g0tmi1k

msfpc. MSFvenom Payload Creator (MSFPC)

os-scripts. Personal Collection of Operating Systems Scripts

debian-ssh. Debian OpenSSL Predictable PRNG (CVE-2008-0166)

exe2hex. Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

VulnInjector. Generates a Windows 'vulnerable' machine from ISOs

boot2root-scripts. Homemade scripts to-do various vulnerable challenges

crowbar. Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

FinalRecon. The Last Web Recon Tool You'll Need

gobuster. Directory/file & DNS busting tool written in Go

king-phisher. Phishing Campaign Toolkit

kippo-g0tmi1k. Personal fork of Kippo SSH honeypot.

LFISuite. Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

egressbuster. Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

veil-Evasion. Veil-Evasion is a tool used to generate payloads that bypass antivirus solutions

metasploit-framework. Metasploit Framework

php-backdoor. A standalone PHP backdoor for use on *nix and Windows systems.

wafw00f. WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

HomeNetworkSetup. Repo to define my use of docker containers on my home network with Reverse Proxy Configuration

reaver-wps-fork-t6x. C

wpscan-v3. WPScan is a free, for non-commercial use, black box WordPress vulnerability scanner written for security professionals and blog maintainers to test the security of their sites.

commix. Automated All-in-One OS Command Injection and Exploitation Tool

wifite. Python

exploitdb-papers. exploit-database-papers

dirtycow. C

nethunter-LRT. The Nethunter Linux Root Toolkit is a collection of bash scripts which install Nethunter onto a supported device.

patator. Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

GTFOBins.github.io. Curated list of Unix binaries that can be exploited to bypass system security restrictions

smbmap. SMBMap is a handy SMB enumeration tool

wpscan. WPScan is a black box WordPress vulnerability scanner

vmware_escape. VMware Escape Exploit before VMware WorkStation 12.5.5

Drupalgeddon2. Exploit for Drupalgeddon 2 - CVE-2018-7600

rex-powershell. Rex library for dealing with Powershell Scripts

exploitdb-bin-sploits. Exploit Database binary exploits located in the /sploits directory

sslscan. sslscan tests SSL/TLS enabled services to discover supported cipher suites

backtrack-update. Update script for Backtrack 5 R2/R3

kippo-patches. Patches for Kippo (https://code.google.com/p/kippo/) v0.8

kippo. Kippo - SSH Honeypot

mkdocs. Project documentation with Markdown.

Veil. Veil 3.0

guac-install. Script for installing Guacamole on Ubuntu

lxc-ci. LXC continuous integration and build scripts

CeWL. CeWL is a Custom Word List Generator

octopress. Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?

mirrorbits. Mirrorbits is a geographical download redirector written in Go for distributing files efficiently across a set of mirrors.

dashboard-icons. 🚀 The best place to find icons for your dashboards.

contrib. Contributed stuff for munin (plugins, tools, etc...)

subsonic-fluid. Subsonic desktop client for OSX

community.rabbitmq. Manage RabbitMQ with Ansible