mgcfish Goto Github PK

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

domaingain

Helps with finding and registering categorized domains

domainhunter

Checks expired domains, bluecoat categorization, and Archive.org history to determine good candidates for phishing and C2 domain names

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

domainrecon

domaintrustexplorer

Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.

domi-owned

IBM/Lotus Domino exploitation

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

domxsswiki

Automatically exported from code.google.com/p/domxsswiki

dooked

DNS and Target HTTP History Local Storage and Search

doork

Passive Vulnerability Auditor

dorkers

Dorks for Google, Shodan and BinaryEdge

dorkhunter

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

dotfiles

.vimrc, .bashrc etc

dotnetpaddingoracle

Python Implementation of a .NET Padding Oracle Assessment Tool

doublepulsar-detection-script

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

dpat

Domain Password Audit Tool for Pentesters

dr0p1t-framework

A framework that creates a dropper that bypass most AVs, some sandboxes and have some tricks ;)

drone-whois

Import netblocks from whois data

dropboxc2c

DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.

drozer

The Leading Security Assessment Framework for Android.

drozer-agent

The Android Agent for the Mercury Security Assessment Framework.

drozer-modules

drunkenkatz

a 'modified' version of the Invoke-Mimikatz.ps1 powershell script

dsinternals

DSInternals PowerShell Module

dtd-attacks

Tests for different parsers from Ruby, Python, .NET, PHP, Perl, Java

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

dumbpentester

Fire and forget pentest script automating the finding of all vulns which *can* be found automaticaly

duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)