gomsec Goto Github PK

aptnotes

Various public documents, whitepapers and articles about APT campaigns

base

Default

brutescrape

A web scraper for generating password files based on plain text found

bsidescharm2016

cisco-asa-api

Python Cisco ASA API

cmsmap

cobaltstrike-aggressor-scripts-collection

Collection of tested Cobaltstrike aggressor scripts.

cve-2020-1472

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

easy-p

PowerShell Helper Tool

empire

Empire is a pure PowerShell post-exploitation agent.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

funwithamsi

A repo to hold any bypasses I work on/study/whatever

gitrob

Reconnaissance tool for GitHub organizations

httpscreenshot

icmpshock

A scanning tool for the ShellShock bash vulnerability

malwaremultiscan

Self-hosted VirusTotal / MetaDefender wannabe with API, demo UI and Scanners running in Docker.

markdown-here

Google Chrome, Firefox, and Thunderbird extension that lets you write email in Markdown and render it before sending.

nishang

Nishang - PowerShell for penetration testing and offensive security.

nosqlmap

Automated Mongo database and NoSQL web application exploitation tool

password_plus_one

initial push

powershell_popup

PowerShell_Popup

praedasploit

pysecdump

Python-based tool to dump security information from Windows systems

red-team-scripts

A collection of Red Team focused tools, scripts, and notes

reddit_xss

Reddit XSS Gather Tool

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

smbexec

sqlmap

Automatic SQL injection and database takeover tool