Stars
A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
Modular & Open-Source Coverage-Guided Web Application Fuzzer for PHP
A realistic simulator of Active Directory domains
A Ghidra script to save small patches back to the executable file
Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷
Small utility to chunk up a large BloodHound JSON file into smaller files for importing.
Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.
MiniDumpWriteDump behavior modification hook
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
Self-hosted passive subdomain continous monitoring tool.
Find domains and subdomains related to a given domain
onedrive user enumeration - pentest tool to enumerate valid o365 users
A collection of Azure AD/Entra tools for offensive and defensive security purposes
A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode