Mor David

BruteForceAI. Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks

NetworkHound. Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑compatible OpenGraph JSON.

FlareTunnel. Proxy system that routes traffic through Cloudflare Workers for IP rotation and anonymity

BloodHound-MCP-AI. BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instead of complex Cypher queries.

DonPwner. Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database

vCenterHound. Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges

awesome-cyber-security-mcp.

ExternalAttacker-MCP. A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.

DCSyncHound. This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)

BloodHoundViewer. Addon for BHCE

Hashcat-MCP. MCP wrapper for Hashcat – automate hash cracking with natural language

NetworksDB-MCP. Fast MCP integration for NetworksDB API - Query IP addresses, organizations, ASNs, and DNS records using natural language through Model Context Protocol

SharpWebClientScanner. C# tool that verifies the status of WebClient services across multiple targets in the domain.

CVE-2023-38831-Winrar-Exploit-Generator-POC. This is a POC for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks within the code.

awesome-mcp-servers. A curated list of Model Context Protocol (MCP) servers

BHCreator. Bloodhound CE deployment include my custom settings in one-liner.

Telegram-Listener. This script serves as a fundamental listener for bot channels on Telegram.

SharpNetworkScanner. C# utility designed for network scanning.

mordavid.

Pre2KFromDCSync. Pre2KfromDCSync detects machine accounts with Pre-Windows 2000 passwords and outputs the account name, stored NT hash, and potential password from DCSync output.

2KSpray. 2KSpray is a tool that uses "asktgt" to verify Windows 2000 systems by confirming if the password aligns with the host's name.