
ThunderDNS
This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.
Tools for extracting sensitive data from compromised systems without detection.

This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.

🔪 Dumper & ripper for Telegram bots by token. Golang version is also available!

Automating Host Exploitation with AI

Grafana Unauthorized arbitrary file reading vulnerability

GTRS - Google Translator Reverse Shell

An AI-powered Personal Identifiable Information (PII) scanner.

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

A Remote Administration Tool for Android devices

Weaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…

Exploitation Framework for ATtiny85 Based HID Attacks

Searches and parses plaintext passwords from public breach databases (ProxyNova COMB) by keyword (user/domain/password), with proxy support and…

Sinister is Windows/Linux Keylogger Generator which sends key-logs via email with other juicy target info

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as…

Surreptitiously exfiltrate data from the browser over DNS