dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

domained

Subdomain Enumeration

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

donpapi

Dumping DPAPI credz remotely

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

door404

dotnetavbypass

This project uses the .NET framework to bypass Antivirus solutions.

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

dotnettojscript-languagemodebreakout

doucme

doxycannon

A poorman's proxycannon and botnet, using docker, ovpn files, and a dante socks5 proxy

dpapick

dploot

DPAPI looting remotely in Python

dragoncastle

A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.

dribble

A small project for stealing Wi-Fi passwords via browser's cache poisoning

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

drunkenkatz

a 'modified' version of the Invoke-Mimikatz.ps1 powershell script

drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

drupalgeddon2-1

CVE-2018-7600 | Drupal < 7.58 / < 8.3.9 / < 8.4.6 / < 8.5.1 - 'Drupalgeddon2' RCE

drupwn

Drupal enumeration & exploitation tool

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

ds_walk

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

ducky-exploit

Arduino Rubber Ducky Framework

dumpsmbshare

A script to dump files and folders remotely from a Windows SMB share.

dumpzilla

Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers

duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

east

Exploits and Security Tools Framework 2.0.1