Lists (12)
OSINTStars
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
A Post-exploitation Toolset for Interacting with the Microsoft Graph API
(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.
Powerful yet simple to use screenshot software 🖥️ 📸
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
A collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence
Extract and aggregate threat intelligence.
GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or…
A collection of companies that disclose adversary TTPs after they have been breached
Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
A simple tool that helps to find assets/domains based on the Google Analytics ID.
A simple tool for bypassing file upload restrictions.
A tool designed to hunt for Phishing Kit source code
Live Feed of C2 servers, tools, and botnets
A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object
A python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches.
Generates millions of keyword-based password mutations in seconds.
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Does some google dorks against a domain
DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic
An XSS exploitation command-line interface and payload generator.