hlein Goto Github PK

aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

crackmapexec

A swiss army knife for pentesting networks

distro-backdoor-scanner

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

firejail

Linux namespaces and seccomp-bpf sandbox

fwknop

Single Packet Authorization > Port Knocking

gentoo

The Gentoo ebuild repository mirror

gentoo-ami-builder

Gentoo AMI Builder - Amazon Image builder for Gentoo Linux

gtfoargs.github.io

GTFOArgs is a curated list of programs and their associated arguments that can be exploited to gain privileged access or execute arbitrary commands, using argument injection.

hashcat

World's fastest and most advanced password recovery utility

impdump

This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.

inql

InQL - A Burp Extension for GraphQL Security Testing

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

kernel-hardening-checker

A tool for checking the security hardening options of the Linux kernel

kubesec

Security risk analysis for Kubernetes resources

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

powerdns

PowerDNS: Powershell DNS Delivery

recover-broken-vdb

reportable

A plugin that makes basic reporting for rails models dead simple. Formally known as reports_as_sparkline.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

seagull

Seagull is a free, Open Source (GPL) multi-protocol traffic generator test tool. Forked from upstream on Sourceforge. Patched to build on recent versions of Ubuntu, CentOS, and openSUSE.

sslscan

SSLScan tests SSL/TLS enabled services to discover supported cipher suites

vim-gnupg

This script implements transparent editing of gpg encrypted files. The filename must have a ".gpg", ".pgp" or ".asc" suffix. When opening such a file the content is decrypted, when opening a new file the script will ask for the recipients of the encrypted file. The file content will be encrypted to all recipients before it is written. The script turns off viminfo, swapfile, and undofile to increase security.