redsocial

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

reportcompiler

A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rhok-cipher

Random Hacks of Kindness Cipher project

rtovmsetup

sandboxspy

Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them back in a Base32 string over HTTP to an endpoint.

scout

Scout - a Contactless Active Reconnaissance Tool

screenfetch

Fetches system/theme information in terminal for Linux desktop screenshots.

scripts

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sendemail

lightweight, command line SMTP email client

sh

sharpc2

.NET C2 Framework Proof of Concept

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

shellcodewrapper

Shellcode wrapper with encryption for multiple target languages

sherlock

🔎 Hunt down social media accounts by username across social networks

snaffler

a tool for pentesters to help find delicious candy

sonyapilib

Sony Smart Device C# API Library for remote control

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.

sploitctl

Fetch, install and search exploit archives from exploit sites.

ssh_notify

Different Scripts for SSH hardening blog

static-binaries

Various *nix tools built as statically-linked binaries

static-tools

Static compiled binaries + scripts ready to use on systems

struts-pwn

An exploit for Apache Struts CVE-2017-5638

sub2cdn

subroot

Another subdomain bruteforcer

subscraper

External pentest tool that performs subdomain enumeration through various techniques. In addition, SubScraper will provide information such as HTTP & DNS lookups to aid in potential next steps.

sysmon-config

Sysmon configuration file template with default high-quality event tracing

tech-books