Anthony Cozamanis

fimap. fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

old-school-viruses. This is a collection of really old (mid 90s) virus source code

Sparkler. The tool creates a Microsoft Active Directory Domain with a structure and objects for learning.

wordhound. It builds dictionaries off of generic websites, plain text (for example emails), PDF's and Reddit.

Active-Directory-User-Script. Create Users in Active Directory This script creates 270 + users in Active Directory.

OpenVas-Management-Scripts. Scripts for starting, stopping, checking setup and others ported from Kali Linux for general systemd systems

metagoofil. Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,docx,pptx,xlsx) belonging to a target company.

suricata-alert-extractor. A suricata alert extractor to be used with pfsense logs

Fail2ban-GROK-Log-Pattern.

PassWord-List-Getter. A script to grab a helpful collection of password lists

cchef. A simple bash script that sets up, updates and launches a local install of CyberChef.

phishing_hosts. A host file generated from updated phishing site feeds

TinyNuke. zeus-style banking trojan

Hacking_Cheat_Sheet. All my Hacking|Pentesting Notes

password_lists. Password Lists I've Found or Made

Checklists. Pentesting checklists for various engagements

sliver-extensions. Extensions for the C2

nomx. nomx

Powershell-Empire-Install-Script. Because I got grumpy one day and needed order.

packer-kali-linux. Packer build for Kali Linux

simple-php-upload. A super simple php page for uploading files.

FuzzDict. A collection of lists to aid in the discovery of interesting things.

fuzzdb. Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Block-the-Loop. A domain denylist for breaking the tap cycle.

Keylogger. A simple keylogger for Windows, Linux and Mac by Giacomo Lawrance

Graylog_Sysmon. Advanced Threat detection Configurations for Graylog

p0wnedShell. PowerShell Runspace Post Exploitation Toolkit

medusa_combo_files. Combinations of default usernames and passwords for the Medusa password cracker

SharpShooter. Payload Generation Framework

JS-Downloader. JS Jscript - download file from url then run it

zap-scripts. just my scripts

Sharepoint2010_library_permissions. A script to update the security permissions at the library level.

jigsaw. A simple ruby script for enumerating information about a company's employees. It is useful for Social Engineering or Email Phishing.

clamav_db. Just a handmade clamav database.

ThreatHunting. An informational repo about hunting for adversaries in your IT environment.

freedomfighting. A collection of scripts which may come in handy during your freedom fighting activities.

PoshRat. PowerShell Reverse HTTPs Shell

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Bash-Cheatsheet.

Mastodon-Install-Script. A bash script for installing your own mastodon instance

openvas_install. OpenVas SourceCode Ubuntu Installer

osintstalker. osintstalker

UFW-GROK-Log-Pattern.

hechizo. A fork of mana-toolkit