open-sec Goto Github PK

drek

A static-code-analysis tool that can be used to perform security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.

droidsniff

DroidSniff is an Android app for Security analysis in wireless networks and capturing facebook, twitter, linkedin and other accounts.

dscompromised

dvsa

a Damn Vulnerable Serverless Application

dvxte

Damn Vulnerable Xebia Training Environment

easypeasy

Find accounts using common and default passwords in Active Directory.

eko15

Material utilizado en el Workshop de Red Teaming en el 2019 para la edicion 15 de la Eko

ekoparty2015

Material utilizado en los Workshops de Ekoparty 2015

ekoparty2017

Presentaciones-Videos-Archivos Ekoparty 2017

empire

Empire is a PowerShell and Python post-exploitation agent.

empyre

A post-exploitation OS X/Linux agent written in Python 2.7

enteletaor

Message Queue & Broker Injection tool

eqgrp

Mirror

evilginx

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilgrade

evilosx

A pure python, post-exploitation, remote administration tool (RAT) for macOS / OS X.

excel4-dcom

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

exploit-database

The official Exploit Database repository

exploit-database-bin-sploits

Exploit Database binary exploits located in the /sploits directory

facecat

Covert Channel PoC using FaceBook

firefox-security-toolkit

A tool that transforms Firefox browsers into a penetration testing suite

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

forensics-scripts

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

gathercontacts

A Burp Suite Extension to pull Employee Names from Google and Bing LinkedIn Search Results

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

generator-burp-extension

Everything you need about Burp Extension Generation

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

gitleaks

Audit git repos for secrets 🔑