Zarcolio

sitedorks. Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

flipperzero. This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

wwwordlist. Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quoted texts in the text and mail files in order to generate wordlists.

grepaddr. Use grepaddr to extract (grep) all kinds of addresses from stdin like URLs (incl. IPv4/IPv6), IP addresses & ranges (IPv4/IPv6), e-mail addresses, MAC addresses.

GoogleZorks. Google search queries for searching some kind of information about interesting stuff (OSINT)

Wappaligner. Changes the output of Wappalyzer into something human readable. It also provides links to useful websites and a Google query for finding information on vulnerabilities.

2cmd. Got a command that doesn't support input files like whois or sqlmap? Use 2cmd to take input from stdin and run each line with the command(s) given in the script file. Comes with lot's of pentest/red teaming/bug bounty/CTF scripts ready to use

1pfuscat0r. A tool to automatically generate alternative IP representations, a rewritten version of IPFuscator

2ulb. Easy shortcut to make scripts executable and link them from /usr/local/bin

rssfeeds. My personal security feeds divided into pentest feeds and other security feeds

uniqurl. Use uniqurl to filter only unique content from a list of URLs with stdin, making it usable within piped commands

s3-bulk-cp. Copy all files found from AWS S3 bucket to local

Free-Security-eBooks. Free Security and Hacking eBooks

WinIPFinder. Tries to find IP addresses from within Windows, useful when engaged in an on-prem pentest / red teaming exercise.

clio. Different tools that take input from stdin, does some stuff and give output stdout, making them perfect for use in pided commands

hardening_guides. A gathered list of hardening guides

Dangerous-Windows-Commands. This is a list of built-in Windows executables that are potentially dangerous an could be use by malware or another type of attacker.

Nmap. Scripts around Nmap and plugins for Nmap

.KaliConfig. A script which install all scripts I want with a fresh Kali

Linux-Fixes. When I stumbe across an issues, which I manage to fix, I'll add a solution. A big warning: DON'T JUST EXECUTE THESE SCRIPTS IF YOU DON'T KNOW WAT YOU'RE DOING, IT MIGHT BREAK STUFF!!!

kali-additions. My personal additions to Kali Linux

hlt. Handy Linux Tools

random-name. JavaScript

whoami-gui. AutoIt

mailgen. Use mailgen to generate bogus e-mail addresses.

splitfqdn. Split an FQDN in parts and rearrange its parts

ZecList. Some lists I created / gathered and put together / improved

reusables. Predominantly contains functions that can be reused.

resolves. Takes host names as input and output the host name if it resolves, making it usable in piped commands.

useshttp. Takes host names as input (ports and HTTP status code are optional) and outputs the base URL if a GET request is successful, making it usable in piped commands.

GetPdfAuthors. Download al files from a website and extract all authors from the PDF files

local_connectivity_check. Routes connectivity checks to pi-hole

WebCapper. Uitilizes subfinder and cutycapt to retrieve a list of hostnames and create a screenshot if a websites exists @ 80 or 443/TCP

smtp_test. PHP