Tools

specterops/skills

Reusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…

samsayen/jqueryingu

Valid JQuery that profiles the system and returns info to the server in a fake analytics GET request

romain-deperne/cve-2026-33715

Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php — CVSS 7.5

azhariramadhan/cve-2026-39047

Printer exploitation framework for security testing via raw port 9100, featuring PCL payload delivery, DoS bombing, C2 QR codes, phishing QR codes,…

webbreacher/whatsmyname

Community-maintained dataset of 700+ websites for finding accounts by username — powers OSINT and digital footprint tools.

qyvora/qyvora-toha3ee

Go-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…

montysecurity/infrahunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

logisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

nccgroup/outlookleaktest

The Outlook HTML Leak Test Project

bishopfox/spfmap

A program to map out SPF and DKIM records for a large number of domains

h3x0v3rl0rd/smtp_userenum

Python script for enumerating SMTP users by leveraging VRFY and EXPN commands to identify valid email accounts on a target mail server.

bishopfox/exchange-scanner

Identify public-facing Microsoft Exchange servers and determine their software versions

hackinglz/svg_phishing_tools

SVG Analysis and generation tools for commonly seen SVG attachment phishing

agampreet-singh/redroot

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

otterhacker/m365pwned

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

chrisjohnriley/scythe

scythe: account enumerator

ilektrojohn/creepy-plugins

Plugins for cree.py

d4vinci/insta-crawler

A python script designed to generate a random instagram pictures ids and try it