spiderlabs Goto Github PK

ackack

A program to monitor network traffic and detect unauthorized sessions.

advisories-poc

airachnid-burp-extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

batchydns

A reconnaissance tool that can quickly discover hostnames from a list of IP addresses.

beef_injection_framework

Inject beef hooks into HTTP traffic and track hooked systems from cmdline

blackbytedecryptor

bnat-suite

"Broken NAT" - A suite of tools focused on detecting/exploiting/fixing publicly available BNAT scenerios

burplay

Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.

burpnotesextension

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

cerealbox

Arduino-based network monitor

cribdrag

cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys

cryptomg

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

cve_server

Simple REST-style web service for the CVE searching

deblaze

Performs method enumeration and interrogation against flash remoting end points.

deface

A Java Server Faces (JSF) testing tool for decoding view state and creating view state attack vectors.

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

ettercap

Ettercap Project http://ettercap.sourceforge.net

firework

Firework is a proof of concept tool to interact with Microsoft Workplaces creating valid files required for the provisioning process.

grandoreiro-decryptor

Grandoreiro decryptor and DGA generator (26.May.2022)

groupenum

hosthunter

HostHunter a recon tool for discovering hostnames using OSINT techniques.

ikeforce

iocs-idps

This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)

jboss-autopwn

A JBoss script for obtaining remote shell access

jorogumo

Red Team Stored XSS SVG phishing-companion tool with the ability to serve a malicious login page, or clone an html page and implement custom javascript. It then generates a relevant SVG.

json_crypto_helper

keystone

This repository contains the scripts released under the "Keystone Rocks" series of the SpiderLabs blog

korelogic-rules

Updated version of the 2010 KoreLogic password cracking rules for John the Ripper

malware-analysis

A repository of tools and scripts related to malware analysis

masher

multiple password 'asher using Python’s hashlib