pentestit Goto Github PK

lfifreak

A unique automated LFi Exploiter with Bind/Reverse Shells

loaddll

Better version of RunDll with GUI. This program allows you to load DLLs on Windows. You can select how to load the DLL. By direct Entry Point call (DllMain) or if you want to call directly an exported function of the DLL.

mate7_tz_exploit

Huawei mate 7 TrustZone exploit

mathilda

Mathilda is a C++ class for distributing web requests to worker processes

metasploit-framework

Metasploit Framework

mime2vt

Unpack MIME attachments from a file and check them against virustotal.com

mosquito

XSS exploitation tool - access victims through HTTP proxy

mpc

Msfvenom Payload Creator (MPC)

noriben

Noriben - Portable, Simple, Malware Analysis Sandbox

p5-app-dubioushttp

use ambiguous HTTP to circumvent security systems

packerattacker

C++ application that uses memory and code hooks to detect packers

payloadmask

Payload list editor to use techniques to try bypass web application firewall

pfi

PFI (Port Forwarding Interceptor)

poshrat

PowerShell Reverse HTTPs Shell

powerforensics

PowerShell - Live disk forensics platform

prometheus

Prometheus Firewall Analyzer

pupy

Pupy is a remote administration tool with an embeded Python interpreter, allowing its modules to load python packages from memory and transparently access remote python objects. The payload is a reflective DLL and leaves no trace on disk

pyersinia

Herramienta escrita en Python y utilizando la librería Scapy basada en Yersinia para la implementación de ataques de capa de enlace de datos

quasarrat

Remote Administration Tool for Windows

reaper

recon-smtp

smtp-user-enum.pl ported into a recon-ng module.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

rowhammerjs

Rowhammer.js - A Remote Software-Induced Fault Attack in JavaScript

samparser

A python script used to parse the SAM registry hive.

samplecode

Some source code snippets In my development.

sandbox-attacksurface-analysis-tools

scepwn-ng

A winexe/psexec wrapper to use sce and a msfvenom generated payload on a target system

scripts

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.