nerdyninny Goto Github PK

365inspect

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

assistant-relay

A Node.js server that allows for sending commands to Google Home/Assistant from endpoints

azurehound

Azure Data Exporter for BloodHound

catt

Cast All The Things allows you to send videos from many, many online sources to your Chromecast.

cloudsploit

Cloud Security Posture Management (CSPM)

credmaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilginx2-phishlets

Evilginx2 Phishlets version (0.2.3) Only For Testing/Learning Purposes

google-assistant-relay

SmartThings Google Assistant Relay Notification SmartApp

hashcat-rules-collection

Probably the largest collection of hashcat rule-files anywhere.

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

macutil

MAC Address brute forcing tool, used to bypass MAC based filtering

magicmirror

MagicMirror² is an open source modular smart mirror platform. With a growing list of installable modules, the MagicMirror² allows you to convert your hallway or bathroom mirror into your personal assistant.

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

myqredirectcode

noise-suppression-for-voice

Noise suppression plugin based on Xiph's RNNoise

ntdsxtract

Active Directory forensic framework

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

pc-optimization-hub

collection of various resources devoted to performance and input lag optimization

phishlet-evilginx2-

PHISHLET [EVILGINX2] Settings for phishing sites are written in the yaml language. This is a long development of my collection that I have been working on for the last 3 months due to changes in site security rules in particular scripts for bypassing the CloudFlare security. 🙌 I PRESENT to you my collection from the sites : 1Password / Binance / Bitfinex / Bittrex / Bitwarden / Blockchain / Cex.io / Coinbase / Dashlane / Enpass / Enterprise WebAccountManager / Exmo / FTX Trading / Google / Huobi / Keeper / Korbit / Kraken / LastPass / MultiPassword / O365 / Yahoo Contributing If you are interested in creating an email or phishing website template, contact me at [twitter or tlgrm] DEVELOPER DO NOT SUPPORT ANY OF THE ILLEGAL ACTIVITIES. Contact Me on telegram or twitter: https://twitter.com/TrewisScotch / https://t.me/HiroSCOTCH

phishlets

Phishlets for Evilginx2 (MITM proxy Framework)

powerplatform-samples

The website for the PnP Power Platform samples gallery, including Power Apps, Power Automate, Power Virtual Agents, Portals, etc.

purplehaze

DNS tunnel for iOS based off of Iodine

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

smartthings_myq

Integrate SmartThings with MyQ

smartthingspublic

SmartThings open-source DeviceTypeHandlers and SmartApps code

test

top-nmap-ports-csv

Various lists of the most popular ports as evaluated by nmap, expressed as lists and csv.