 |
HARpwn |
| Designed to streamline the extraction and sanitization of HARTokens from HTTP archives. |
|
|
 |
JS-Tap |
| JavaScript payload and supporting software to be used as XSS payload or post exploitation implant. |
|
|
 |
Gsec |
| Web security scanner. |
|
|
 |
LocalPotato |
| Another local Windows privilege escalation using a new potato technique. |
|
|
 |
Mosint |
| An automated e-mail OSINT tool. |
|
|
 |
LEAKEY |
| Bash script which checks and validates for leaked credentials. |
|
|
 |
DVenom |
| Helps to bypass antiviruses by providing an encryption wrapper and loader for your shellcode. |
|
|
 |
MetaDetective |
| Unleash metadata intelligence, bridging the chasm in metadata extraction and analysis. |
|
|
|
|
 |
Porch-Pirate |
| The most comprehensive Postman recon / OSINT client and framework. |
|
|
 |
secbutler |
| The perfect butler for pentesters, bug-bounty hunters and security researchers. |
|
|
 |
moonwalk-back |
| Cover your tracks during Linux exploitation by leaving zero traces on the exploited system. |
|
|
 |
GTFONow |
| Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins. |
|
|
 |
Moriarty |
| Designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential. |
|
|
 |
WebCopilot |
| Automation tool designed to enumerate subdomains and detect bugs using different open-source tools. |
|
|
|
|
|
|
