Tony Al Khoriaty's Projects
Android Remote Administration Tool
AhMyth is an popular open source android rat. But the official AhMyth contains many bugs. For an example, you can't fetch victim's files from the remote server using official AhMyth. So that we have modified the rat and remove all bugs and also added some extra features.
📱 Andriller - is software utility with a collection of forensic tools for smartphones. It performs read-only, forensically sound, non-destructive acquisition from Android devices.
HTTP parameter discovery suite.
A Tensorflow model for text recognition (CNN + seq2seq with visual attention) available as a Python package and compatible with Google Cloud ML Engine.
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.
A curated list of CTF frameworks, libraries, resources and softwares
Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)
Version 8 and above. Browser extension source code for Firefox, Chrome, and other Chromium-based browsers
List of Google Dorks for sites that have responsible disclosure program / bug bounty program
An entry level resource to learning bug bounty.
Open source education content for the researcher community
CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.
A default credential scanner.
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
Another web vulnerabilities scanner, this extension works on Chrome and Opera
Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF
Cheat Sheets
.NET debugger and assembly editor
Este troyano para Android es uno de los más completos. Con él vamos a poder tener acceso a remoto a todo el dispositivo infectado, desde la agenda, las llamadas y los SMS hasta el micrófono y las cámaras del smartphone. Todo.
E-Mail Header Analyzer
A cli script to analyze an E-Mail in the EML format for viewing the header, extracting attachments, etc.
An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
Windows Exploits
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
a tool to get Facebook data, and some Facebook bots, and extra tools found on Facebook Toolkit ++.
Free Security and Hacking eBooks
Ghost Framework is an Android post-exploitation framework that exploits the Android Debug Bridge to remotely access an Android device.