domain_generation_algorithms

Some results of my DGA reversing efforts

domxssfinder

Find sources and sinks in js code that could lead to DOM XSS 🔎💧🚰

dploot

DPAPI looting remotely in Python

dragunov

Dragunov SVD Dns ZoneTransfer

drakus

Drakus allows you to monitor the artifacts and domains used in a Red Team exercise to see if they have been uploaded to certain online malware analysis services.

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

dsss

Damn Small SQLi Scanner

dumpert

LSASS memory dumper using direct system calls and API unhooking.

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

dvhma

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

dvwa

Damn Vulnerable Web Application (DVWA)

easyvm

Yet another virtual machine application based on the Virtualization framework

edd

Enumerate Domain Data

edrs

edrsandblast

edxposed

Elder driver Xposed Framework.

eggshell-rat

iOS & MacOS Remote Administrator Tools (RAT) | The404Hacking

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

ekfiddle

Your Swiss Army knife to analyze malicious web traffic based on the popular Fiddler web debugger.

elastichoney

A Simple Elasticsearch Honeypot

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

email-sender

A service to send email messages

emba

EMBA - The firmware security analyzer

enablewindowslogsettings

Documentation and scripts to properly enable Windows event logs.

enumerate-iam

Enumerate the permissions associated with AWS credential set

enumerator

enumerepo

List all public repositories for (valid) GitHub usernames

envoy

Cloud-native high-performance edge/middle/service proxy

erebusgate

ErebusGate for Nim Bypass AV/EDR