2024-09-24 |
SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits |
Appsec ‧ [email protected] (Unknown) |
|
2024-09-23 |
PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit |
golang ‧ [email protected] (Unknown) |
|
2024-09-22 |
Secator - The Pentester'S Swiss Knife |
Automation ‧ [email protected] (Unknown) |
|
2024-09-21 |
Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking |
Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture ‧ [email protected] (Unknown) |
|
2024-09-20 |
File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add |
File-Unpumper ‧ [email protected] (Unknown) |
|
2024-09-19 |
Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests |
Mass-Assigner ‧ [email protected] (Unknown) |
|
2024-09-18 |
Imperius - Make An Linux Kernel Rootkit Visible Again |
Imperius ‧ [email protected] (Unknown) |
|
2024-09-17 |
BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook |
BYOSI ‧ [email protected] (Unknown) |
|
2024-09-16 |
Psobf - PowerShell Obfuscator |
Obfuscation ‧ [email protected] (Unknown) |
|
2024-09-15 |
ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again |
Forensics ‧ [email protected] (Unknown) |
|
2024-09-14 |
DockerSpy - DockerSpy Searches For Images On Docker Hub And Extracts Sensitive Information Such As Authentication Secrets, Private Keys, And More |
DockerSpy ‧ [email protected] (Unknown) |
|
2024-06-26 |
Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife |
Ashok ‧ [email protected] (Unknown) |
|
2024-06-25 |
CloudBrute - Awesome Cloud Enumerator |
Bugbounty ‧ [email protected] (Unknown) |
|
2024-06-24 |
Hfinger - Fingerprinting HTTP Requests |
Hfinger ‧ [email protected] (Unknown) |
|
2024-06-23 |
VulnNodeApp - A Vulnerable Node.Js Application |
Scripting ‧ [email protected] (Unknown) |
|
2024-06-22 |
XMGoat - Composed of XM Cyber terraform templates that help you learn about common Azure security issues |
Terraform ‧ [email protected] (Unknown) |
|
2024-06-21 |
Extrude - Analyse Binaries For Missing Security Features, Information Disclosure And More... |
Extrude ‧ [email protected] (Unknown) |
|
2024-06-21 |
BokuLoader - A Proof-Of-Concept Cobalt Strike Reflective Loader Which Aims To Recreate, Integrate, And Enhance Cobalt Strike's Evasion Features! |
Advsim ‧ [email protected] (Unknown) |
|
2024-06-19 |
Volana - Shell Command Obfuscation To Avoid Detection Systems |
Exploitation ‧ [email protected] (Unknown) |
|
2024-06-18 |
CyberChef - The Cyber Swiss Army Knife - A Web App For Encryption, Encoding, Compression And Data Analysis |
CyberChef ‧ [email protected] (Unknown) |
|
2024-06-17 |
NativeDump - Dump Lsass Using Only Native APIs By Hand-Crafting Minidump Files (Without MinidumpWriteDump!) |
Lsass Dump ‧ [email protected] (Unknown) |
|
2024-06-08 |
Sttr - Cross-Platform, Cli App To Perform Various Operations On String |
Cli Tool ‧ [email protected] (Unknown) |
|
2024-06-07 |
PIP-INTEL - OSINT and Cyber Intelligence Tool |
Cyberintelligence ‧ [email protected] (Unknown) |
|
2024-06-06 |
Thief Raccoon - Login Phishing Tool |
Flask ‧ [email protected] (Unknown) |
|
2024-06-05 |
X-Recon - A Utility For Detecting Webpage Inputs And Conducting XSS Scans |
Bugbounty ‧ [email protected] (Unknown) |
|
2024-06-04 |
ROPDump - A Command-Line Tool Designed To Analyze Binary Executables For Potential Return-Oriented Programming (ROP) Gadgets, Buffer Overflow Vulnerabilities, And Memory Leaks |
Python3 ‧ [email protected] (Unknown) |
|
2024-06-03 |
