blacklanternsecurity Goto Github PK

amsi-killer

Lifetime AMSI bypass

asm_bbot_training

badsecrets

A library for detecting known secrets across many web frameworks

bbot

A recursive internet scanner for hackers.

bbot-1

OSINT automation for hackers.

bbot-module-playground

A proving grounds for young and aspiring BBOT modules

bbot-vivagraphjs

Visualize BBOT scans in realtime with VivaGraphJS

bls-bible

BLS-Bible is a knowledge-base application that houses a collection of guides and write-ups that BLS uses for our various operations.

blspyutils

Repo for small functions used often in Python.

blue-resources

A collection of helpful blue team resources

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheekyblinder

Enumerating and removing kernel callbacks using signed vulnerable drivers

cisco-7937g-pocs

Proofs of concept for three vulnerabilities affecting the Cisco 7937G Conference Station

cloudcheck

Check whether an IP address or hostname belongs to popular cloud providers

convert-invoke-kerberoast

Converts the output from Invoke-Kerberoast into hashcat format.

crackmapexec

A swiss army knife for pentesting networks

credshed

credshed - a scalable database for credential leaks. Written in Python, it can easily ingest poorly-formatted files or entire directories into a searchable database. MongoDB is used in the backend.

credshed-api

REST API for Credshed

credshed-gui

Vue.js frontend for credshed

credshed-gui-flask

Web front-end for credshed written in Flask (Python 3)

cve-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

dp_cryptomg

Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.

enter_the_matrix

ETM enables the creation of detailed attack graphs and figures while calculating the risk associated with your attack narratives. ETM was built keeping NIST recommendations on threat matrices in mind. Features an API to interact on your data to act as a living database of your executed threat models.

evilginx-setup-script

A quick-and-easy bash script installing and launching EvilGinx2, a phishing reverse-proxy

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

filter-qualys-csv

Cut down on the size of Qualys' scan results by filtering based on severity, keywords, etc. Written in Python.

fulcrom

A web shell for pivoting and lateral movement

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.