One-Lin3r is simple and lightweight framework inspired by the web-delivery module in Metasploit. It consists of various one-liners that aids in…
Penetration Testing
gOSINT is a small OSINT framework in golang, it’s actually in development and still not ready for production if you…
Script to steal passwords from SSH. Recently I posted how to get ssh password using strace, but it’s no 100%…
Generate unicode evil domains for IDN Homograph Attack and detect them. PREREQUISITES python 3.x for evilurl3.py TESTED ON: Kali Linux…
Vegile is a tool for Post exploitation Techniques in linux. Post Exploitation techniques will ensure that we maintain some level…
Exploitation
macro_pack – Tool Used To Automatize Obfuscation And Generation Of Ms Office Documents For Pentest
macro_pack – Tool Used To Automatize Obfuscation And Generation Of Ms Office Documents For Pentest, Demo, And Social Engineering Assessments. The…
Penetration Testing
IntruderPayloads – A Collection Of Burpsuite Intruder Payloads, Fuzz Lists And File Uploads
A collection of Burpsuite Intruder payloads and fuzz lists and pentesting methodology. To pull down all 3rd party repos, run…
Simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key…
Penetration Testing
Autorize – Automatic Authorization Enforcement Detection Extension For Burp Suite
Autorize is an automatic authorization enforcement detection extension for Burp Suite. It was written in Python by Barak Tawily, an…
Information Gathering
Altdns – Generates Permutations, Alterations And Mutations Of Subdomains And Then Resolves Them
Altdns is a DNS recon tool that allows for the discovery of subdomains that conform to patterns. Altdns takes in…
SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes…
Ketshash – A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs…
