Information Gathering

welchbj/bscan

an asynchronous target enumeration tool

garrettfoster13/aced

Parses and resolves a single Active Directory principal's DACL to identify inbound access privileges, resolve SIDs, and log LDAP attributes for…

anof-cyber/paraforge

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

sadprocessor/cypherdog

PoSh BloodHound Dog Whisperer

jimaek/geolocation-tool

Geo locate any IP to a physical location using latency

n4xh4ck5/cmssc4n

Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop

woj-ciech/socialpath

OSINT tool to track and correlate user identities across multiple social media platforms using username search, API integrations, and deanonymization…

a-d-team/grafanaexp

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt…

0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

psc4re/nse-scripts

NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473

viliuskraujutis/androidbroadcastsmonitor

A tool to subscribe to receive all standard Android broadcasts on your Android device.

voidz0r/cve-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

henshin/filebuster

An extremely fast and flexible web fuzzer

professionallyevil/harpoon

A collection of scripts, and tips and tricks for hacking k8s clusters and containers.

jtibaquira/nsearch

minimal script to help find script into the nse database

attackercan/teamviewer-dumper

Dump TeamViewer ID and password from memory. Works much better than other tools.