Traditional obfuscation techniques tend to add layers to encapsulate standing code, such as base64 or compression. These payloads do continue...
By Cas van Cooten (@chvancooten), with special thanks to some awesome folks: Fabian Mosch (@S3cur3Th1sSh1t) for sharing dynamic invocation implementation...
The plugin is created to help automated scanning using Burp in the following scenarios: Access/Refresh token Token replacement in XML,JSON...
The script FindUncommonShares.py is a Python equivalent of PowerView's Invoke-ShareFinder.ps1 allowing to quickly find uncommon shares in vast Windows...
Script to parse Aircrack-ng captures into a SQLite database and extract useful information like handshakes (in 22000 hashcat format), MGT...
This is a Proof Of Concept application that demostrates how AI can be used to generate accurate results for vulnerability...
CertWatcher is a tool for capture and tracking certificate transparency logs, using YAML templates. The tool helps to detect and...
Time for another Kali Linux release! – Kali Linux 2023.1. This release has various impressive updates. he changelog summary since...
The CertVerify is a tool designed to detect executable files (exe, dll, sys) that have been signed with untrusted or...
Graphicator is a GraphQL "scraper" / extractor. The tool iterates over the introspection document returned by the targeted GraphQL endpoint,...
The tool is being tested in the beta phase, and it only gathers MacOS system information at this time. The...
IBM Security X-FORCE Exchange library in Python 3. Search: threat_activities, threat_groups, malware_analysis, collector and industries.Install pip3 install XForce Use Using you API_KEY...
APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although...
Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be...
This tool is meant to be used during Red Team Assessments and to audit the XDR Settings. With this tool...
IpGeo is a python tool to extract IP addresses from captured network traffic file (pcap/pcapng) and generate csv report containing...
DataSurgeon (ds) is a versatile tool designed for incident response, penetration testing, and CTF challenges. It allows for the extraction...
C-99-Shell-PHP7 PHP 7 and safe-build Update of the popular C-99 variant of PHP Shell. c-99-shell.php v.2.0 (PHP...
This tool uses the taint analysis technique for static analysis and aims to identify points of heap memory usage vulnerabilities...
Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for...
Extensible Azure Security Tool (Later referred as E.A.S.T) is tool for assessing Azure and to some extent Azure AD security...
Self-Service Security Assessment too l Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and...
What's this? A simple program to create a Windows account you will only know about :) Create invisible local accounts...
════════════════════════════════════╦═══ ╔═╦═╗ ╔═╗ ╔═╗ ╔═╗ ╔═╦═╗ ╔═╗ ╔══╔═╗ ╠═╗ ═╩ ╩ ╩═╚═╝═╩ ╩═╚═╝═╩ ╩ ╩═╚═╝═╩ ╠═╝═╩ ╩═ ════════════════════════════════╩═══════ By Retr0id...
