heildampf Goto Github PK

activereign

A Network Enumeration and Attack Toolset

airbase-ng-sslstrip-airstrip-

While documenting some MitM attacks I was looking into setting up a fake AP with BT5 and my good old loved ALFA . There's a whole bunch of scripts out there which do the job nicely, if you are ready to modify them here and there. In order for it to work, you need to run airmon-ng to start the card in monitor mode, run airbase-ng to run it in AP mode, run a DHCP server, set up routing, configure iptables for NAT and set up ip forwarding...that's all ;) Anyway, this works great, ... but great evil minds like to add layers of evilness upon evilness ;) So: why not add sslstrip to the mix and capture all those nice SSL pages which are redirected from normal HTTP? Not that hard: just add an extra iptables line to redirect HTTP traffic to SSLStrip and "Airstrip"is born. Note that this is just something that was cooked up in about an hour, so don't expect any robustness. Also: if it doesn't work out of the box: you are on your own. It works for me, with my particular setup but if you have any experience with BT/Linux, you should be able to make it work for you as well .

autosploit

Automated Mass Exploiter

chefkoch-api

A small API for pulling ingredients data from Chefkoch.de

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cia-hacking-tools

collection1-5-sqlite-importer-

A repo to import credentials from the Collection 1-5 Database Breach

credsstealer

CredsStealer allows an attacker to craft a highly convincing credentials prompt using Windows PromptForCredential, validate it against the DC or localmachine and in turn leak it via an HTTP request.

darkarmy

DARKARMY Hacking Tools Pack - A Penetration Testing Framework .

data-scanner

(Sensitive) data scanner

datencockpit

Datencockpit.at zur Erfüllung der Dokumentationspflichten laut DSGVO (Fulfilling GDPR requrements with a data cockpit)

datenschutz-checkliste

[WIP] Open Source Checkliste für Webdesigner und -entwickler, um datenschutz-relevante Aufgaben nach aktuell geltendem Recht umzusetzen.

dmarc-and-spf-bulk-scanner

Basic DMARC And SPF scanner to scan a list of subdomains/domains which are missing DMARC And SPF records. You can take a list of subdomains/domains and it will do its job showing you all the results for SPF and DMARC.

domain-scan

A lightweight pipeline, locally or in Lambda, for scanning things like HTTPS, third party service use, and web accessibility.

dsgvo-liste

Informationen und Ressourcen zur Datenschutz-Grundverordnung

dsgvo-video-embed

Zwei-Klick-Lösung zur DSGVO-konformen Einbettung von YouTube- und Vimeo-Videos

dsgvoanalyser

A simple visualization for requested data from Whatsapp, Google or Snap.

eea.docker.webbkoll

email-extractor

The main functionality is to extract all the emails from one or several URLs - La funcionalidad principal es extraer todos los correos electrónicos de una o varias Url

finalrecon

The Last Web Recon Tool You'll Need

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

friendless

A post-Cambridge Analytica, GDPR-compliant Facebook page scraper.

gdpr-checklist

The GDPR Checklist

gdpr-cli

A command line tool for checking your website for GDPR compliance.

gdpr-tracker

A crowdsourced directory tracking the GDPR compliance of cloud services and subprocessors

gfcheck

a tiny plugin for better data protection

globaleaks

GlobaLeaks is free, open source software enabling anyone to easily set up and maintain a secure whistleblowing platform.

google-fonts-checker

a simple api to search for known trackers for a specific website.

google-webfonts-helper

A Hassle-Free Way to Self-Host Google Fonts. Get eot, ttf, svg, woff and woff2 files + CSS snippets

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email