Startup-SBOM - A Tool To Reverse Engineer And Inspect The RPM And APT Databases To List All The Packages Along With Executables, Service And Versions |
Apt Packages ‧ [email protected] (Unknown) |
|
2024-06-02 |
EvilSlackbot - A Slack Bot Phishing Framework For Red Teaming Exercises |
EvilSlackbot ‧ [email protected] (Unknown) |
|
2024-06-01 |
Reaper - Proof Of Concept On BYOVD Attack |
Driver ‧ [email protected] (Unknown) |
|
2024-05-31 |
Ars0N-Framework - A Modern Framework For Bug Bounty Hunting |
Ars0N-Framework ‧ [email protected] (Unknown) |
|
2024-05-30 |
Headerpwn - A Fuzzer For Finding Anomalies And Analyzing How Servers Respond To Different HTTP Headers |
Burp ‧ [email protected] (Unknown) |
|
2024-05-29 |
LDAPWordlistHarvester - A Tool To Generate A Wordlist From The Information Present In LDAP, In Order To Crack Passwords Of Domain Accounts |
Active Directory ‧ [email protected] (Unknown) |
|
2024-05-29 |
Pyrit - The Famous WPA Precomputed Cracker |
Packet ‧ [email protected] (Unknown) |
|
2024-05-27 |
SherlockChain - A Streamlined AI Analysis Framework For Solidity, Vyper And Plutus Contracts |
Ai Scan ‧ [email protected] (Unknown) |
|
2024-05-26 |
Domainim - A Fast And Comprehensive Tool For Organizational Network Scanning |
Domainim ‧ [email protected] (Unknown) |
|
2024-05-25 |
JA4+ - Suite Of Network Fingerprinting Standards |
Cybersecurity ‧ [email protected] (Unknown) |
|
2024-05-24 |
PoolParty - A Set Of Fully-Undetectable Process Injection Techniques Abusing Windows Thread Pools |
PoolParty ‧ [email protected] (Unknown) |
|
2024-05-23 |
Go-Secdump - Tool To Remotely Dump Secrets From The Windows Registry |
Go-Secdump ‧ [email protected] (Unknown) |
|
2024-05-22 |
Above - Invisible Network Protocol Sniffer |
Above ‧ [email protected] (Unknown) |
|
2024-05-21 |
Vger - An Interactive CLI Application For Interacting With Authenticated Jupyter Instances |
Aisecurity ‧ [email protected] (Unknown) |
|
2024-05-20 |
Drs-Malware-Scan - Perform File-Based Malware Scan On Your On-Prem Servers With AWS |
Aws Guardduty ‧ [email protected] (Unknown) |
|
2024-05-19 |
JAW - A Graph-based Security Analysis Framework For Client-side JavaScript |
Client Side ‧ [email protected] (Unknown) |
|
2024-05-19 |
Linux-Smart-Enumeration - Linux Enumeration Tool For Pentesting And CTFs With Verbosity Levels |
Ctfs ‧ [email protected] (Unknown) |
|
2024-05-17 |
ShellSweep - PowerShell/Python/Lua Tool Designed To Detect Potential Webshell Files In A Specified Directory |
[email protected] (Unknown) |
|
2024-05-16 |
Invoke-SessionHunter - Retrieve And Display Information About Active User Sessions On Remote Computers (No Admin Privileges Required) |
Credentials ‧ [email protected] (Unknown) |
|
2024-05-15 |
Subhunter - A Fast Subdomain Takeover Tool |
Bug Bounty Tools ‧ [email protected] (Unknown) |
|
2024-05-15 |
Hakuin - A Blazing Fast Blind SQL Injection Optimization And Automation Framework |
Hakuin ‧ [email protected] (Unknown) |
|
2024-05-13 |
BypassFuzzer - Fuzz 401/403/404 Pages For Bypasses |
403 Bypass ‧ [email protected] (Unknown) |
|
2024-05-12 |
PingRAT - Secretly Passes C2 Traffic Through Firewalls Using ICMP Payloads |
Firewall Bypass ‧ [email protected] (Unknown) |
|
2024-05-11 |
LOLSpoof - An Interactive Shell To Spoof Some LOLBins Command Line |
LOLBin ‧ [email protected] (Unknown) |
|
2024-05-10 |
SQLMC - Check All Urls Of A Domain For SQL Injections |
Pentest Tool ‧ [email protected] (Unknown) |
|
2024-05-09 |
BadExclusionsNWBO - An Evolution From BadExclusions To Identify Folder Custom Or Undocumented Exclusions On AV/EDR |
