OFRAK : Unpack, Modify, And Repack Binaries
OFRAK (Open Firmware Reverse Analysis Konsole) is a binary analysis and modification platform. OFRAK combines the ability to:
Identify and Unpack many binary formats
Analyze unpacked...
Autobloody : Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound
Autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound.
Description
This tool automates the AD privesc between two AD objects,...
S3Crets Scanner : Hunting For Secrets Uploaded To Public S3 Buckets
S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets.
Can...
Pen Andro – An Automated Android Penetration Testing Tool
Introduction
Pen-Andro Script will automate the process of installing all necessary tools & tasks for Android Pentesting i.e Moving Burpsuite Certificate,Installing Adb frida server, APKs...
ZPhisher : Automated Phishing Tool For Pentesters
Zphisher is an upgraded form of Shellphish. The main source code is from Shellphish. But I have not fully copied it. I have upgraded...
The Hackingsage/Hacktronian – A Pentesting Tool for Linux and Android
Hacktronian is a free and open-source tool used for information gathering. It is used for performing numerous data hacking and penetration testing on websites...
Juicy Potato : A Sugared Version Of RottenPotatoNG, With A Bit Of Juice
Juicy Potato is a sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT...
NetLlix : Tool To Emulate & Test Exfiltration Of Data Over Different Network Protocols
NetLlix is a project created with an aim to emulate and test exfiltration of data over different network protocols. The emulation is performed w/o...
Squarephish : OAuth Device Code Authentication Flow & QR codes
SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes.
See PhishInSuits for more details...
HTTPLoot : An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages
HTTPLoot is a automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.
Usage
To...