w3bt00lz Goto Github PK

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

jsparser

knock

Knock Subdomain Scan

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

lazys3

linkfinder

A python script that finds endpoints in JavaScript files

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

meg

Fetch many paths for many hosts - without killing the hosts

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

meterpreter-scripts

Meterpreter Scripts that I'm working on

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

mimikatz

A little tool to play with Windows security

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nishang

Nishang - PowerShell for penetration testing and offensive security.

nodegoat

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

nosqlmap

Automated Mongo database and NoSQL web application exploitation tool

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

password_plus_one

initial push

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pgx

PostgreSQL driver and toolkit for Go

phishing-frenzy

Ruby on Rails Phishing Framework

posh-ssh

PowerShell Module for automating tasks on remote systems using SSH

powershell_popup

PowerShell_Popup

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

praedasploit

recon.sh

A toolset to track and organize output of reconnaissance tools

recon_profile

reddit_xss

Reddit XSS Gather Tool