The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

A code-completion engine for Vim

A formatter for Python files

CTF framework and exploit development library

Web path scanner

Credentials recovery project

Main Sigma Rule Repository

Web application fuzzer

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Framework for Man-In-The-Middle attacks

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Loki - Simple IOC and YARA Scanner

A Central Control Plane for AWS Permissions and Access

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…

Platform Security Assessment Framework

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

Add a progress meter to your loops in a second

Find leaked secrets via github search

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

Tool for advanced mining for content on Github

Stealing Signatures and Making One Invalid Signature at a Time

IAM Least Privilege Policy Generator

A Python based ingestor for BloodHound

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …