gobiasinfosec

gobiasinfosec's Stars

• gophish/gophish

  Open-Source Phishing Toolkit

  Language:Go11.5k3522.8k2.2k

• rebootuser/LinEnum

  Scripted Local Linux Enumeration & Privilege Escalation Checks

  Language:Shell7k195292k

• bisguzar/twitter-scraper

  Scrape the Twitter Frontend API without authentication.

  Language:Python3.9k98106602

• internetwache/GitTools

  A repository with 3 tools for pwn'ing websites with .git repositories available

  Language:Shell3.9k8925625

• huntergregal/mimipenguin

  A tool to dump the login password from the current linux user

  Language:C3.8k15231633

• rootm0s/WinPwnage

  UAC bypass, Elevate, Persistence methods

  Language:Python2.6k10744381

• joaomatosf/jexboss

  JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

  Language:Python2.4k9560638

• UnaPibaGeek/ctfr

  Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

  Language:Python2k6712291

• trustedsec/hate_crack

  A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

  Language:Python1.7k8218260

• api0cradle/LOLBAS

  Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

  Language:XSLT1.6k1432342

• byt3bl33d3r/SprayingToolkit

  Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

  Language:Python1.4k3417265

• SySS-Research/Seth

  Perform a MitM attack and extract clear text credentials from RDP connections

  Language:Python1.4k8960320

• Viralmaniar/Passhunt

  Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.

  Language:Python1.2k558177

• Metnew/uxss-db

  🔪Browser logic vulnerabilities :skull_and_crossbones:

  Language:HTML68635690

• m8sec/nullinux

  Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

  Language:Python564264101

• dafthack/PowerMeta

  PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

  Language:PowerShell543339115

• enigma0x3/Misc-PowerShell-Stuff

  random powershell goodness

  Language:PowerShell440283163

• SwiftOnSecurity/SwiftFilter

  Exchange Transport rules to detect and enable response to phishing

  40349662

• jephthai/OpenPasswordFilter

  An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.

  Language:C#3863429101

• aress31/jwtcat

  A CPU-based JSON Web Token (JWT) cracker and - to some extent - scanner.

  Language:Python2919948

• preempt/credssp

  A code demonstrating CVE-2018-0886

  Language:Python261181068

• rand0m1ze/ezsploit

  Linux bash script automation for metasploit

  Language:Shell255396117

• zeroSteiner/mayhem

  Runtime Process Manipulation

  Language:Python23023059

• secdec/adapt

  ADAPT is a tool that performs automated Penetration Testing for WebApps.

  Language:Python187211252

• madhuakula/wincmdfu

  Windows one line commands that make life easier, shortcuts and command line fu.

  18119141

• chrismaddalena/Goreport

  A Python script to collect campaign data from Gophish and generate a report

  Language:Python177133549

• NickstaDB/SerialBrute

  Java serialization brute force attack tool.

  Language:Python1247132

• fortinet-solutions-cse/fortiosapi

  Python library aimed to be used by configuration management system using Fortigate/Fortios devices (REST API)

  Language:Python115284341

• maaaaz/weblogicpassworddecryptor

  A simple script to decrypt stored passwords from Oracle WebLogic Server configuration files

  306012

• zi0Black/POC-CVE-2018-0114

  This repository contains the POC of an exploit for node-jose < 0.11.0

  Language:Python254210