🕵️‍♂️ All-in-one OSINT tool for analysing any website

Run WPS PIN attacks (Pixie Dust, online bruteforce, PIN prediction) without monitor mode with the wpa_supplicant

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

🎯 SQL Injection Payload List

Password list generator that focuses on keywords mutated by commonly used password creation patterns

A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation.

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…

The all-in-one Red Team extension for Web Pentester. Added more functionality

A small library of powershell scripts for post exploitation that you may need or use! It is also a custom reverse shell that you can use to add modules of your choice and not be stuck to things you…

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

GREP FOR OSINT is a set of very simple shell scripts that will help you quickly analyze a text or a folder with files for data useful for investigation (phone numbers, bank card numbers, URLs, emai…

Enter the domain name once and gather information about it with 33 tools

A ton of helpful tools

Arsenal is just a quick inventory and launcher for hacking programs

🪲 Repository of CVE found by OCD people

Arsenal is just a quick inventory and launcher for hacking programs

Exploit for zerologon cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

Operational Technology Cyber Attack Database

Test tool for CVE-2020-1472

Herramienta hecha en Bash ideal para automatizar ataques WiFi (WPA/WPA2 - PSK) destinados a la obtención de la contraseña.

Bash Script with 4 ways to get persistence in Linux systems WITHOUT root permisions

Pentesting Tools to Automatize Active Directory Hacking

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them

Responder Windows Version Beta

macOS keychain cracking tool

Automatic Enumeration Tool based in Open Source tools

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.