Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

希望你知道这意味着什么。

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Subdomain enumeration tool with analysis features for discovered domains

Crack iOS Restriction Passcodes with Python

Spartacus DLL/COM Hijacking Toolkit

WSUSpect Proxy - a tool for MITM'ing insecure WSUS connections

ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

Site source for linuxtoy.org.

pGina fork: Open Source Windows Authentication

Automate NMAP Scans and Generate Custom Nessus Policies Automatically

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

Stealing passwords every time they change

一款小程序安全评估工具

Log4Shell scanner for Burp Suite

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

Scan for open S3 buckets and dump

Control WS2812B RGB LEDs with an ESP8266 over WiFi!

MS17-010 Windows SMB RCE -- Full subnet scanner

A tool for identifying misconfigured CloudFront domains

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

An example reference design for a proposed BOF PE