S1n1st3r

GraphCrawler. GraphQL automated security testing toolkit

better-sliver. Adversary Emulation Framework

CrookedConfluence. A secrets scanner for Confluence - For red teamers and pentesters

EV1L-J3ST3R. An automated scanning, enumeration, and note taking tool for pentesters

Smishing-Triad. Tools and dumps related to the Smishing Triad and the USPS smishing campaign from late 2023 into 2024

Attack-Defense-Tooling. Attack & Defense CTF Tooling created for NSA Cyber Exercise (NCX)

better-sliver-package. Go package repo for better-sliver

BB-UACBypass-Loader. Hak5 Bash Bunny UAC Bypass and Loader execution

CVE-2024-37843-POC. POC for CVE-2024-37843. Craft CMS time-based blind SQLi

SummitCTF2023Public. Public code for the Summit CTF 2023 event

RedditOSINT. A tool to help find and collect information on users and communities on Reddit

Hellbreaker. Evading AV products for MISI Hack the Hospital 2.0

SimpleBO. Simple buffer overflow scripts. Built for vulnserver but can be edited for use elsewhere.

Cookie-Monster-XSS. Generate a obfuscated XSS payload to steal cookies

CCDC-VT. VT CCDC

SummitHacksburg. Summit CTF - Hacksburg

KatzParty. MimiKatz output parser, written in Powershell

BugBountyScanner. A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

graphinder. Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce.

BIT3434CVE. BI T3434 Project on data mining CVEs and Exploits

New-USPS-Smishing. The 2024 USPS SMS phishing