100security

ad-email-senha

AD - Notificação por E-mail de quando a Senha Expira

ad-lista

Extrair a lista de usuários do Active Directory e envia por E-mail.

ad-ps1-csv

Criar Usuários via PowerShell com CSV

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

adrt

ADRT - Active Directory Report Tool

arjun

HTTP parameter discovery suite.

assetfinder

Find domains and subdomains related to a given domain

aswcrypter

An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]

autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

bad-pdf

Steal Net-NTLM Hash using Bad-PDF

basic-auth-pot

bap - http Basic Authentication honeyPot

bbot

OSINT automation for hackers.

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

billcipher

Information Gathering tool for a Website or IP address

bloodhound

Six Degrees of Domain Admin

catphish

CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM.

cerbrutus

Network brute force tool, written in Python. Faster than other existing solutions (including the main leader in the network brute force market).

cewl

CeWL is a Custom Word List Generator

chaos

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

credphish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

cripto-cert

Criptografia com Certificado

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

crowley-scan

Crowley-scan is a tool to search for and analyze vulnerable targets open to the internet.

cuteit

IP obfuscator made to make a malicious ip a bit cuter

cve-2020-1472

Test tool for CVE-2020-1472

d-tect

# D-TECT D-TECT - Pentest the Modern Web Author: [Shawar Khan] (https://shawarkhan.com/about/) Disclaimer: I am not responsible for any damage done using this tool. This tool should only be used for educational purposes and for penetration testing. ###Compatibility: * Any platform using Python 2.7 ###Requirements: * Python 2.7 * Modules(included): Colorama, BeautifulSoup ###Description: **D-TECT** is an All-In-One Tool for Penetration Testing. This is specially programmed for Penetration Testers and Security Researchers to make their job easier, instead of launching different tools for performing different task. **D-TECT** provides multiple features and detection features which gather target information and finds different flaws in it. ###Features: * Sub-domain Scanning * Port Scanning * Wordpress Scanning * Wordpress Username Enumeration * Wordpress Backup Grabbing * Sensitive File Detection * Same-Site Scripting Scanning * Click Jacking Detection * Powerful XSS vulnerability scanning * SQL Injection vulnerability scanning * User-Friendly UI ###Usage: python d-tect.py #Screenshots: ###Menu:  ###Banner Grabbing:  ###Click Jacking Detection:  ###Port Scanner:  ###WP Backup Grabber:  ###Sensitive File Detection:  ###Cross-Site Scripting [ XSS ] Scanner:  ###SQL Injection [ SQLI ] Scanner:  ###Sub-domain Scanner:  ###WP Username Enumeration:  ###Same Site Scripting detection:  # Special Thanks To: * Curt Smith * Tayyab Qadir * Mugees Ahmad

dirsearch

Web path scanner