zeldaelda Goto Github PK

brutescrape

A web scraper for generating password files based on plain text found

c2

Covert Channels for C2 Server

gpgmail

GPG plugin for Apple Mail

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

nishang

Nishang - PowerShell for penetration testing and offensive security.

nosqlmap

Automated Mongo database and NoSQL web application exploitation tool

password_plus_one

initial push

pi_phone_home

Raspberry Pi 2 C2

powershell_popup

PowerShell_Popup

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

reddit_xss

Reddit XSS Gather Tool

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

ships

The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Clients may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support personnel as required, or updated when a password has to be manually changed in the course of system maintenance. By having unique passwords on each machine and logging of password retrievals, security can be improved my making networks more resistant to lateral movement by attackers and enhancing the ability to attribute actions to individual persons.

social-engineer-toolkit

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

violent-python-examples

web_password_gen