d3ndr1t30x Goto Github PK

nmap_port-extract

A bash script to read an nmap output file and then use awk and grep to dump out a list of port numbers for further scanning.

nounsandadjectives

Wordlists of random english nouns and adjectives

open_biz

osx-security-awesome

A collection of OSX and iOS security resources

output_clean

Quick and dirty script I threw together to clean the fuzzing output from ReconFTW so I could feed it to Aquatone easier.

pezor

Open-Source Shellcode & PE Packer

php5-reverse_shell

A simple reverse shell written in PHP5, used on the October machine as part of my OSCP prep

processkiller-byovd

BYOVD Technique Example using viragt64 driver

proc_hollow

A small POC written in Python demonstrating process hollowing.

proc_inject_remote-thread

pydf

I got sick of giving Adobe money. So I created a script to convert pdfs to word documents. There's also an option to copy all the text out into a separate txt file. Make sure to pip install pdf2docx and docx2txt first. Also make sure to specify the file extension each time you're prompted for a file output name.

pymerge

The most useless python program to ever exist! :D I made this because I hate powershell/cmd and wanted a way to merge txt files as part of my lead gen process.

pythonethicalhacking

recursive.py

A small script used to decode base64 recursively. I used this for the poison machine on hackthebox

run_gobuster

A bash script to take a list of domains/subdomains and run gobuster against them.

run_sqlmap

A bash script to loop through a list of URLs and run SQLmap against them.

rusty-dropper

Rusty dropper is a simple malware loader written in Rust.

shell-cpp

A simple reverse shell written in C++

shellcode_exec_methods

A list I made as a reminder to code different POCs for various methods of shellcode execution.

shellcode_loader

Shellcode loader written in Python.

shhhloader

Syscall Shellcode Loader (Work in Progress)

sitesuggestapp

sizzle

Used for initial access on the Sizzle machine on HackTheBox. You must generate your own unique .cer & .key files to make use of this.

splitter

Zoho CRM restricts Excel file uploads for leads to be 999 lines in length. This script will take huge lists and split them into smaller ones. The script also appends a timestamp and part number.

sqli

List of SQLi payloads. Full credit to 0day for putting this together. Posting here as I wanted a copy on my own Github

ssrf

SSRF Bypass List compiled by 0day. Hosting because I want a copy for myself. Copy and paste ALL headers into your request.

stresstest

A simple load testing tool written in python

stuxnet

Not my code! A copy of the Stuxnet dropper and rootkit. Full credit to Christian Roggia [email protected] & Amr Thabet [email protected] for providing the code. I am hosting it for study and preservation purposes

subdomain-nmap

A bash script that reads a list of subdomains outputted from Assetfinder/Subfinder and performs an nmap scan against all subdomains in the list.

uboat

HTTP Botnet