Web path scanner

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

Mustache in Python

CSRF Scanner

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injec…

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Paylo…

A simple CORS misconfiguration scanner

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

Rid_enum is a null session RID cycle attack for brute forcing domain controllers.

SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.

ConQR is an open source ticketing system for conferences to issue QRCode's in a quick, efficient, and easy manner.

This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA download…

A swiss army knife for pentesting Windows/Active Directory environments

WPUpdate is a simple Linux service that automatically checks for a new version of Wordpress each night at 2AM.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Multiprocessing brute-force script written in Python 3

This is a hash parser that will export a rc file compatible with Metasploit. This is useful when compromising a separate domain and want to see if any of the credentials work on another domain or o…

hacking tools package

Simple DDoS Website

Get well card for Termie, internet style.

Hacking Tools Package Penetration Testing Framework

Documentation for GitHub Copilot