Dan McInerney

wifijammer. Continuously jam all wifi clients/routers

LANs.py. Inject code and spy on wifi users

net-creds. Sniffs sensitive data from interface or pcap

xsscrapy. XSS spider - 66/66 wavsep XSS detected

icebreaker. Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment

pymetasploit3. Automation library for Metasploit

pentest-machine. Automates some pentest jobs via nmap xml file

dnsspoof. DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response

fakeAP. Create fake AP in Kali with 1 command

elite-proxy-finder. Finds public elite anonymity proxies and concurrently tests them

msf-autoshell. Feed the tool a .nessus file and it will automatically get you MSF shell

creds.py. Harvest FTP/POP/IMAP/HTTP/IRC creds

fast-recon. Does some google dorks against a domain

wifi-monitor. Prints the IPs on your local network that're sending the most packets

device-pharmer. Opens 1K+ IPs or Shodan search results and attempts to login

msf-autopwn. Autoexploitation of some of the most common vulnerabilities in wild

search-google. Scrape google search results

autorelay. Automatically performs the SMB relay attack

msfbot. WORK IN PROGRESS. Waits for MSF session then automatically gets domain admin

get_proxy. Py class that returns fastest http proxy

best-channel. Find wifi channel with least interference

Invoke-Cats. Obfuscated Invoke-Mimikatz

SMB-reverse-brute. Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords

smb-autopwn. Discovers and exploits hosts vulnerable to MS08-067/MS17-010

Autobloodhound. Automatically parses and attacks BloodHound-generated graphs

shellshock-hunter. Concurrently test bing results for shellshock vulnerability

autoresp. Runs Responder, uploads hashes for cracking, alerts when cracked

FuzzStrings. Simple, hand-picked list of fuzz strings

crawler.py. async web crawler

cookiejack. ARP spoof then session jack within your browser

shellshock-hunter-google. Search google for shellshock vulnerable sites

nmap-parser. Parses Nmap XML files

net-sniffer. Sniffs an interface/pcap file and concatenates fragmented packet loads

MsfWrapper. Asynchronous MSF RPC API wrapper

shodan-search. Python

WPSmash. Python

Probable-Wordlists. Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

mailspy. Catch IMAP/POP passwords and see incoming and outgoing messages

arp-ping-detector. ARP ping detector on local network

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

flashforge-finder-api. FlashForge Finder 3D Printer API with temperature control

CrackMapExec. A swiss army knife for pentesting Windows/Active Directory environments

async-meterpreter-controller. Template for asynchronously controlling meterpreter sessions

Obf-Cats. Obfuscated Invoke-Mimikatz script

theHarvester. E-mails, subdomains and names Harvester - OSINT

search-bing. Search bing with python

MS17-010. MS17-010

injecthtml. injecthtml

postanalyzer. Analyze and log POSTs your machine makes

metasploit-framework. Metasploit Framework

joomla-addon-hunter. Find potential SQLi in Joomla URLs

UfcstatsScraper. Scrapes ufcstats.com for data

vimrc. My .vimrc

pystemon. Monitoring tool for PasteBin-alike sites written in Python. Inspired by pastemon http://github.com/xme/pastemon

BestfightoddsScraper. Asynchronously scrape bestfightodds.com for odds data

Invoke-Pwds. Obfuscated Invoke-PowerDump for SAM hash retrieval

MMA-parser-for-Sherdog-and-UFC-data. Python web scraper for Sherdog & UFC data. Creates output of your choice in csv or json format.

arpdet. Detects and deauths arp spoofers automatically. Broken.

patator. Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.