jabdy86 Goto Github PK

decodify

Detect and decode encoded strings, recursively.

deepbluecli

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

deploy-deception

A PowerShell module to deploy active directory decoy objects.

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dive

A tool for exploring each layer in a docker image

dnspy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

dontgo403

Tool to bypass 40X response codes.

dotdotslash

Search for Directory Traversal Vulnerabilities

drakvuf-sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

espionage

A Network Packet and Traffic Interceptor For Linux. Spoof ARP & Wiretap A Network.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exchange-ad-privesc

Exchange privilege escalations to Active Directory

exploitation-course

Offensive Software Exploitation Course

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fuxploider

File upload vulnerability scanner and exploitation tool.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

git-dumper

A tool to dump a git repository from a website

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

goby

Attack surface mapping

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

gorsair

Gorsair hacks its way into remote docker containers that expose their APIs

gron

Make JSON greppable!

group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

gyoithon

GyoiThon is a growing penetration test tool using Machine Learning.