Hack Tools

Hack Tools This repository contains a collection of 200+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. Warning The...

Livepyre

Livepyre A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APPKEY of the Livewire project is known. Authors of the tool: @remsio @Worty. Help $ ./Livepyre.py -h usage: Livepyre.py -h -u URL -f FUNCTION -p PARAM -H HEADERS -P PROXY -a APPKEY -d -F -c Livewire exploit to...

MikrotikExploit

Mikrotik Exploit Scan and Export RouterOS Password allow you to scan subnet of IPv4 in loop with different port. Installation install python3 Ubuntu/Debian: $ apt-get install python3 install python3 Python package manager Ubuntu/Debian: $ apt-get install python3-pip Mac $ ruby -e "$curl -fsSL...

PersistenceSniper

PersistenceSniper --- PersistenceSniper is a Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. It is also available on Powershell Gallery and it is digitally signed with a valid code signing...

netscout

NetScout NetScout is an OSINT tool that finds domains, subdomains, directories, endpoints and files for a given seed URL. It consists of the following components: BinaryEdge client: Gets subdomains DNS: Attempts to perform a DNS zone transfer to extract subdomains Crawler: Gets URLs and directori...

Grouper2

GROUPER2 IS DEPRECATED, GOTO https://github.com/Group3r/Group3r INSTEAD This place is not a place of honor... no highly esteemed deed is commemorated here... nothing valued is here. What is here was dangerous and repulsive to us. This message is a warning about danger...

foxpwn

Foxpwn Proof-of-Concept exploit for CVE-2016-9066. Find a detailed writeup here...

rhabdomancer

rhabdomancer "The road to exploitable bugs is paved with unexploitable bugs." -- Mark Dowd Rhabdomancer is a blazing-fast IDA headless plugin that locates calls to potentially insecure API functions in a binary file. Auditors can backtrace from these candidate points to find pathways allowing...

AutoIt-Ripper

AutoIt-Ripper What is this This is a short python script that allows for extraction of "compiled" AutoIt scripts from PE executables. References This script is heavily based on 3 resources, definitely check them out if you want to dig a bit deeper into AutoIt stuff:...

CVE-2025-24813-checker

CVE-2025-24813-checker Hello researchers, I have a checker for the recent vulnerability CVE-2025-24813-checker...

MANSPIDER

MANSPIDER Crawl SMB shares for juicy information. File content searching + regex is supported! What's New in v2.0 Manspider 2.0 is here! This brings significant improvements: New and improved text extraction powered by Kreuzberg - now supporting PDF, DOCX, XLSX, PPTX, images with OCR, and many...

unwaf

Unwaf Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery methods and verifying candidates through HTML similarity comparison, SSL certificate fingerprinting...

Admin-Scanner

Admin-Scanner Website Admin Panel Finder How To Install? Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner How to Install? Termux/Android pkg update && pkg upgrade pkg install python3 p...

Cartographer

Cartographer Mapping Out Code Coverage Developed by Austin Peavy - https://github.com/aus10pv Released as open source by NCC Group Plc - https://www.nccgroup.com/ Released under the Apache 2.0 license see LICENSE for more information Description Cartographer is a code coverage mapping plugin for...

mimikat_ssp

mimikatssp Windows Password Capture, Bypass Antivirus...

scrounger

Description Scrounger - a person who borrows from or lives off others. There is no better description for this tool for two main reasons, the first is because this tool takes inspiration from many other tools that have already been published, the second reason is because it lives off mobile...

idasec

idasec IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform Disclaimer IDAsec is prototype tool under development, some features are likely buggy and should be used with care. Features Decoding an instruction in DBA IR Loading execution traces generated by Pinsec...

CVE-2023-4966-exploit

This repository does not have a README...

shellsum

Shellsum What is this? A defense tool - detect web shells in local directories via md5sum Features Fast speed Lightweight Big database Table output Usages Install git clone https://github.com/ManhNho/shellsum.git chmod 755 -R shellsum/ cd shellsum/ pip install -r requirements.txt Run python...

browser-backdoor

BrowserBackdoor BrowserBackdoor is an Electron application that uses a JavaScript WebSocket Backdoor to connect to the listener. BrowserBackdoorServer is a WebSocket server that listens for incoming WebSocket connections and creates a command-line interface for sending commands to the remote...