Find, verify, and analyze leaked credentials

Reconnaissance tool for GitHub organizations

An Advanced Web Crawler and DirBuster

Decipher hashes using online rainbow & lookup table attack services.

XPT - XSS Polyglot Tester

Shared lists of problem domains people may want to block with hosts files

VSAQ is an interactive questionnaire application to assess the security programs of third parties.

Scan for misconfigured S3 buckets across S3-compatible APIs!

A tool to elevate privilege with Windows Tokens

Working POC of Mikrotik exploit from Vault 7 CIA Leaks

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

Exchange Transport rules to detect and enable response to phishing

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

Search for Directory Traversal Vulnerabilities

Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

A keystroke logger to exploit XSS vulnerabilities in a site - for my personal Educational purposes only

A Universal 32-bit iBoot patcher for iPhone OS 2.0 --> iOS 10

Metasploit Framework

Perform advanced MiTM attacks on websites with ease 💉

Automated Mass Exploiter

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

Penetration Testing/Security Cheatsheets

Advanced keyboard-walk generator with configureable basechars, keymap and routes

Official Transmission BitTorrent client repository

WiFi HID Injector - An USB Rubberducky / BadUSB On Steroids.