autobloody

autobloody autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database...

ShodanHat

Dependencies You need to install shodan with pip install shodan or easyinstall shodan. You need to install python-nmap with pip install python-nmap. You need to set your API Key in the 'constantes.py' file. Options -h, --help show this help message and exit -i IP, --ip=IP info about one host -l...

Nerv0usR4bbit

ɴᴇʀᴠ0ᴜs ʀ4ʙʙɪᴛ Automated Pᴏsᴛ Exᴘʟᴏɪᴛᴀᴛɪᴏɴ Eɴᴜᴍᴇʀᴀᴛɪᴏɴ ᴛᴏᴏʟ for Windows target Author : @34zY /!\ NEW PORTABLE VERSION AVAILABLE SOON. ---------------------------------------------------------------------------- | .--, \ 🐰 | \ / | \ / | | / ,/ /\ \ 💙 | \ 2.0 Windows ' . ' -. | | . ' " . | | /─-.-...

ShellSweep

ShellSweep ShellSweeping the evil Why ShellSweep "ShellSweep" is a PowerShell/Python/Lua tool designed to detect potential web shell files in a specified directory. ShellSheep and it's suite of tools calculate the entropy of file contents to estimate the likelihood of a file being a web shell. Hi...

boobsnail

Follow us on Twitter! BoobSnail BoobSnail allows generating XLM Excel 4.0 macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation. Features: various infection techniques; various obfuscation techniques; translation of formulas into languages other than English; can be us...

pentest-muse-cli

Pentest Muse Pentest Muse is an AI assistant tailored for cybersecurity professionals. It can help penetration testers brainstorm ideas, write payloads, analyze code, and perform reconnaissance. It can also take actions, execute command line codes, and iteratively solve complex tasks. Pentest Mus...

pwned

pwned A command-line tool for querying Troy Hunttroy's Have I been pwned?haveibeenpwned service using the hibphibp Node.js module. !npm Versionnpm-imagenpm-url !Build Statusci-imageci-url Installation Download and install Node.jsnodejs, then install pwned globally using npm: npm install pwned -g...

BurpSentinel

Burp Sentinel Eases discovery of common security holes in web applications. Intro / tutorial: https://github.com/dobin/BurpSentinel/wiki/BurpSentinel---HowTo-and-introduction Blog: http://dobin.github.io/ With BurpSentinel it is possible for the penetration tester to quickly and easily send a lot...

SCANNER-INURLBR

Desription Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. A PHP tool that can run on different Linux distributions helps hackers and security professionals with...

sage

Sage Safety for Agents — Agent Detection & Response for AI coding assistants Sage is a lightweight security layer that protects AI agents from executing dangerous actions. It intercepts tool calls — shell commands, URL fetches, file writes — and checks them against multiple threat detection layer...

catphish

CATPHISH Generate similar-looking domains for phishing attacks. Check expired domains and their categorized domain status to evade proxy categorization. Whitelisted domains are perfect for your C2 servers. Perfect for Red Team engagements. Installation bundle install Current Algorithms...

CVE-2026-20245

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2020-24186

chmod +x CVE-2020-24186 ./CVE-2020-24186...

incriminator

Incriminator Incriminator is an OpenSource Project with educational purposes that allows you to incriminate other devices during a cybercrime. The project is now in version 1.0 If you find a bug please, report it. Thank you for downloading... FOR EDUCATIONAL PURPOSES ONLY!!!!!!! I am not...

depsguard

depsguard | | | | / |/ \ ' / |/ | | | |/ | '/ | | | | / | \ \ | | || | | | | | | | ,|| ./|/, |,|,|| ,| || |/ Guard your dependencies against supply chain attacks. Single static binary, zero Rust crate dependencies. By arnica Table of contents Overview Install Usage What gets checked Config...

StrutsShell

StrutsShell Apache Struts CVE-2017-5638 Shell Introduction The "LowNoiseHG LNHG Struts Shell " "StrutsShell " from now on was conceived in March 2017 after realizing the usefulness of not having to exploit Apache Struts CVE-2017-5638 manually HTTP GET requests by hand and after realizing the...

terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool Introduction A rapid exploitation tool for CVE-2022-24990. Novice code. Feel free to raise issues if you have any problems. Usage main -u http://127.0.0.1:8181 -t pocexp poc Only detect information disclosure vulnerabilities. exp Attempt to upload WebShell...

cc.py

cc.py Extracting URLs of a specific target based on the results of "commoncrawl.org". Updated to v.0.3 | Whats new: 65% faster proceeding Specify a year via -y/--year, e.g.: -y 2018 Specify an output file via -o/--out, e.g.: -o whatever.txt Crawl all pages for a specific index -i/--index, e.g.:...

drupwn

Drupwn v1.0.4 Description Drupwn claims to provide an efficient way to gather drupal information. Enumeration Exploitation Further explaination on our blog post article Supported tested version Drupal 7 Drupal 8 Execution mode Drupwn can be run, using two seperate modes which are enum and exploit...

subdomain3

Subdomain3 README.md inChinese 中文 Description Subdomain3 is a new generation of tool , It helps penetration testers to discover more information in a shorter time than other tools.The information includes subdomains, IP, CDN, and so on. Please enjoy it. Screenshot medium pattern for speed Feature...