stahlz Goto Github PK

automas-prime

A OSINT framework focused on eumerating your external threat posture. By giving a single Autonomous Service number Automas prime will find potential problems with your companys security posture.

best-readme-template

An awesome README template to jumpstart your projects!

bluerover

A Blue Team Toolkit focused around Enterprise Defense and the concept of "Mise en place". This will be an attempt to automate alot of the collections needed for DFIR. With grabbing and parsing logs for with several format outputs, with the hopes of identifying nasty things in logs. Talking with EDR's, Virustotal, app.any.run, hybrid analysis, passivetotal, etc..Whatever i feel can be done. This will be as project, will take at least a years worth of development, so check back from time to time.

certstreamcatcher

Catching phishing by observing certificate transparency logs.

certwatcher

CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report of phishing sites based off your keywords and Top level Domains.

concordance

Term concordances for each course in the SANS DFIR curriculum. Used for automated index generation.

css3-github-buttons

Helps you easily create GitHub-style buttons and toolbars using links, buttons, and inputs.

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2019-19782

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

gtfobins-api

Api to get gtfobins infos

icloudbrutter

AppleID Bruteforce

jqshell

A weaponized version of CVE-2018-9206

pihole_dns-over-https

Script for setting up Dns-over-https

pimeyes-crack-userstyle

This "Crack" is simply a couple of css styles that improve your experience while using the face-recognition service "pimeyes.com"

react-svg-buttons

React configurable animated svg buttons

scrapedin

A tool to scrape LinkedIn without API restrictions for data reconnaissance

shodanwave

Shodanwave - Netwave IP Camera

spfm---soc-plugins-for-mattermost

SOC Plugins for mmpy_bot Mattermost bot

stahlz.github.io

twitteraccmon

Simple script that monitors for twitter accounts being deactivated and reactivated

upnp-exploiter

A Upnp exploitation tool.

voicemailautomator

A tool that serves as a Proof of Concept for the research I presented at DEF CON 26, "Compromising online accounts by cracking voicemail systems"

xsstrike

Most advanced XSS detection suite.