flounder

configs/ - optional context profiles These JSON files are optional, answer-free context profiles. They are not Flounder product modes and they are not loaded by default. They exist for cases where an operator deliberately wants to give the model a familiar frame for a class of target. File|...

VK-Scraper

VK Scraper vk-scraper is a command-line application written in Python that scrapes and downloads VK user's / community's data. Use responsibly. To get a better understanding of how it works, head to the docs. Features Scrape photos Scrape videos both uploaded and external Scrape saved photos Scra...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...

grc2

nimc2 This software is in very early development stages and you might run into many issues using it nimc2 is a very lightweight C2 written fully in nim. It's uses range from user support to employee monitoring. If you want to give it a try check out the wiki to learn how to install and use nimc2...

conquest

Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest's team server, operator client and agent have all been developed using the Nim programming language and are designed with...

lowkey

Self-Hosted AI Coding Agents on AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Watch the full walkthrough on YouTube 📝 Read the blog post: "I Gave My Agent Its Own AWS Account" TL;DR — deploy Lowkey: curl -sfL install.lowkey.run | bash Works in bash , zsh , and AWS CloudShell. The...

MalleableC2Profiles

MalleableC2Profiles Malleable C2 profiles for Cobalt Strike version 3.6+ bingsearchgetonly.profile - Bing web search profile, uses GET requests only cnnvideogetonly.profile - MSNBC live video straming profile, uses GET requests only googledrivegetonly.profile - Google Drive document viewer...

algo

Algo VPN Algo VPN is a set of Ansible scripts that simplify the setup of a personal WireGuard and IPsec VPN. It uses the most secure defaults available and works with common cloud providers. See our release announcement for more information. Features Supports only IKEv2 with strong crypto AES-GCM...

Wifi-Dumper

Wifi-Dumper This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements. Features Optio...

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide This project is intended to serve as reference when designing Cobalt Strike Malleable C2 profiles. Always verify your profile with ./c2lint /path/to/my.profile prior to use! Malleable C2 Profile Guidance The following dive deeper into the...

C2concealer

C2concealer C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike. Installation git clone https://github.com/RedSiege/C2concealer.git cd C2concealer python3 -m venv .venv source .venv/bin/activate pip3 install -e . Docker installation Refer to...

noinstagram

noinstagram I got rid of my IG account some time ago, but I'd still like to see photos from my wife and our dog. I was just visiting the IG website for each public user I wanted to view, but that was way too much work. So I built this one Sunday. Want your own noinstagram page? fork this repo set...

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/...

rainmap-lite

rainmap-lite Rainmap Lite - Responsive web application that allows users to launch Nmap scans from their mobiles/tablets/web browsers! Unlike it's predecessor 1, Rainmap-lite does not require special services RabbitMQ, PostgreSQL, Celery, supervisor, etc to make it easy to install on any server...

Malleable-C2-Profiles

This repository does not have a README...

CobaltStrike-Toolset

CobaltStrike-Toolset Aggressor Script, Kit, Malleable C2 Profiles, External C2 and so on Kits ResourceKit ExploitKit Aggressor Script chromedumpmimikatz.cna nopowershell SMBexecpsh Further Resources nopowershell smbexecpsh.cna CVE-2018-15982...

whatsfoto

WhatsFoto Simple tool to download multiple profile pictures from whatsapp. Its an extensions for Chrome Install Download the zip or folder and drag it into your extension. Make sure you enable developer mode. Or use a zip file. Howto Login to web.whatsapp.com Click on the icon, enter phone number...

bmc-tools

BMC-Tools RDP Bitmap Cache parser. Input bmc-tools processes bcache.bmc and cache????.bin files found inside Windows user profiles. Usage ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH With the following arguments meaning: -h, --help show this help message and exit -s SRC, --src SRC...