BadExclusionsNWBO ‧ [email protected] (Unknown) |
|
2024-05-08 |
Ioctlance - A Tool That Is Used To Hunt Vulnerabilities In X64 WDM Drivers |
htop ‧ [email protected] (Unknown) |
|
2024-05-08 |
NTLM Relay Gat - Powerful Tool Designed To Automate The Exploitation Of NTLM Relays |
NTLM Relay Gat ‧ [email protected] (Unknown) |
|
2024-05-06 |
Gftrace - A Command Line Windows API Tracing Tool For Golang Binaries |
DeimosC2 ‧ [email protected] (Unknown) |
|
2024-05-05 |
HardeningMeter - Open-Source Python Tool Carefully Designed To Comprehensively Assess The Security Hardening Of Binaries And Systems |
HardeningMeter ‧ [email protected] (Unknown) |
|
2024-05-04 |
JS-Tap - JavaScript Payload And Supporting Software To Be Used As XSS Payload Or Post Exploitation Implant To Monitor Users As They Use The Targeted Application |
JS-Tap ‧ [email protected] (Unknown) |
|
2024-05-03 |
MasterParser - Powerful DFIR Tool Designed For Analyzing And Parsing Linux Logs |
Cyber Security ‧ [email protected] (Unknown) |
|
2024-05-02 |
C2-Cloud - The C2 Cloud Is A Robust Web-Based C2 Framework, Designed To Simplify The Life Of Penetration Testers |
C2-Cloud ‧ [email protected] (Unknown) |
|
2024-05-01 |
OSTE-Web-Log-Analyzer - Automate The Process Of Analyzing Web Server Logs With The Python Web Log Analyzer |
Attack Detection ‧ [email protected] (Unknown) |
|
2024-04-30 |
ThievingFox - Remotely Retrieving Credentials From Password Managers And Windows Utilities |
NTLM ‧ [email protected] (Unknown) |
|
2024-04-29 |
Galah - An LLM-powered Web Honeypot Using The OpenAI API |
Galah ‧ [email protected] (Unknown) |
|
2024-04-28 |
CrimsonEDR - Simulate The Behavior Of AV/EDR For Malware Development Training |
AMSI ‧ [email protected] (Unknown) |
|
2024-04-28 |
Url-Status-Checker - Tool For Swiftly Checking The Status Of URLs |
Bugbounty Tools ‧ [email protected] (Unknown) |
|
2024-04-26 |
CSAF - Cyber Security Awareness Framework |
CSAF ‧ [email protected] (Unknown) |
|
2024-04-25 |
Espionage - A Linux Packet Sniffing Suite For Automated MiTM Attacks |
ARP Spoofing ‧ [email protected] (Unknown) |
|
2024-04-24 |
HackerInfo - Infromations Web Application Security |
HackerInfo ‧ [email protected] (Unknown) |
|
2024-04-24 |
C2-Tracker - Live Feed Of C2 Servers, Tools, And Botnets |
C2-Tracker ‧ [email protected] (Unknown) |
|
2024-04-18 |
VectorKernel - PoCs For Kernelmode Rootkit Techniques Research |
Reversing ‧ [email protected] (Unknown) |
|
2024-04-17 |
Cookie-Monster - BOF To Steal Browser Cookies & Credentials |
Cookie-Monster ‧ [email protected] (Unknown) |
|
2024-04-16 |
NoArgs - Tool Designed To Dynamically Spoof And Conceal Process Arguments While Staying Undetected |
Mechanism ‧ [email protected] (Unknown) |
|
2024-04-15 |
Frameless-Bitb - A New Approach To Browser In The Browser (BITB) Without The Use Of Iframes, Allowing The Bypass Of Traditional Framebusters Implemented By Login Pages Like Microsoft And The Use With Evilginx |
Frameless-Bitb ‧ [email protected] (Unknown) |
|
2024-04-15 |
Toolkit - The Essential Toolkit For Reversing, Malware Analysis, And Cracking |
Infosec ‧ [email protected] (Unknown) |
|
2024-04-12 |
Porch-Pirate - The Most Comprehensive Postman Recon / OSINT Client And Framework That Facilitates The Automated Discovery And Exploitation Of API Endpoints And Secrets Committed To Workspaces, Collections, Requests, Users And Teams |
Devsecops ‧ [email protected] (Unknown) |
|
2024-04-11 |
APKDeepLens - Android Security Insights In Full Spectrum |
