d3ndr1t30x Goto Github PK

alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

aspxshell

A simple ASPX webshell that comes in handy for labs and CTFs

bastard

Exploit code for the Bastard machine on HackTheBox

blind_sql

Script that I used for the Portswigger lab: Lab: Blind SQL injection with conditional errors

bludithammer

Versions prior to and including 3.9.2 of the Bludit CMS are vulnerable to a bypass of the anti-brute force mechanism that is in place to block users that have attempted to incorrectly login 10 times or more. Based on a POC created by rastating in this blog post: https://rastating.github.io/bludit-brute-force-mitigation-bypass/

blueprint

Exploit code for Blueprint room on TryHackMe.

brainpan

A collection of scripts used in the Brainpan room on TryHackMe

changepasswd

A small powershell script I used on the Fuse HTB machine to change a user password for login

cleaner

A python script to take a list of URLs, remove duplicates and also allow for removal of unwanted domain names and their associated URLs. Cleaned results are outputted to a txt file.

client-server

Basic client and server written in C

dynamoscripts

A collection of scripts I use with Revit

emaildirectories

A wordlist that I feed to fuzzing tools to look for email addresses.

emailgen

A small python script to generate permutations of emails when fed a username list. List should be a txt file in <firstname> <lastname> with one name per line.

emailscraper

A simple email scraper. Feed it a list of urls as a txt file. One url per line, it will then search for email address on those websites and generate a new txt file with the results.

exploit-dev-cheat-sheet

Full credit to @ovid. Hosting here for personal use.

googlescraper

A web scraper coded in python. Allows the user to specify the amount of pages within a search query to be scrapped

gospider

Gospider - Fast web spider written in Go

hammer

Hammer DDos Script - Python 3

horus

A bash script written to read port numbers from an nmap scan file and initiate another scan enumerating the port numbers read from the output file.

instaspy

A small program to view Instagram accounts even if they are set to private.

interactsh

An OOB interaction gathering server and client library

k6

A modern load testing tool, using Go and JavaScript - https://k6.io

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

malware

macOS Malware Collection

modernvpn

A modern looking VPN app designed to link to VPN book's free servers

namegen

Thinking of names for sock puppet accounts can be a pain. I created this little script to take a txt file of first names, last names and generate an output file of random names.

nameslist

Wordlists of first names, middle names and last names. Useful for social engineers, red teamers and security professionals creating sock puppet accounts.

nounsandadjectives

Wordlists of random english nouns and adjectives

open_biz

osx-security-awesome

A collection of OSX and iOS security resources