mjet
mogwaisec/mjetMogwai Java Management Extensions (JMX) Exploitation Toolkit
exploitationexploit-frameworksmisconfiguration+3
mogwaisec/mjetMogwai Java Management Extensions (JMX) Exploitation Toolkit
nccgroup/bleboyBLEBoy is a training tool to teach users about BLE security by providing a single BLE peripheral that can be used to experiment with each BLE pairing…
heroku/terrierTerrier is a Image and Container analysis tool that can be used to scan Images and Containers to identify and verify the presence of specific files…
whiteoaksecurity/goawsconsolesprayTool to spray AWS Console IAM Logins
samhaxr/assameeAES-256 file and directory encryption tool with automatic upload to Anonfiles cloud storage, requiring a download ID for decryption and retrieval.
hillu/local-log4j-vuln-scanner[Moved to Codeberg] Simple local scanner for vulnerable log4j instances
coldfusion39/vertxploitExploiting HID VertX and EDGE access control systems
utkusen/socialhuntercrawls the website and finds broken social media links that can be hijacked
shellster/dcsyncmonitorMonitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
impact-i/x8-burpHidden parameters discovery suite
01rabbit/pakuriSemi-automated penetration testing framework with TUI, integrating Nmap, OpenVAS, Metasploit, and Faraday for streamlined information gathering,…
grahamhelton/imdspoofIMDSPOOF is a cyber deception tool that spoofs the AWS IMDS service to return HoneyTokens that can be alerted on.
cyberark/evasorA tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies
mr-un1k0d3r/edrsRed team tool for EDR evasion: dynamically resolves syscall IDs, patches ntdll stubs, unhooks IAT hooks, and lists hooked APIs from major EDR vendors.
anshumanbh/tko-subsA tool that can help detect and takeover subdomains with dead DNS records
pegasuslab/ghosttunnelCovert backdoor transmission tool using 802.11 probe request and beacon frames for isolated network attacks. Delivers payloads via HID devices,…
bert-janp/entratraceDefensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…