Android Security ‧ [email protected] (Unknown) |
|
2024-04-10 |
RemoteTLSCallbackInjection - Utilizing TLS Callbacks To Execute A Payload Without Spawning Any Threads In A Remote Process |
Anti-Debugging ‧ [email protected] (Unknown) |
|
2024-04-09 |
Sicat - The Useful Exploit Finder |
Exploit Finder ‧ [email protected] (Unknown) |
|
2024-04-08 |
CloudGrappler - A purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure |
CloudGrappler ‧ [email protected] (Unknown) |
|
2024-04-07 |
GDBFuzz - Fuzzing Embedded Systems Using Hardware Breakpoints |
Embedded ‧ [email protected] (Unknown) |
|
2024-04-06 |
ADOKit - Azure DevOps Services Attack Toolkit |
ADOKit ‧ [email protected] (Unknown) |
|
2024-04-05 |
Attackgen - Cybersecurity Incident Response Testing Tool That Leverages The Power Of Large Language Models And The Comprehensive MITRE ATT&CK Framework |
Attackgen ‧ [email protected] (Unknown) |
|
2024-04-04 |
Chiasmodon - An OSINT Tool Designed To Assist In The Process Of Gathering Information About A Target Domain |
Chiasmodon ‧ [email protected] (Unknown) |
|
2024-04-03 |
ST Smart Things Sentinel - Advanced Security Tool To Detect Threats Within The Intricate Protocols utilized By IoT Devices |
Firmware ‧ [email protected] (Unknown) |
|
2024-04-02 |
VolWeb - A Centralized And Enhanced Memory Analysis Platform |
Forensics ‧ [email protected] (Unknown) |
|
2024-04-01 |
Drozer - The Leading Security Assessment Framework For Android |
ADB ‧ [email protected] (Unknown) |
|
2024-03-31 |
DroidLysis - Property Extractor For Android Apps |
Decompile ‧ [email protected] (Unknown) |
|
2024-03-30 |
R2Frida - Radare2 And Frida Better Together |
Android Security ‧ [email protected] (Unknown) |
|
2024-03-29 |
Cloud_Enum - Multi-cloud OSINT Tool. Enumerate Public Resources In AWS, Azure, And Google Cloud |
Cloud_Enum ‧ [email protected] (Unknown) |
|
2024-03-28 |
Rrgen - A Header Only C++ Library For Storing Safe, Randomly Generated Data Into Modern Containers |
C++ ‧ [email protected] (Unknown) |
|
2024-03-27 |
Noia - Simple Mobile Applications Sandbox File Browser Tool |
Android Security ‧ [email protected] (Unknown) |
|
2024-03-26 |
AutoWLAN - Run A Portable Access Point On A Raspberry Pi Making Use Of Docker Containers |
AutoWLAN ‧ [email protected] (Unknown) |
|
2024-03-25 |
Radamsa - A General-Purpose Fuzzer |
Protocols ‧ [email protected] (Unknown) |
|
2020-04-02 |
DigiTrack - Attacks For $5 Or Less Using Arduino |
Arduino ‧ [email protected] (Unknown) |
|
2020-04-02 |
FProbe - Take A List Of Domains/Subdomains And Probe For Working HTTP/HTTPS Server |
FProbe ‧ [email protected] (Unknown) |
|
2020-04-01 |
MSSQLi-DUET - SQL Injection Script For MSSQL That Extracts Domain Users From An Active Directory Environment Based On RID Bruteforcing |
Active Directory ‧ [email protected] (Unknown) |
|
2020-04-01 |
Awspx - A Graph-Based Tool For Visualizing Effective Access And Resource Relationships In AWS Environments |
AWS ‧ [email protected] (Unknown) |
|
2020-03-31 |
Pulsar - Network Footprint Scanner Platform - Discover Domains And Run Your Custom Checks Periodically |
Banner Grabbing ‧ [email protected] (Unknown) |
|
2020-03-31 |
CVE-2020-0796 - Windows SMBv3 LPE Exploit #SMBGhost |
[email protected] (Unknown) |
|
2020-03-31 |
CVE-2020-0796 - CVE-2020-0796 Pre-Auth POC |
Microsoft ‧ [email protected] (Unknown) |
|
2020-03-31 |
R00Kie-Kr00Kie - PoC Exploit For The CVE-2019-15126 Kr00K Vulnerability |
Airodump-ng ‧ [email protected] (Unknown) |
|