Kuba Gretzky

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

pwndrop. Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

evilginx. PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

dcrawl. Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.

evilqr. Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.

gophish. Open-Source Phishing Toolkit

python-x86-obfuscator. This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.

talks. Slides and videos from talks given at cons

metasploit-payloads. Unified repository for different Metasploit Framework payloads

splitparse. Short script to decode output logs of *sslsplit* raw HTTP packets.

bettercap. The state of the art network attack and monitoring framework.

goproxy. An HTTP proxy library for Go

phishfools. JavaScript

ReflectiveDLLInjection. Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

caplets. Caplets and modules.

regf. Windows registry file format specification

daemon. A daemon package for use with Go (golang) services with no dependencies

go-ntlm. Go

XtoTwitter. JavaScript

InfoSec-Black-Friday. All the deals for InfoSec related software/tools this Black Friday

libdns-cloudflare. Cloudflare provider implementation for libdns