fang0654 Goto Github PK

401_spraying

Simple python tool for password spraying against a 401 endpoint (basic/ntlm) when you know a lockout policy (ie will try X number of attempts, then sleep for Y minutes)

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

bh

boot2root

A boot2root I built to use as a demo

burp_vhost_proxy

A simple Burp Suite plugin to let you create links that will resolve to IP/host pairs.

crackmapexec

A swiss army knife for pentesting networks

datasploit

An #OSINT Framework to perform various recon techniques, aggregate all the raw data, and give data in multiple formats.

demiguise

HTA encryption tool for RedTeams

docker_tools

domlink

A tool to link a domain with registered organisation names and emails, to other domains.

fang0654.github.io

ffuf

Fast web fuzzer written in Go

fingertec-tool

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

hashview

A web front-end for password cracking and analytics

infosec_tools

Basic random one-off infosec tools I write

linkedint

LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation

lnkup

Generates malicious LNK file payloads for data exfiltration

log_list_generator

Simple tool to generate a wordlist of potential log file names

mouse_macro

Set of scripts for assigning macros to Razer buttons on Naga mice.

mqtt_rgb

nfspy

ID-spoofing NFS client

ntlm_challenger

Parse NTLM challenge messages over HTTP and SMB

ntlmscan

scan for NTLM directories

openrazer

An entirely open source driver and user-space daemon that allows you to manage your Razer peripherals on GNU/Linux

other_test

Test stuff

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pyhon

Control hOn devices with python

pymeta

Pymeta will search the web for files on a domain to download and extract metadata. This technique can be used to identify: domains, usernames, software/version numbers and naming conventions.