ktx

h8mail. Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

Redcloud. Automated Red Team Infrastructure deployement using Docker

Offensive-Dockerfiles. Offensive tools as Dockerfiles. Lightweight & Ready to go

flaskbomb. GZip HTTP Bombing in Python for everyone

github-starmap. Python utility to export a user's starred repositories list into a CSV file

LeakLooker. Find open databases - Powered by Binaryedge.io

AutoSploit. Automated Mass Exploiter

Zeus-Scanner. Advanced reconnaissance utility

CloudScraper. CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

trape. People tracker on the Internet: Learn to track the world, to avoid being traced.

GitMiner. Tool for advanced mining for content on Github

dcrawl. Simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names.

hideNsneak. a CLI for ephemeral penetration testing

leviathan. wide range mass audit toolkit

AutoSQLi. An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap.

Hash-Buster. Crack hashes in seconds.

marble-framework. marble framework usado pela CIA para mascarar fontes de malwares

Cr3dOv3r. Know the dangers of credential reuse attacks.

FiercePhish. FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

credmap. The Credential Mapper

Photon. Incredibly fast crawler designed for reconnaissance.

EmailHarvester. Email addresses harvester

SDK. Public SDK for Intelligence X

AutoNSE. Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner

hershell. Multiplatform reverse shell generator

merlin. Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Striker. Striker is an offensive information and vulnerability scanner.

rdphoney. Basic RDP honeypot script

CMSeeK. CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 130 other CMSs

BruteX. Automatically brute force all services running on a target.

GoRedLoot. A tool to collect secrets (keys and passwords) and stage (compress and encrypt) them for exfiltration.

SimplyEmail. Email recon made fast and easy, with a framework to build on

CrossLinked. LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping. Names can be formatted in a defined naming convention for further security testing.

Memcrashed-DDoS-Exploit. DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

datasploit. An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

gscript. framework to rapidly implement custom droppers for all three major operating systems

fake-rdp. Emulate the handshake packets of an RDP server with python

V3n0M-Scanner. Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

sn1per-docker. Dockerized version of Sn1per (https://github.com/1N3/Sn1per)

khast3x.github.io. HTML

MailFail. Proof of Concept - Utilize misconfigured newsletter forms to spam / deny service to an inbox

koadic. Koadic C3 COM Command & Control - JScript RAT

netutils. A set of network utils in a small container.

haveibeenpwned. Python script to verify multiple email addresses for pwnage

twa. A tiny web auditor with strong opinions.

ctfr. Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

SupergirlOnCrypt. CryptoTrojan in Python (For educational purpose ONLY)

BreachCompilation. BreachCompilation Tools

Shiva. Improved DOS exploit for wordpress websites (CVE-2018-6389)

XSStrike. Most advanced XSS detection suite.

offensiveinterview. Interview questions to screen offensive (red team/pentest) candidates

sqliv. massive SQL injection vulnerability scanner

vulscan. Advanced vulnerability scanning with Nmap NSE

Dell-Support-Assist-RCE-PoC. Python

serve. Simple Go file server for command line development use, a la Python's SimpleHTTPServer.

go-execute-assembly. Allow a Go process to dynamically load .NET assemblies

dockerize-me. This tool lets you Dockerize your applications using best practices to define your Dockerfile and Docker entry point files.

jekyll-now. Build a Jekyll blog in minutes, without touching the command line.

go-donut. Donut Injector ported to pure Go. For use with https://github.com/TheWover/donut

carte-noire. A simple jekyll theme for blogging