initstring Goto Github PK

andrankenum

Tool to get the top android apps for bug bounty purpose

attack-flow

Attack Flow helps executives, SOC managers, and defenders easily understand how attackers compose ATT&CK techniques into attacks by developing a representation of attack flows, modeling attack flows for a small corpus of incidents, and creating visualization tools to display attack flows.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

dhcp4

DHCP4 library written in Go.

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

evil-ssdp

Spoof SSDP replies and create fake UPnP devices to phish for credentials and NetNTLM challenge/response.

gitrob

Reconnaissance tool for GitHub organizations

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

linkedin2username

OSINT Tool: Generate username lists for companies on LinkedIn

lxd_root

Linux privilege escalation via LXD

lyricpass

Password wordlist generator using song lyrics for targeted bruteforce audits / attacks. Useful for penetration testing or security research.

mempg

Memorable Passphrase Generator - create secure random passphrases that sound like sentences

metasploit-framework

Metasploit Framework

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

passphrase-wordlist

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

pentest-methodology

Short checklists for penetration testing methodology

pentest-tools

General stuff for pentesting - password cracking, phishing, automation, Kali, etc.

piholeblocklist

PiHole and AGH Blocklists

pyshell

Simple netcat-like binary for Windows, created with python and py2exe.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

stockpile

A CALDERA plugin

switcheroo

Universal LAN-based SSRF Attack Primitive

test

umdmusic-downloader

Python script to download top billboard singles from umdmusic.com

uptux

Linux privilege escalation checks (systemd, dbus, socket fun, etc)

urban-dictionary-word-list

Script and sample dataset of all urban dictionary entry names (around 1.4 million total)