Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can...
TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities....
This tool was implemented as part of our Brucon2021 conference talk and demonstrates the usage of cloned handles to Lsass...
The purpose of this module is to automate the deployment of an Active Directory lab for practicing internal penetration testing....
aDLL is a binary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities. The tool analyzes the image...
Vimana is a modular security framework designed to audit Python web applications.The base of the Vimana is composed of crawlers...
A tool to hunt/mine for Cobalt Strike beacons and "reduce" their beacon configuration for later indexing. Hunts can either be...
A multi-platform web hacking toolkit Docker image with Graphical User Interface (GUI) support.InstallationDockerPull the image from Docker Hub: docker pull...
PeTeReport (PenTest Report) is an open-source application Sample ReportsPDF SampleHTML SampleMD SampleCSV SampleDownload Petereport If you like the site, please...
Dockerized Android is a container-based framework that allows to execute and Android Emulator inside Docker and control it through a...
GC2 (Google Command and Control) is a Command and Control application that allows an attacker to execute commands on the...
This tool can Installation- git clone https://github.com/HightechSec/scarce-apache2- cd scarce-apache2- bash scarce.shor you can install in your system like this- git...
Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a...
HTTPUploadExfil is a (very) simple HTTP server written in Go that's useful for getting files (and other information) off a...
Dumping revelant information on compromised targets without AV detection DPAPI dumpingLots of credentials are protected by DPAPI. We aim at...
Download Clash If you like the site, please consider joining the telegram channel or supporting us on Patreon using the...
Bruteforcing on Hidden parameters to find SSRF vulnerability using GET and POST MethodsNOTELorsrf has been added to scant3r with useful...
This webapp is a browser and desktop password manager compatible with KeePass databases. It doesn't require any server or additional...
The purpose of this script is to automate the web enumeration process and search for exploits and vulns. Added Tools...
VECTR documentation can be found here: DocumentationFeature Breakdowns By ReleaseVECTR v7.1.1 Feature BreakdownTeamLEAD PROGRAMMERS:Carl VonderheidGalen FisherDaniel HongPROGRAMMERS:Andrew ScottPatrick HislopDan GuzekZara...
A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based...
OSINT Tool On Twitter And Instagram. Basic Usage:~/terra$ python3 terra.py <username of target> help : -j for saving results in a...
This repository hosts the documentation and issue tracker for all SysFlow projects.Quick referenceDocumentation:the SysFlow DocumentationWhere to get help:the SysFlow Community...
SubCrawl is a framework developed by However, if this UI is not sufficient for the subsequent evaluation of the data,...
