n0x00's Stars
HelloZeroNet/ZeroNet
ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network
gophish/gophish
Open-Source Phishing Toolkit
EmpireProject/Empire
Empire is a PowerShell and Python post-exploitation agent.
lgandx/Responder
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
infosec-au/altdns
Generates permutations, alterations and mutations of subdomains and then resolves them
thinkst/opencanary
Modular and decentralised honeypot
OWASP/owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
stamparm/ipsum
Daily feed of bad IPs (with blacklist hit scores)
Cn33liz/p0wnedShell
PowerShell Runspace Post Exploitation Toolkit
praetorian-inc/Hob0Rules
Password cracking rules for Hashcat based on statistics and industry patterns
Raikia/FiercePhish
FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
lachesis/scallion
GPU-based Onion Hash generator
sensepost/mana
*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
g0tmi1k/os-scripts
Personal Collection of Operating Systems Scripts
kpwn/yalu
incomplete ios 8.4.1 jailbreak by Kim Jong Cracks (8.4.1 codesign & sandbox bypass w/ LPE to root & untether)
gabemarshall/Brosec
Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.
FSecureLABS/wePWNise
WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.
trustedsec/egressbuster
Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.
nettitude/Prowl
PaulSec/API-dnsdumpster.com
(Unofficial) Python API for https://dnsdumpster.com/
praetorian-inc/gladius
Automated Responder/secretsdump.py cracking
nccgroup/typofinder
A finder of domain typos showing country of IP address
moloch--/CSP-Bypass
A Burp Plugin for Detecting Weaknesses in Content Security Policies
leonjza/qrxfer
Transfer files from Air gapped machines using QR codes
commonexploits/vlan-hopping
Easy 802.1Q VLAN Hopping
dm807cam/Practice
A clean timeline theme for the Ghost CMS
isra17/CryptBackdoor
Windows Crypt API hook to generate weak keys
sensepost/Skype-Maltego-Client
A set of local skype transforms for Maltego to utilise Skype and search the directory
commonexploits/cisco-SNMP-enumeration
Automated Cisco SNMP Enumeration, Brute Force, Configuration Download and Password Cracking
cyberisltd/OpenVPN-RAT-Bridge
PowerShell install script and supporting binaries/config files to add a layer 2 VPN in Simulated Attack engagements