Clik here to view.
0D1N v2.6 - Web Security Tool To Make Fuzzing At HTTP/S
0d1n is a tool for automating customized attacks against web applications.You can do:Brute force login and passwords in auth formsDirectory disclosure (use PATH list to brute, and find HTTP status...
View ArticleClik here to view.
pwnedOrNot v1.1.7 - OSINT Tool To Find Passwords For Compromised Email Addresses
pwnedOrNot uses haveibeenpwned v2 api to test email accounts and tries to find the password in Pastebin Dumps.Featureshaveibeenpwned offers a lot of information about the compromised email, some useful...
View ArticleClik here to view.
TeleKiller - A Tool Session Hijacking And Stealer Local Passcode Telegram...
A Tools Session Hijacking And Stealer Local passcode Telegram Windows.Features :Session HijackingStealer Local PasscodeKeyloggerShellBypass 2 Step VerificationBypass Av (Coming Soon)Installation...
View ArticleClik here to view.
Zeebsploit - Web Scanner / Exploitation / Information Gathering
zeebsploit is a tool for hackingsearching for web information andscanning vulnerabilities of a webInstallation & Usageapt-get install gitgit clone https://github.com/jaxBCD/Zeebsploit.gitcd...
View ArticleClik here to view.
W12Scan - A Simple Asset Discovery Engine For Cybersecurity
ChineseW12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use.Here is a web source program, but the scanning end is at...
View ArticleClik here to view.
Pepe - Collect Information About Email Addresses From Pastebin
Collect information about leaked email addresses from PastebinAboutScript parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl,...
View ArticleClik here to view.
Instantbox - Get A Clean, Ready-To-Go Linux Box In Seconds
Get a clean, ready-to-go Linux box in seconds.IntroductionWhat is instantbox?It's a project that spins up temporary Linux systems with instant webshell access from any browser.What can an instantbox...
View ArticleClik here to view.
SilkETW - Flexible C# Wrapper For ETW (Event Tracing for Windows)
SilkETW is a flexible C# wrapper for ETW, it is meant to abstract away the complexities of ETW and give people a simple interface to perform research and introspection. While SilkETW has obvious...
View ArticleClik here to view.
Platypus - A Modern Multiple Reverse Shell Sessions Manager Written In Go
A modern multiple reverse shell sessions/clients manager via terminal written in go.FeaturesMultiple service listening portMultiple client connectionsRESTful APIReverse shell as a...
View ArticleClik here to view.
FLASHMINGO - Automatic Analysis Of SWF Files Based On Some Heuristics
Automatic Analysis Of SWF Files Based On Some Heuristics. Extensible Via Plugins.InstallInstall the Python (2.7) packages listed in requirements.txt.You can use the following command: pip install -r...
View ArticleClik here to view.
fireELF - Fileless Linux Malware Framework
fireELF is a opensource fileless linux malware framework thats crossplatform and allows users to easily create and manage payloads. By default is comes with 'memfd_create' which is a new way to run...
View ArticleClik here to view.
EfiGuard - Disable PatchGuard And DSE At Boot Time
EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement...
View ArticleClik here to view.
Parameth - This Tool Can Be Used To Brute Discover GET And POST Parameters
This tool can be used to brutediscover GET and POST parametersOften when you are busting a directory for common files, you can identify scripts (for example test.php) that look like they need to be...
View ArticleClik here to view.
mongoBuster - Hunt Open MongoDB Instances
Hunt Open MongoDB instances!FeaturesWorlds fastest and most efficient scanner ( Uses Masscan ).Scans entire internet by default, So fire the tool and chill.Hyper efficient - Uses Go-routines which are...
View ArticleClik here to view.
Raptor WAF v0.6 - Web Application Firewall using DFA
Raptor is a Web application firewall made in C, uses DFA to block SQL injection, Cross site scripting and path traversal. http://funguscodes.blogspot.com.br/to run:$ git clone...
View ArticleClik here to view.
FTPBruter - A FTP Server Brute Forcing Tool
Brute forcing tool for FTP server. FTPBruter can work in any OS if they have and support Python 3.FeatureBrute force a FTP server with a username or a list of usernames (That's all).Install and Run on...
View ArticleClik here to view.
Freddy - Automatically Identify Deserialisation Issues In Java And .NET...
A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs.This useful extension was originally developed by Nick Bloor (@nickstadb) for NCC Group and is mainly based on the...
View ArticleClik here to view.
Findomain - A Tool That Use Certificate Transparency Logs To Find Subdomains
A tool that use Certificates Transparency logs to find subdomains.How it works?It tool doesn't use the common methods for sub(domains) discover, the tool uses Certificate Transparency logs to find...
View ArticleClik here to view.
Anevicon - A High-Performant UDP-based Load Generator
A high-performant traffic generator, designed to be as convenient and reliable as it is possible. It sends numerous UDP-packets to a server, thereby simulating an activity that can be produced by your...
View ArticleClik here to view.
Reverie - Automated Pentest Tools Designed For Parrot Linux
Automated Pentest Tools Designed For Parrot Linux.this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully...
View Article