inosec2 Goto Github PK

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

inlinewhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

inosec2.github.io

inql

InQL - A Burp Extension for GraphQL Security Testing

installerfiletakeover

integrated-security-testing-environment

Integrated Security Testing Environment for Web Applications as Burp Extension

interactsh

An OOB interaction gathering server and client library

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

inventory

Asset inventory of over 800 public bug bounty programs.

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

invoke-aclpwn

invoke-bof

Load any Beacon Object File using Powershell!

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

invoke-thehash

PowerShell Pass The Hash Utils

iodine

Official git repo for iodine dns tunnel

ipfuscator

IPFuscator - A tool to automatically generate alternative IP representations

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

janus

Janus is a pre-build event that performs string obfuscation during compile time. This project is based off the CIA's Marble Framework

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jayfinder

Find DLLs with RWX section

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsfscan.sh

Automation for javascript recon in bug bounty.

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

jsshell

JSshell - JavaScript reverse/remote shell

jupyterpen

A Repository dedicated to creating modular and automated penetration testing frameworks utilizing Jupyter Notebooks

jwt-lab

Lab for learning JWT.

jwtweak

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

kdstab

BOF combination of KillDefender and Backstab