Michael Skelton

NoSQLMap. Automated NoSQL database enumeration and web application exploitation tool.

Reconnoitre. A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

VHostScan. A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Interlace. Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

DNSCewl. A DNS Bruteforcing Wordlist Generator

BibWord. Microsoft Word and Bibliography Styles extender.

OSCP-2. Collection of things made during my OSCP journey

dorky. A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

bbr. An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

crithit. Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

Minesweeper. A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Retrieve-Windows-Wifi-Passwords. Retreives the SSID names and passwords in cleartext for each Wifi network stored on the computer running this powershell script and output to JSON.

Ransomware-Json-Dataset. Compiles a json dataset using public sources that contains properties to aid in the detection and mitigation of over 1000 variants of ransomware.

microsubs. A collection of code for interacting with API sources directly to improve your understanding of those services.

dooked. DNS and Target HTTP History Local Storage and Search

fastsub. A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.

SharePoint-Security. A Github Repository Created to compliment a BSides Canberra 2018 talk on SharePoint Security.

simple. A collection of one off hacks and simple scripts

bug-bounty-dorks. List of Google Dorks for sites that have responsible disclosure program / bug bounty program

cracknet. A .net Crackme Challenge made for the SecTalks Brisbane 2017 Capture the Flag Event. Writeup/solution included.

Bugcrowd-Talks. Slide Decks and Supporting Content of talks given for Bugcrowd

Awesome-Hacking-Resources. A collection of hacking / penetration testing resources to make you better!

guides. A companion repo to accompany detailed guides and YouTube content to allow users to follow along

graphql-wordlist. The only graphql wordlists you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

pentest_compilation. Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

succinct. A tool to create a text summary of a provided list of websites

cloud_enum. Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

hacks. A collection of hacks and one-off scripts

certasset. Takes ip range, Scan all open SSL Certs, Grab Cnames

codingo.

BurpSuite-Asset_Discover. Burp Suite extension to discover assets from HTTP response.

sql-injection-payload-list. 🎯 SQL Injection Payload List

WindowsExploits. Precompiled Windows exploits

Windows-Privesc. Basics of Windows privilege escalation

pwn_jenkins. Notes about attacking Jenkins servers

megplus. Automated reconnaissance wrapper — TomNomNom's meg on steroids.

DNSCewl-go. A DNS Bruteforcing Wordlist Generator

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

RaiderOfTheLostBrowsers. Command line utility to extract passwords from the major browsers (Chrome, Firefox, Edge). Useful in demonstrating to users the importance of using proper password managers instead of saving credentials in browser based accounts which synchronize settings locally.

awesome-pentest-cheat-sheets. Collection of the cheat sheets useful for pentesting

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

takeover. Sub-Domain TakeOver Vulnerability Scanner

blog. Repository housing codingo-com hugo project

XSS-Payloads. List of XSS Vectors/Payloads

ssrf-playground. A playground to practice SSRF Attacks against web apps

xssfinder. Toolset for detecting reflected xss in websites

Cheatsheets-1. Penetration Testing/Security Cheatsheets

bounty-targets-data. This repo contains hourly-updated data dumps of Hackerone/Bugcrowd scopes that are eligible for reports