Tools

aquasecurity/vuln-list-redhat

Red Hat security advisories

moloch--/cve-2016-1764

Extraction of iMessage Data via XSS

abstractclass/cloudprivs

Determine privileges from cloud credentials via brute-force testing.

p0dalirius/cve-2021-43008-adminerread

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

649/apache-struts-shodan-exploit

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

icryo/rfcpwn

An enumeration and exploitation toolkit using RFC calls to SAP

sap8899/reportly

AzureAD/EntraID user activity reporter for blue teams. Input a suspicious user and time frame to receive a detailed report of user info, actions, and…

antman1p/gdir-thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

el3ct71k/autobrowser

AutoBrowser Screenshot

tegal1337/mapsdumper

Dump place details from Google Maps like phone,email,website,and reviews

malwaretech/cve-2024-47176-scanner

A simple scanner for identifying vulnerable cups-browsed instances on your network

trinitor/netstat2neo4j

create cypher create statements for neo4j out of netstat files from multiple machines

l4rm4nd/pyadrecon

Python3 implementation of ADRecon with support for NTLM and Kerberos authentication querying LDAP. Generates individual CSV files and a single XSLX +…

viperbluff/firebase-extractor

A tool written in python for scraping firebase data

bishopfox/cve-2026-34908-check

Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908

montysecurity/infrahunter

Actively hunt for attacker infrastructure by filtering Shodan results with URLScan data.

jasondrawdy/forerunner

Fast and extensible network scanning library featuring multithreading, ping probing, and scan fetchers.

cyberisltd/egresser

Client/server scripts designed to test outbound (egress) firewall rules.