Stars
An open source tool to activate and reset trial of Internet Download Manager
Find domains and subdomains related to a given domain
Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email
E-mails, subdomains and names Harvester - OSINT
Run PowerShell with rundll32. Bypass software restrictions.
Dump Azure AD Connect credentials for Azure AD and Active Directory
Abusing impersonation privileges through the "Printer Bug"
SharpSploit is a .NET post-exploitation library written in C#
List DTDs and generate XXE payloads using those local DTDs.
This is a SMS And Call Bomber For Linux And Termux
🔥 Web-application firewalls (WAFs) from security standpoint.
SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Automatic SQL injection and database takeover tool
Covenant is a collaborative .NET C2 framework for red teamers.
Utility to enumerate users, groups and computers from a Windows domain through LDAP queries
DotDotPwn - The Directory Traversal Fuzzer
Directory/File, DNS and VHost busting tool written in Go
社会工程学密码生成器，是一个利用个人信息生成密码的工具
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
Bandit is a tool designed to find common security issues in Python code.
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
venom - C2 shellcode generator/compiler/handler