pentagramz Goto Github PK

droidstatx

Python tool that generates an Xmind map with all the information gathered and any evidence of possible

dumpdecrypted

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

dvba

Damn Vulnerable Blockchain Application [WIP]

dvca

Damn Vulnerable Cloud Application

dvcs-pillage

Pillage web accessible GIT, HG and BZR repositories

dvfaas-damn-vulnerable-functions-as-a-service

Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities

dvid

Damn Vulnerable IoT Device

dvja

Damn Vulnerable Java (EE) Application

dvsa

a Damn Vulnerable Serverless Application

dvws

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node

dvws-node

Damn Vulnerable Web Service is a vulnerable web service/API/application that can be used to learn webservices/API vulnerabilities.

electriceye

Continuously monitor your AWS services for configurations that can lead to degradation of confidentiality, integrity or availability. All results will be sent to Security Hub for further aggregation and analysis.

electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

emba

emba - An analyzer for Linux-based firmware of embedded devices.

encrypted-core-data

v2.0 - iOS Core Data encrypted SQLite store using SQLCipher

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exploit_development_osce

All exploits written during OSCE preparation

exploitdev

fios

firevu

FireVu is an Intentionally vulnerable Android application developed for Android open source security.

frida

Clone this repo to build Frida

frida-cycript

Cycript fork powered by Frida.

frida-ios-dump

pull decrypted ipa from jailbreak device

frisky

Instruments to assist in binary application reversing and augmentation, geared towards walled gardens like iOS and macOS

gcp-iam-privilege-escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

goddi

goddi (go dump domain info) dumps Active Directory domain information

grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

hack400tool

hack400tool

hackingthe.cloud

Content for hackingthe.cloud

hackthebox-writeups

Most of my write-ups for completed Hackthebox.eu machines.