keramas Goto Github PK

adfspoof

blowhole

Docker auditing and enumeration script.

cabcloningfactory

A Python-based tool for cloning .cab certificates

chisel

A fast TCP/UDP tunnel over HTTP

ctf-writeups

Compendium of various CTF challenges

ds_walk

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

duckypad

Do-It-All Mechanical Macropad

elnombre

Generate a list of different username/email formats from a list of scraped full names

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

hangman

hexxorscii

Quick tool to XOR hex values and then convert them to an ascii string.

image_optimizer

Shell script to optimize and rename images

impacket

Impacket is a collection of Python classes for working with network protocols.

inveigh

Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

keramas.github.io

lord_of_cereal

Java deserialization tool for creating encrypted and HMAC protected payloads.

mona

Corelan Repository for mona.py

mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

password-checker

Basic Password Strength Checker

powersccm

PowerSCCM - PowerShell module to interact with SCCM deployments

pwnagotchiplayground

Some scripts for Pwnagotchi

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

reverseshellcheatsheet

Python script to generate reverse shells based on Pentestmonkey's reverse shell cheat sheet.

rpg_battle

Text-based RPG-style battle system

security

Stuff about it-security that might be good to know

serverless-top-10-project

OWASP Serverless Top 10

shellcodecarver

Python script to carve shellcode into the EAX register

slacker

Python script for pulling chat history for Slack channels using a stolen API token.

translation_payment_tracker