mgcfish Goto Github PK

certificate-inventory

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

certificate-inventory-powershell

Scanner which is capable of scanning multiple hosts or multiple subnets on an SSL port and output a CSV file with the certificate details.

certstreammonitor

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

chameleon

Chameleon: A tool for evading Proxy categorisation

changeme

A default credential scanner.

cheatsheet-god

Penetration Testing / OSCP Biggest Reference Bank

cheatsheets

Cheat sheets for various projects.

cheatsheets-1

Penetration Testing/Security Cheatsheets

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

checklists

Pentesting checklists for various engagements

chromebugbountyhelper

Chrome extension to detect interesting things while browsing website for Bug Bounty (or just for fun)

cintruder

Captcha Intruder (CIntruder) is an automatic pentesting tool to bypass captchas.

cipherscan

A very simple way to find out which SSL ciphersuites are supported by a target.

ciphr

a CLI tool for performing and composing encoding, decoding, encryption, decryption, hashing, and other various cryptographic operations on streams of data from the command line; mostly intended for infosec uses.

cisco-snmp-slap

ciscobruter

Brute-force Cisco SSL VPN

ciscorv320dump

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

ciscovpnbrutewithpsk

This script can be used to dictionary/brute force Cisco IPSEC VPN users after an Aggressive Mode Handshake has been cracked.

cjexploiter

Drag and Drop ClickJacking exploit development assistance tool.

cleveridge-subdomain-scanner

The Cleveridge Subdomain Scanner finds subdomains of a given domain.

clickbandit

A JavaScript clickjacking PoC generator

client-side-attacks-lab

Lab Environment for learning client-side attacks such as CSRF, Clickjacking, XSS, and CORS abuse.

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

cloudgoat

Rhino Security Labs' "Vulnerable by Design" AWS infrastructure setup tool

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

clusterd

application server attack toolkit

cmsfuzz

cmsmap

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

cobalt_strike_extension_kit

Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.