jctmendes Goto Github PK

0wned

Code execution via Python package installation.

adape-script

Active Directory Assessment and Privilege Escalation Script

apache-struts-v3

autoblue-ms17-010

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010 AKA EternalBlue

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

b374k

PHP Webshell with handy features

babel

beroot

Windows Privilege Escalation Tool

cameradar

Cameradar hacks its way into RTSP CCTV cameras

changeme

A default credential scanner.

cisco-decrypt

commix

Automated All-in-One OS command injection and exploitation tool.

cupp

Common User Passwords Profiler (CUPP)

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

dnsexfiltrator

Data exfiltration over DNS request covert channel

dredge

Dredging up secrets from the depths of the file system

ds4windows

Like those other ds4tools, but sexier

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

eternalblue-doublepulsar-metasploit

Eternalblue-Doublepulsar-Metasploit

evilginx

Man-in-the-middle attack framework used for phishing credentials and session cookies of any web service.

flare-vm

hashcat-utils

Small utilities that are useful in advanced password cracking

htools

50+ Hacking Tools Collection

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

ilspy

.NET Decompiler

impacket

Impacket is a collection of Python classes for working with network protocols.

instabot.py

Instagram bot. It works without instagram api, need only login and password. Write on python.

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java_deserialization_exploits

A collection of Java Deserialization Exploits