Clik here to view.
VulnNodeApp - A Vulnerable Node.Js Application
A vulnerable application made using node.js, express server and ejs template engine. This application is meant for educational purposes only.SetupClone this repositorygit clone...
View ArticleClik here to view.
Hfinger - Fingerprinting HTTP Requests
Tool for Fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage :-)Its main objective is to provide unique representations (fingerprints) of malware...
View ArticleClik here to view.
CloudBrute - Awesome Cloud Enumerator
A tool to find a company (target) infrastructure, files, and apps on the top cloud providers (Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode). The outcome is useful for bug bounty...
View ArticleClik here to view.
Ashok - A OSINT Recon Tool, A.K.A Swiss Army Knife
Reconnaissance is the first phase of penetration testing which means gathering information before any real attacks are planned So Ashok is an Incredible fast recon tool for penetration tester which is...
View ArticleClik here to view.
DockerSpy - DockerSpy Searches For Images On Docker Hub And Extracts...
DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.What is Docker?Docker is an open-source platform that automates the...
View ArticleClik here to view.
ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make...
ModTracer Finds Hidden Linux Kernel Rootkits and then make visible again.Another way to make an LKM visible is using the imperius trick: https://github.com/MatheuZSecurity/ImperiusDownload ModTracer
View ArticleClik here to view.
Psobf - PowerShell Obfuscator
Tool for obfuscating PowerShell scripts written in Go. The main objective of this program is to obfuscate PowerShell code to make its analysis and detection more difficult. The script offers 5 levels...
View ArticleClik here to view.
BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
Evade EDR's the simple way, by not touching any of the API's they hook.TheoryI've noticed that most EDRs fail to scan scripting files, treating them merely as text files. While this might be...
View ArticleClik here to view.
Imperius - Make An Linux Kernel Rootkit Visible Again
A make an LKM rootkit visible again.This tool is part of research on LKM rootkits that will be launched.It involves getting the memory address of a rootkit's "show_module" function, for example, and...
View ArticleClik here to view.
Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability...
Mass Assigner is a powerful tool designed to identify and exploit mass assignment vulnerabilities in web applications. It achieves this by first retrieving data from a specified request, such as...
View ArticleClik here to view.
File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File...
file-unpumper is a powerful command-line utility designed to clean and analyze Portable Executable (PE) files. It provides a range of features to help developers and security professionals work with PE...
View ArticleClik here to view.
Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator...
The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking.About...
View ArticleClik here to view.
Secator - The Pentester'S Swiss Knife
secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters and security...
View ArticleClik here to view.
PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload...
BYOSI- Bring-Your-Own-Script-Interpreter- Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious...
View ArticleClik here to view.
SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks...
SafeLine is a self-hosted WAF(Web Application Firewall) to protect your web apps from attacks and exploits.A web application firewall helps protect web apps by filtering and monitoring HTTP traffic...
View ArticleClik here to view.
Docf-Sec-Check - DockF-Sec-Check Helps To Make Your Dockerfile Commands More...
DockF-Sec-Check helps to make your Dockerfile commands more secure.Done[x] First-level security notification in the DockerfileTODO List[ ] Correctly detect the Dockerfile.[ ] Second-level security...
View ArticleClik here to view.
Lazywarden - Automatic Bitwarden Backup
Secure, Automated, and Multi-Cloud Bitwarden Backup and Import SystemLazywarden is a Pythonautomation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It...
View ArticleClik here to view.
Snoop - OSINT Tool For Research Social Media Accounts By Username
OSINT Tool for research social media accounts by usernameInstall Requests```Install Requests pip install requests#### Install BeautifulSoup```Install BeautifulSouppip install beautifulsoup4Execute the...
View ArticleClik here to view.
gitGRAB - This Tool Is Designed To Interact With The GitHub API And Retrieve...
This tool is designed to interact with the GitHub API and retrieve specific user details, repository information, and commit emails for a given user.Install Requestspip install requestsExecute the...
View ArticleClik here to view.
Telegram-Story-Scraper - A Python Script That Allows You To Automatically...
A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script continuously monitors and saves both photos and videos...
View ArticleClik here to view.
Lobo Guará - Cyber Threat Intelligence Platform
Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence (CTI). It offers tools that make it easier to identify threats, monitor data...
View ArticleClik here to view.
Moukthar - Android Remote Administration Tool
Remote adminitration tool for androidFeaturesPermissions bypass (android 12 below) https://youtube.com/shorts/-w8H0lkFxb0Keylogger https://youtube.com/shorts/Ll9dNrkjFOANotifications listenerSMS...
View ArticleClik here to view.
Telegram-Scraper - A Powerful Python Script That Allows You To Scrape...
A powerful Python script that allows you to scrape messages and media from Telegram channels using the Telethon library. Features include real-time continuous scraping, media downloading, and data...
View ArticleClik here to view.
QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send...
QuickResponseC2 is a stealthy Command and Control (C2) framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network...
View ArticleClik here to view.
Instagram-Brute-Force-2024 - Instagram Brute Force 2024 Compatible With...
Instagram Brute Force CPU/GPU Supported 2024(Use option 2 while running the script.)(Option 1 is on development)(Chrome should be downloaded in device.)Compatible and Tested (GUI Supported Operating...
View Article