ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.
This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation leak. This database makes finding passwords faster and easier than ever before.
This write-up will provide detailed description on how to bypass Guided Access mode on Apple iPhones.
Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore, it is useful while performing red team or an internal infrastructure engagements.
Remote Administration Tool for Windows
This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.
XposedOrNot (XoN) tool is to search an aggregated repository of xposed passwords comprising of ~850 million real time passwords. Usage of such compromised passwords is detrimental to individual account security.
Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
DarkAgent Remote Administration Tool RAT by DragonHunter
Android RAT
The official Exploit Database repository
Fetch, install and search exploit archives from exploit sites.
Short snippets for pentesting.
A new kind of remote administration tool
Access to awesome blogs and tutorials related to information security field.
Opensource modular Remote Administration Tool
Python Decoders for Common Remote Access Trojans
Automatic SQL injection and database takeover tool
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
Linux distro for IDS, NSM, and Log Management
This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. Use it to copy SYSTEM, SECURITY and SAM hives and download them back to the attacker machines.
The Bug Hunters Methodology