Paulino Calderon

nmap-nse-scripts. My collection of nmap NSE scripts

macphish. Office for Mac Macro Payload Generator

rainmap-lite. Rainmap Lite - Responsive web based interface that allows users to launch Nmap scans from their mobiles/tablets/web browsers!

davtest. davtest (improved)- Exploits WebDAV folders

InsecureProgrammingDB. Insecure programming functions database

codeql-queries. My CodeQL queries collection

external-nse-script-library. External NSE script library (Collection of unofficial scripts) - Feel free to submit your NSE scripts!

dnmap. Fork of Dnmap (http://dnmap.sourceforge.net/)

mac2wepkey-scanner. huawei mac2wepkey scanner

nmap. nmap - unofficial git fork

pentesting. Misc resources for my daily pentesting...

chatgpt-whisperer. Enhances Ghidra with ChatGPT-powered features for analyzing, summarizing, documenting, and identifying vulnerabilities in binary functions. Includes support for decompilation analysis, xref tracing, function signature suggestions, and batch processing.

wardrive-analytics. Wardrive analytics: Generates a visual representation of your wardriving logs

cidrToIps. reads a list of IP ranges in CIDR notation and prints the individual IP addresses.

cakephpids. PHPIDS plugin implementation for CakePHP

metasploit-modules. My metasploit modules

security-advisories. My security advisories

url-collector-telegram. Bot that automatically stores URLs shared in Telegram chats/groups

8dot3-brute. 8dot3-brute is a script to brute force Windows 8.3 filenames and directories in web servers

ocsp-preparation. My OSCP preparation toolkit/knowledge base

android-exploitation. Some PoCs of exploits for Android vulnerabilities

crowdstriked. Useful files when using Crowdstrike Real Time Response API

hmi-port-list. HMI port list

dotdotpwn. My unofficial/testing copy of dotdotpwn

cakephpids-component. Component Implementation of PHPIDS for CakePHP

recaptcha-cakephp. reCaptcha implementation for CakePHP 1.3

bcbus. BCBus - Android application for viewing BC Transit schedules in British Columbia

ssh-badkeys. A collection of static SSH keys (public and private) that have made their way into software and hardware products.

ctf4-codeql-and-chill-java. My attempt solution for GitHub Security Lab CTF 4: CodeQL and Chill - The Java Edition

polarisoffice-filemon. PoC of Android app that abuses a content provider with sensitive information and null read permissions to steal files listed in PolarisOffice's recent files tab

practical-iot-hacking. C

CatSniffer. CatSniffer is an original multiprotocol and multiband board made for sniffing and communicating with IoT (Internet of Things) devices. It was designed as a highly portable USB stick that integrates the new generation of the chips TI CC1352, Semtech SX1262, and Microchip SAMD21E17.

CatSniffer-Tools. HUB repository for all the Catsniffer Tools available maintaned by Electronic Cats

dcs. default credential scanner

AndroidUtilCode. :fire: Android developers should collect the following utils(updating).

oss2019. Open Security Summit 2019

kairosdb. Fast scalable time series database

exploitable. The 'exploitable' GDB plugin. I don't work at CERT anymore, but here is the original homepage: http://www.cert.org/vuls/discovery/triage.html

infer. A static analyzer for Java, C and Objective-C

enum4linux-0.9. enum4linux-0.9 Unofficial