A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

Automating Juicy Potato Local Privilege Escalation CMD exploit for penetration testers.

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…

Generates millions of keyword-based password mutations in seconds.

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Mimikatz implementation in pure Python