This GitHub repository provides a range of search queries, known as “dorks,” for Shodan, a powerful tool used to search …
PingRAT – Secretly Passes C2 Traffic Through Firewalls Using ICMP Payloads
PingRAT secretly passes C2 traffic through firewalls using ICMP payloads. Features: Uses ICMP for Command and Control Undetectable by most …
BypassFuzzer – Fuzz 401/403/404 Pages For Bypasses
The original 403fuzzer.py 🙂 Fuzz 401/403ing endpoints for bypasses This tool performs various checks via headers, path normalization, verbs, etc. …
Mass-Bruter – Mass Bruteforce Network Protocols
Mass bruteforce network protocols Info Simple personal script to quickly mass bruteforce common services in a large scale of network.It …
Commander – A Command And Control (C2) Server
Commander is a command and control framework (C2) written in Python, Flask and SQLite. It comes with two agents written in …
HBSQLI – Automated Tool For Testing Header Based Blind SQL Injection
HBSQLI is an automated command-line tool for performing Header Based Blind SQL injection attacks on web applications. It automates the …
Spoofy – Program That Checks If A List Of Domains Can Be Spoofed Based On SPF And DMARC Records
Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records. …
Redeye – A Tool Intended To Help You Manage Your Data During A Pentest Operation
This project was built by pentesters for pentesters. Redeye is a tool intended to help you manage your data during …
msLDAPDump – LDAP Enumeration Tool
msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like …
Sh4D0Wup – Signing-key Abuse And Update Exploitation Framework
<meta content="Signing-key abuse and update exploitation framework. % docker run -it –rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup [OPTIONS] <meta content="Signing-key abuse …