pelican9091 Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

awesome-cloud-pentest

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-soc

A collection of sources of documentation, as well as field best practices, to build/run a SOC

azurehunter

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

blackeye

The ultimate phishing tool with 38 websites available!

blackeye-im

This project is now discontinued. Kindly use other working alternatives.

blackmanphishing

All in one Phishing tool

bugbountyscanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

command-injection-payload-list

🎯 Command Injection Payload List

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

deserter

A targeted DNS cache poisoner

discord-keylogger

Undetectable Keylogger that reports to Discord

docker-osx

Run Mac in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X!

dumpert

LSASS memory dumper using direct system calls and API unhooking.

elpscrk

An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)

emba

EMBA - The security analyzer for embedded device firmware.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

gomapenum

User enumeration and password bruteforce on Azure, ADFS, OWA, O365 and gather emails on Linkedin

grype

A vulnerability scanner for container images and filesystems

httpuploadexfil

A simple HTTP server for delivering and exfiltrating files/data during, for example, CTFs.

infosec-black-friday

All the deals for InfoSec related software/tools this Black Friday

invoke-adlabdeployer

Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.

invoke-spfdkimdmarc

PowerShell Script for checking SPF, DKIM and DMARC-record.

l4sh

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

log4j-scan-turbo

Multithreaded log4j vulnerability scanner using only bash! Tests all JNDI protocols, HTTP GET/POST, and 84 headers.

log4shell-iocs

A collection of intelligence about Log4Shell and its exploitation activity.

lordphish

The most complete phishing tool

lsarelayx

NTLM relaying for Windows made easy