PORTOLIO

Firewall daemon with D-Bus interface

A collection of awesome one-liner scripts especially for bug bounty tips.

Basic WebGL Server in Java Script

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

An Adavnced Automation Tool For Web-Recon Developed For Linux Systems

PayPal Checkout Java SDK

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

PowerAuth - Open-source solution for authentication, secure data storage and transport security in mobile banking.

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

Infoga - Email OSINT

A static analysis tool for finding errors in PHP applications

Distributed P2P Data-driven Workflow Framework

Metasploit Framework

Automated All-in-One OS Command Injection Exploitation Tool

Reconnaissance tool for GitHub organizations

The Shadow Attack Framework

Gospider - Fast web spider written in Go

🕵️‍♂️ Investigate Google emails and documents.

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Absolutely 100% unsupported, and full of infuriating bugs.

Python SMBv2 and v3 Client

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

Mining parameters from dark corners of Web Archives

Red Team PowerShell Script

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)