Find, verify, and analyze leaked credentials

The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Open-Source Phishing Toolkit

Directory/File, DNS and VHost busting tool written in Go

Interactive cli tool for HTTP inspection

A terminal UI for tshark, inspired by Wireshark

Reconnaissance tool for GitHub organizations

A Tool for Domain Flyovers

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Real-time HTTP Intrusion Detection

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

A tool to abuse Exchange services

XRay is a tool for recon, mapping and OSINT gathering from public networks.

A utility to examine and validate certificates in a variety of formats

A Powerful Subdomain Takeover Tool

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

🕳 godoh - A DNS-over-HTTPS C2

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots

Generate OpenConnect CSD files to bypass Cisco AnyConnect hostscan requirements

Run a script on multiple SSH servers

🚨an osquery powered, almost cross platform HIDS