Custom Query list for the Bloodhound GUI based off my cheatsheet

Python based BloodHound data importer

A collection of files for adding and leveraging custom properties in BloodHound.

Simple script to extract useful informations from the combo BloodHound + Neo4j

A Python based ingestor for BloodHound

BloodyAD is an Active Directory Privilege Escalation Framework

A Azure Exploitation Toolkit for Red Team & Pentesters

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file for…

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

Beacon Object Files for roasting Active Directory

Various Cobalt Strike BOFs

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

BoobSnail allows generating Excel 4.0 XLM macro. Its purpose is to support the RedTeam and BlueTeam in XLM macro generation.

Tool to generate smart and powerful wordlists

BOR - Break On Request, is a burp extension that provides a custom context menu for marking requests to be stopped by the interceptor with only one click!

DNS Server to identify DNS Resolution in Payloads (WIP)

A script for monitoring bug bounty programs

A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it using signatures

Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)

Framework to automate Bug Bounty Reconnaissance

Poor (rich?) man's bug bounty pipeline

bountytpl – template generator cli. By using a template similar to the ones for Template Generator (https://github.com/fransr/template-generator) you can combine it with a JSON to produce a proper …

A tool for parsing breached passwords

Find broken links, missing images, etc within your HTML.

Some files for bruteforcing certain things.

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.