DDWPasteRecon
viralmaniar/ddwpastereconDDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team…
defensive-toolsosintreconnaissance+4
44
Tools for extracting sensitive data from compromised systems without detection.
viralmaniar/ddwpastereconDDWPasteRecon tool will help you identify code leak, sensitive files, plaintext passwords, password hashes. It also allow member of SOC & Blue Team…
ricardojoserf/covert-controlGoogle Drive, OneDrive and Youtube as covert-channels - Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram
icyguider/icmp-transfertoolsTransfer files to and from a Windows host via ICMP in restricted network environments.
joelgmsec/fakedatagenGenerates fully valid fake identities in Spanish format, including names, emails, bank details, and extended info, with optional zip compression and…
aniqfakhrul/sharpdnsexfilC# tool for exfiltrating files over DNS using XOR and asymmetric encryption, designed for red team engagements with restricted outbound connections.
joelgmsec/invoke-dnstealDNS data exfiltrator that sends payloads over UDP/TCP with configurable query size, random delay, and random domains to evade detection during red…
ctxis/snitchdnsDatabase Driven DNS Server with a Web UI
ghostpack/sharpdpapiSharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
an00byss/godehashedA golang tool that uses the dehashed.com API to search for compromised assets.
emtunc/slackpirateSlack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
skiller9090/luciferA Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build…
manturever/xworm-rat⭐️The famous XWorm RAT, version 2.1. Educational purposes only
syss-research/smbcrawlersmbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares
infobyte/emploleaksAn OSINT tool that helps detect members of a company with leaked credentials
maldev-academy/dumpbrowsersecretsExtracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from…
kurolabs/stegcloakHide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
davidbuchanan314/tweetable-polyglot-pngPack up to 3MB of data into a tweetable PNG polyglot file.
trycatchhcf/cloakifyCloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based…