos de IP, o un archivo xml de nmap como entrada verifica permisos la comprobación ...