DetectionLab

Detection Lab As of 2023-01-01, DetectionLab is no longer being actively maintained DetectionLab is tested weekly on Saturdays via a scheduled CircleCI workflow to ensure that builds are passing. Purpose This lab has been designed with defenders in mind. Its primary purpose is to allow the user t...

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ - DNS / Subdomains / Ports / Directories enumeration Coded with 💙 by edoardottt Share on Twitter! Install • Get Started • Examples • Changelog • Contributing • License Installation 📡 Homebrew brew install scilla Snap sudo snap install scilla Golang go install -v...

Vxscan

Vxscan 2.0 English | 简体中文 Python3 comprehensive scanning tool, mainly used for sensitive file detection directory scanning and js leak interface, WAF/CDN identification, port scanning, fingerprint/service identification, operating system identification, weak password detection, POC scanning, SQL...

WhatsAppHACK-RCE

WhatsAppHACK-RCE...

PIRATE

PIRATE Python Remote Acces Tool Usage 1- run payloader.py to generate client script 2- run pirate.py to manage server and receive connection Features Open remote shell Take screenshot Take webcam picture Run keylogger Windows persistence Send and receive files Open windows messagebox Usage Exampl...

dirtypipe-ebpf_detection

dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...

frida-interception-and-unpinning

Frida Mobile Interception Scripts !Funded by NLnet - NGI Zero...

JShunter

JSHunter Professional JavaScript Security Analysis Tool Complete endpoint discovery, sensitive data detection, and advanced code analysis for security professionals About JSHunter is a comprehensive command-line tool for JavaScript security analysis and endpoint discovery. Built for security...

sipcheck

SIPCheck v.3.0 Introduction SIPCheck is a tool that watch the authentication of users of Asterisk and bans automatically if some user or bot try to register o make calls using wrong passwords. Unlike Fail2Ban, SIPCheck manage, not just the attacker, also the clients that you have trust so if you...

pythia

Introduction / tl;dr This tool scans an executable file for Delphi data, including RTTI and virtual function tables. It outputs a JSON file with information about identified classes and functions, which can be used for additional analysis, for example: Generate a class tree. Generate names &...

XSS-LOADER

💎 XSS-LOADER TOOLS 💎 Written by TMRSWRR Version 1.0.0 All in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💌 How to use 💌 👇 📒 Read Me 📒 This tool creates payload for use in xss injection Select default payload tags from parameter or write yo...

FOCA

FOCA Fingerprinting Organizations with Collected Archives FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with t...

IPED

IPED Digital Forensic Tool IPED is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by law enforcement or in a corporate investigation by private examiners. History IPED - Digital Evidence Processor and Indexer translated from Portugue...

twifo-cli

T W I F O - C L I Get user information of a Twitter user! Install $ npm install --global twifo-cli OR $ sudo npm install --global twifo-cli Usage $ Usage: twifo Example: $ twifo 9gag Related twifo : API for this tool. quorafy: Get user information of a Quora user. License MIT © Rishi Giri...

proxylogon

proxylogon my exploit for the proxylogon chain Microsoft Exchange Server - CVE-2021-26855 Run: the exploit uses Impacket package, to install it run this: user@host:$ python3 -m pip install impacket then clone the exploit repo, and enter the exploit directory: user@host:$ git clone...

ipsw

ipsw iOS/macOS Research Swiss Army Knife ipsw is a command-line toolkit for Apple firmware research and reverse engineering. Download and unpack IPSWs and OTAs, inspect Mach-O binaries and dyld shared caches, analyze kernelcaches, and work with connected iOS devices. Agent skill · Install · CLI...

open-sesame

open-sesame Contains hackerone disclosed reports and other bug bounty writeups. A python tool which runs to display random publicly disclosed Hackerone reports when bored. Automatically opens the report in browser. Contains Over 8k Publicly disclosed Hackerone reports and addtl. wordlist of 700 b...

server

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

Goohak

GooHak ABOUT: Automatically launch google hacking queries against a target domain to find vulnerabilities and enumerate a target. DEPENDENCIESLinux: xdg-open Linux LINUX USAGE: ./goohak domain.com LICENSE: This software is free to distribute, modify and use with the condition that credit is...

WiFiBroot

A Wireless Pentest/Cracking Tool for 4-way Handshake & PMKID DESCRIPTION WiFiBroot is built to provide clients all-in-one facility for cracking WiFi WPA/WPA2 networks. It heavily depends on scapy , a well-featured packet manipulation library in Python. Almost every process within is dependent...