leomatias Goto Github PK

dnscat2

dnsexfiltrator

Data exfiltration over DNS request covert channel

dnslivery

Easy files and payloads delivery over DNS

dnsmonster

Passive DNS Capture/Monitoring Framework

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

donpapi

Dumping DPAPI credz remotely

dora

Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found

dpat

Domain Password Audit Tool for Pentesters

dr0p1t-framework

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

droidjack

Este troyano para Android es uno de los más completos. Con él vamos a poder tener acceso a remoto a todo el dispositivo infectado, desde la agenda, las llamadas y los SMS hasta el micrófono y las cámaras del smartphone. Todo.

drupwn

Drupal enumeration & exploitation tool

dsinternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

dumpert

LSASS memory dumper using direct system calls and API unhooking.

dvws

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node

electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

elk-detection-lab

An ELK environment containing interesting security datasets.

emocheck

Emotet detection tool for Windows OS

empire

Empire is a PowerShell and Python post-exploitation agent.

ese-analyst

This is a set of tools for doing forensics analysis on Microsoft ESE databases.

evil-droid

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

evilginx2-phishlets

Evilginx2 Phishlets version (0.2.3) Only For Testing/Learning Purposes

examples

Home for Elasticsearch examples available to everyone. It's a great way to get started.

excalibur

Excalibur is an Eternalblue exploit payload based "Powershell" for the Bashbunny project.

exchange-ad-privesc

Exchange privilege escalations to Active Directory

expcamera

Exploit Netwave and GoAhead IP Camera

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

farmer

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.