A collection of tools for every PENTEST engagement

PowerShell Obfuscator

ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

Production-ready fullstack but simple mail server (SMTP, IMAP, LDAP, Antispam, Antivirus, etc.) running inside a container.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Linux driver for Linksys USB3GIGV1 (Realtek RTL8153)

A tool to abuse Exchange services

Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing

Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow

Fast and easy create backdoor office exploitation using module metasploit packet , Microsoft Office , Open Office , Macro attack , Buffer Overflow

SQL Vulnerability Scanner

A DNS meta-query spider that enumerates DNS records, and subdomains.

Knock Subdomain Scan

Find, verify, and analyze leaked credentials

My collection of nmap NSE scripts

Web path scanner

Platform Security Assessment Framework

A reviewed list of useful PHP static analysis tools

Honeypot deployment made easy

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa…

Automatically brute force all services running on a target.

Add headers to all Burp requests to bypass some WAF products

Automated All-in-One OS Command Injection Exploitation Tool

A fast and stealthy credential harvester

Social engineering tool for human hacking

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

Make Windows LNK file with python (pylnk)

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.

A tool to dump the login password from the current linux user