Ryan Montgomery

reverse-shell-generator. Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

FireRTC-Call-Spoofer. Spoof Calls For Free - Unlimited Usage

Flipper. Playground (and dump) of stuff I make or modify for the Flipper Zero

endlets. Bookmarklet to find endpoints easily with one click

Autofill_Danger. Autofill Phishing

capNcook_Trilogy_Media. capNcook - a dark web exploration tool

0day-Xfinity-Wordlist-Generator. Xfinity / Comcast Wordlist Generator

Discord-Crash. Crash all Discord clients (desktop, mobile, browser, third party clients)

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Discord-Custom-Connections. Create custom connections in your profile on Discord

WeaponizeKali.sh. Automate installation of extra pentest tools on Kali Linux

Windows-3.1-Virus-List. A list of viruses from Windows 3.1, and the 16 bit binaries associated.

Reverse-Shell-Bash-Alias. Generate common Reverse Shells for Pentesting

KingOfBugBountyTips.

uspsboxspammer. This tool was created to automatically send 53 different types of USPS branded boxes, with the maximum quantities to any address (about 500 boxes,envelopes,and letters). USPS currently offers free shipping materials, with a very large maximum quantity. I created this tool in Node, for simplicity of use, and to easily manipulate the elements if required. Feel free to contact me with any questions or feature requests.

awesome-shodan-queries. 🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

security. Stuff about it-security that might be good to know

CVE-2020-9484. Remake of CVE-2020-9484 by Pentestical

RustScan. 🤖 The Modern Port Scanner 🤖

PyIntruder. A Powerful Intruder written in Python

AppleJuice. Apple BLE proximity pairing message spoofing

toolbox. CTF toolbox

up-http-tool. Simple HTTP listener for security testing

ScareCrow. ScareCrow - Payload creation framework designed around EDR bypass.

xc. A small reverse shell for Linux & Windows

qFlipper. qFlipper — desktop application for updating Flipper Zero firmware via PC

AutoRecon. AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

InfoSec-Black-Friday. All the deals for InfoSec related software/tools this Black Friday

flipperzero-firmware. Flipper Zero Firmware

giveaway-bot-amazon. Tampermonkey Script - Amazon Giveaways

astro-bot. Browse the web entirely over SMS — no apps required.

File-Download-Generator. Copy and paste commands to quickly transfer files between hosts

THM-Bot. TryHackMe Python Bot

sudo-piggyback. privilege escalation by piggy-backing user sudo requests

Rickroll-Server. Python TCP server for terminal rickrolls

deepce. Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

portapack-havoc. Custom firmware for the HackRF SDR + PortaPack H1 addon

InstallerFileTakeOver. C++

mediacms. MediaCMS is a modern, fully featured open source video and media CMS, written in Python/Django and React, featuring a REST API.

StegKraken. StegCracker but actually good

p3nt3t3r. Commit Art

Arjun. HTTP parameter discovery suite.

CVE-Exploits. PoCs for public CVE's I have been working on.

GraphQLmap. GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

Research_Papers.

xsinator.com. XS-Leak Browser Test Suite

commonspeak. Content discovery wordlists generated using BigQuery

gtfo. gtfobin checker

sudo-cve-2019-18634. Proof of Concept for CVE-2019-18634

SUID3NUM. A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

CVE-2021-3493. Ubuntu OverlayFS Local Privesc

dompdf-rce. RCE exploit for dompdf

impacket-examples-windows. The great impacket example scripts compiled for Windows