shad0w0lf's Stars
louislam/uptime-kuma
A fancy self-hosted monitoring tool
danielmiessler/fabric
fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.
projectdiscovery/nuclei
Fast and customizable vulnerability scanner based on simple YAML based DSL.
kgretzky/evilginx2
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
HavocFramework/Havoc
The Havoc Framework.
Tib3rius/AutoRecon
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
blacklanternsecurity/bbot
A recursive internet scanner for hackers.
itm4n/PrivescCheck
Privilege Escalation Enumeration Script for Windows
sensepost/gowitness
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
21y4d/nmapAutomator
A script that you can run in the background!
nicocha30/ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
BeichenDream/GodPotato
Syslifters/sysreptor
Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.
techjacker/repo-security-scanner
CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys
Orange-Cyberdefense/ocd-mindmaps
Orange Cyberdefense mindmaps
Greenwolf/ntlm_theft
A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
n0kovo/n0kovo_subdomains
An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.
Hackndo/pyGPOAbuse
Partial python implementation of SharpGPOAbuse
MaherAzzouzi/CVE-2022-37706-LPE-exploit
A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)
MzHmO/LeakedWallpaper
Leak of any user's NetNTLM hash. Fixed in KB5040434
watchtowrlabs/CVE-2024-4577
PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC
VbScrub/Rubeus-GUI
GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements
blackhatethicalhacking/TerminatorZ
TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications.
Orange-Cyberdefense/LinikatzV2
linikatz is a tool to attack AD on UNIX
Stuub/Helios
Helios: Automated XSS Testing
blackhillsinfosec/Wifi-Forge
WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.
toneemarqus/AD-Suit
Active Directory Penetration Testing Tool
toneemarqus/Kali-Network-Pentesting-Tools
In this repo, I have included the tools that i used for my everyday penetration tests, if you have just installed kali and lost your tools, this is the right repo for you :)
gquere/CVE-2019-6693
Decrypt FortiGate configuration secrets
duck-sec/pytorch-evil-pth
Script to generate a .pth file which will execute arbitrary commands