leomatias Goto Github PK

findomain

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

firebasescanner

The scripts helps security analsts to identify misconfigured firebase instances.

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

flan

A pretty sweet vulnerability scanner

flare-vm

flash-xdomain-xploit

ActionScript Proof of Concept to perform cross-domain reads

forbidden

Bypass 4xx HTTP response status codes. Based on PycURL.

fridump

A universal memory dumper using Frida

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzz.txt

Potentially dangerous files

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

generic-university

Vulnerable API

genymotion_arm_translation

👾👾 Genymotion_ARM_Translation Please enjoy！

getvulnerablegpo

PowerShell script to find 'vulnerable' security-related GPOs that should be hardended

gf

A wrapper around grep, to help you grep for things

ghosttunnel

GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.

gmapsapiscanner

gmsadumper

Lists who can read any gMSA password blobs and parses them if the current user has access.

gmsapasswordreader

go365

An Office365 User Attack Tool

goad

game of active directory

godgenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

gofetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

golden-guide-for-pentesting

Golden Guide

goodhound

Uses Sharphound, Bloodhound and Neo4j to produce an actionable list of attack paths for targeted remediation.

gophish

Open-Source Phishing Toolkit

gorsair

Gorsair gives root access on remote docker containers that expose their APIs

gotestwaf

An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses