Repositories list

• capchan

  Public
  Solving CAPTCHA with Image Classification

  Python

  •

  GNU General Public License v3.0

  •0•0•0•0•Updated Mar 13, 2025Mar 13, 2025

• dresscode

  Public
  Scan websites CSP policies and visualise their vunlnerabilities from a dashboard

  csp

  Python

  •

  GNU General Public License v3.0

  •2•11•0•0•Updated Mar 11, 2025Mar 11, 2025

• InvokeADCheck

  Public
  InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •13•95•3•0•Updated Mar 10, 2025Mar 10, 2025

• goLAPS

  Public
  Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

  Go

  •

  GNU General Public License v3.0

  •2•41•0•0•Updated Mar 6, 2025Mar 6, 2025

• reGeorg

  Public
  The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

  Python

  •

  Other

  •826•3.1k•16•6•Updated Mar 6, 2025Mar 6, 2025

• gowitness

  Public
  🔍 gowitness - a golang, web screenshot utility using Chrome Headless

  golangsecurityscreenshot+ 8chromewebreportingheadlessfingerprinttechnologieschrome-headless+ 1

  Go

  •

  GNU General Public License v3.0

  •373•3.6k•26•3•Updated Feb 25, 2025Feb 25, 2025

• thumbscr-ews

  Public
  Exchangelib wrapper for pentesting

  Python

  •8•59•0•0•Updated Feb 17, 2025Feb 17, 2025

• susinternals

  Public
  psexecsvc - a python implementation of PSExec's native service implementation

  Python

  •

  GNU General Public License v3.0

  •17•181•0•0•Updated Feb 11, 2025Feb 11, 2025

• berate_ap

  Public
  Script for orchestrating mana rogue WiFi Access Points.

  Shell

  •

  BSD 2-Clause "Simplified" License

  •1k•238•1•0•Updated Feb 3, 2025Feb 3, 2025

• mallet

  Public
  Mallet is an intercepting proxy for arbitrary protocols

  netty

  Java

  •44•266•11•1•Updated Dec 2, 2024Dec 2, 2024

• mail-in-the-middle

  Public
  Python

  •

  GNU General Public License v3.0

  •9•105•0•0•Updated Nov 7, 2024Nov 7, 2024

• objection

  Public
  📱 objection - runtime mobile exploration

  androidsecurityios+ 5mobileframeworkinstrumentationpentestfrida

  Python

  •

  GNU General Public License v3.0

  •879•7.9k•75•13•Updated Sep 13, 2024Sep 13, 2024

• Frack

  Public archive
  Frack - Keep and Maintain your breach data

  osintbreaches

  Python

  •

  GNU General Public License v3.0

  •28•341•0•0•Updated Sep 1, 2024Sep 1, 2024

• hostapd-mana

  Public
  SensePost's modified hostapd for wifi attacks.

  C

  •

  Other

  •130•560•18•1•Updated Aug 5, 2024Aug 5, 2024

• steampipe-plugin-projectdiscovery

  Public
  A steampipe plugin to query projectdiscovery.io tools.

  projectdiscoverysteampipesteampipe-plugin

  Go

  •

  Apache License 2.0

  •1•26•0•1•Updated Jul 23, 2024Jul 23, 2024

• cipherchecks

  Public
  visually see issues with supported cipher suites

  Python

  •

  GNU General Public License v3.0

  •7•16•1•0•Updated Jun 18, 2024Jun 18, 2024

• ruler

  Public
  A tool to abuse Exchange services

  pentestingshellsexchange+ 1mapi

  Go

  •

  Other

  •365•2.2k•13•1•Updated Jun 10, 2024Jun 10, 2024

• apostille

  Public
  Java

  •

  Other

  •21•73•1•0•Updated May 23, 2024May 23, 2024

• hash-cracker

  Public
  Script to perform some hashcracking logic automagically

  automationtogglecombinator+ 17ntlmhybridhasheshacktoberfesthashcatntlmv2hash-cracking+ 10

  C

  •

  GNU General Public License v3.0

  •14•68•0•0•Updated May 16, 2024May 16, 2024

• assless-chaps

  Public
  Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

  Python

  •18•133•1•0•Updated Mar 19, 2024Mar 19, 2024

• mydumbedr

  Public
  C

  •

  GNU General Public License v3.0

  •17•113•0•0•Updated Jan 30, 2024Jan 30, 2024

• wiresocks

  Public
  A sock, with a wire, so you can tunnel all you desire.

  Shell

  •

  GNU General Public License v3.0

  •30•282•2•0•Updated Jan 19, 2024Jan 19, 2024

• go-out

  Public
  ☄️ go-out - A Golang egress buster.

  securitynetworkscanner+ 2busteregress-filtering

  Go

  •

  GNU General Public License v3.0

  •13•124•3•1•Updated Dec 19, 2023Dec 19, 2023

• godoh

  Public
  🕳 godoh - A DNS-over-HTTPS C2

  dohc2command-and-control+ 3dnsgolangdns-over-https

  Go

  •

  GNU General Public License v3.0

  •124•762•1•2•Updated Dec 19, 2023Dec 19, 2023

• beacon-pipe-frame-proxy

  Public
  A toy, C# Cobalt Strike Beacon TCP to Named Pipe Frame Proxy

  C#

  •

  GNU General Public License v3.0

  •0•1•0•0•Updated Nov 22, 2023Nov 22, 2023

• hash-cracker-apple-silicon

  Public archive
  Script to perform some hashcracking logic automagically

  automationtogglecombinator+ 15md5ntlmhybridhasheshashcatntlmv2password-cracking+ 8

  Python

  •

  GNU General Public License v3.0

  •0•6•0•0•Updated Nov 13, 2023Nov 13, 2023

• UserEnum

  Public
  Domain user enumeration tool

  Python

  •

  GNU General Public License v3.0

  •43•215•3•1•Updated Nov 2, 2023Nov 2, 2023

• file-read-experiments

  Public
  A few short scripts to look at the performance of various file read strategies.

  Rust

  •

  GNU General Public License v3.0

  •0•4•1•0•Updated Sep 19, 2023Sep 19, 2023

• kwetza

  Public
  Python script to inject existing Android applications with a Meterpreter payload.

  Smali

  •

  GNU General Public License v2.0

  •238•643•27•2•Updated Jul 21, 2023Jul 21, 2023

• wpa_sycophant

  Public
  Evil client portion of EAP relay attack

  C

  •

  Other

  •35•197•1•0•Updated Jul 5, 2023Jul 5, 2023