zforks Goto Github PK

streisand

Streisand sets up a new server running your choice of WireGuard, OpenConnect, OpenSSH, OpenVPN, Shadowsocks, sslh, Stunnel, or a Tor bridge. It also generates custom instructions for all of these services. At the end of the run you are given an HTML file with instructions that can be shared with friends, family members, and fellow activists.

subbrute

A DNS meta-query spider that enumerates DNS records, and subdomains.

sublazerwlst

Bundle of wordlists for brute-forcing subdomains (World + RUSSIA based).

sublist3r

Fast subdomains enumeration tool for penetration testers

superdelete

SuperDelete is a Windows command line application (.NET) that can be used to delete files and directories with very long paths - longer than 260 characters.

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

theharvester

E-mails, subdomains and names Harvester - OSINT

tikitorch

Process Injection

tinymet

A "tiny" meterpreter stager

tinynuke

zeus-style banking trojan

titanhide

Hiding kernel-driver for x86/x64.

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

tokenvator

A tool to elevate privilege with Windows Tokens

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

tpminituacbypass

Bypassing User Account Control (UAC) using TpmInit.exe

trebuchet

MS15-076 Privilege Escalation

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

uacme

Defeating Windows User Account Control

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

userrecon

veil

Veil 3.1.X (Check version info in Veil at runtime)

vmde

Source from VMDE paper, adapted to 2015

w9scan

Plug-in type web vulnerability scanner

webshell

This is a webshell open source project

wfuzz

Web application fuzzer

whatsmyname

This repository has the unified data required to perform user enumeration on various websites. Content is in a JSON file and can easily be used in other projects.

wheresmyimplant

A Bring Your Own Land Toolkit that Doubles as a WMI Provider

winpwnage

UAC bypass, Elevate, Persistence methods

wpscan

WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their WordPress websites.

xsser

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras