Name: Black Hat Ethical Hacking
Type: User
Company: @blackhatethicalhacking
Bio: Offensive Security: Information Security Solutions, Digital Forensics, Offensive Security Courses, Content Production, and Bug Bounty Hunting!
Twitter: secur1ty1samyth
Location: Global
Blog: https://www.blackhatethicalhacking.com
Black Hat Ethical Hacking's Projects
A library that scrapes Linkedin for user data
Linux kernel source tree
linWinPwn is a bash script that automates a number of Active Directory Enumeration and Vulnerability checks
Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
Extract credentials from lsass remotely
Lupoβ-βMalware IOC Extractor. Debugging module for Malware Analysis Automation
π΅οΈββοΈ Collect a dossier on a person by username from thousands of sites
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
Mailsploit is a collection of bugs in email clients that allow effective sender spoofing and code injection attacks. The spoofing is not detected by Mail Transfer Agents (MTA) aka email servers, therefore circumventing spoofing protection mechanisms such as DMARC (DKIM/SPF) or spam filters.
π Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.
Our mana toolkit for wifi rogue AP attacks and MitM - see hostapd-mana too
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
Fetch many paths for many hosts - without killing the hosts
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Intelligence tool but without API key
Search Google and download specific file types
Metasploit Framework
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
A tool for checking if MFA is enabled on multiple Microsoft Services
A little tool to play with Windows security
Framework for Man-In-The-Middle attacks
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews.
An automated e-mail OSINT tool
A rewritten version of the (Almost) Fully Undetectable EXE I originally made.
Finding all things on-prem Microsoft for password spraying and enumeration.
Get fresh Syscalls from a fresh ntdll.dll copy
Nishang - PowerShell for penetration testing and offensive security.