jirohori Goto Github PK

artillery

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

auto_settingcontent-ms

This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader and embeds it in the SettingContent-ms file for you and starts Apache.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

dnscrypt-win-client

Windows front end for DNSCrypt Proxy

dshell

Dshell is a network forensic analysis framework.

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

impacket

Automatically exported from code.google.com/p/impacket

impacket-1

Impacket is a collection of Python classes for working with network protocols.

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

metasploit-framework

Metasploit Framework

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

midas

Mac Intrusion Detection Analysis System

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

netexec

Automatically exported from code.google.com/p/netexec

pcapy

Pcapy is a Python extension module that interfaces with the libpcap packet capture library.

powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

python-patterns

A collection of design patterns/idioms in Python

ridenum

Rid_enum is a null session RID cycle attack for brute forcing domain controllers.

smbexec-2

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

wiwo

wiwo is a distributed 802.11 monitoring and injecting system that was designed to be simple and scalable, in which all workers (nodes) can be managed by a Python framework.

yara

The pattern matching swiss knife