true-demon Goto Github PK

bloodhound

Six Degrees of Domain Admin

darkarmour

Windows AV Evasion

deedee

Stealthy DDE Exploit Payload generator and injector for DOCX files

dnspy

.NET assembly editor, decompiler, and debugger

drupwn

Drupal enumeration & exploitation tool

enumerid

Enumerate RIDs using pure Python

exploit

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

findsploit

Find exploits in local and online databases instantly

gitkali

The friendly, undescriminating, kali and pentesting tool installer for Linux

hashview

A web front-end for password cracking and analytics

king-phisher

Phishing Campaign Toolkit

king-phisher-plugins

Plugins for the King Phisher open source phishing campaign toolkit.

king-phisher-templates

Templates for the King Phisher open source phishing campaign toolkit.

lans.py

Inject code, jam wifi, and spy on wifi users

lsassy

Extract credentials from lsass remotely

md5decryptor

Md5Decryptor is a neat tool that searchs for a given MD5 hash in a set of web-based resources.

metasploit-framework

Metasploit Framework

mimipenguin

A tool to dump the login password from the current linux user

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

nps_payload

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload written by Ben Mauch (@Ben0xA) aka dirty_ben

pentest-book

psrecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

python-libnessus

Python Nessus Library - libnessus is a python library to enable devs to chat with nessus XMLRPC, parse and diff scan results. It's wonderful.

raindance

Reconnaissance tool for Microsoft Office 365

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

roadtools

The Azure AD exploration framework.

rubbercraft

rubber ducky / malduino automated payload generator

scrapedin

Generate potential email addresses from LinkedIn

shimit

A tool that implements the Golden SAML attack