thor-vath Goto Github PK

3ds-stuff

alphascraper

Collect unit data for Battletech: Alphastrike

azureoutlookc2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

chameleon

Color framework for Swift & Objective-C (Gradient colors, hexcode support, colors from images & more).

codeexecutiononwindows

A list of ways to execute code on Windows using legitimate Windows tools

cool_binary_tools

css-keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

cve-2021-1675

Impacket implementation of CVE-2021-1675

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

dopescope

Public version of dopescope code

exe2hex

Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).

foxtrot

C&C to deliver files and shuttle command execution instructions between an external actor and an internal agent with the help of Firefox Private Encrypted File Sharing

helloworldxll

A simple XLL, showing how to create an XLL from scratch.

id_av

Identify processes related to AV on Windows systems.

king-phisher

Phishing Campaign Toolkit

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

metasploit-framework

Metasploit Framework

metasploit-plugins

Plugins for Metasploit Framework

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

pineapple-themes

Themes for the WiFi Pineapple

printnightmare

pure-python-adb

This is pure-python implementation of the ADB client.

reelphish

subtee-gits-backups

subTee gists code backups

thor-vath.github.io

Build a Jekyll blog in minutes, without touching the command line.

userenum

Domain user enumeration tool

vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.

windows10_ntfs_crash_dos

PoC for a NTFS crash that I discovered, in various Windows versions

wordlists

Curated wordlists collected from multiple sources.

xss-keylogger

A script that sends keypresses to a server that can be injected into XSS-vulnerable websites.