LRVT

LinkedInDumper. Python 3 script to dump/scrape/extract company employees from LinkedIn API

VoucherVault. Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.

Obsidian-Gitsync-Perlite. Docker container to continuously sync Obsidian markdown notes from GitHub and publish it for the webs

TraefikShaper. Docker container to manipulate Traefik's dynamic configuration and IpAllowList middleware for dynamic IP whitelisting

DehashedDumper. Python3 script to dump breach data from Dehashed

XingDumper. Python 3 script to dump/scrape/extract company employees from XING API

F2BFilters. Dockerized Fail2ban with filters and actions for various SSL proxies

firezone. Enterprise-ready zero-trust access platform built on WireGuard®.

TRSync. Django web frontend for pytr to download all Trade Republic depot data

PhishDock. Automated Docker infrastructure with Gophish, Nginx Proxy Manager, Nginx and PHP

traefik-warp. Traefik plugin to resolve real visitor IP from Cloudflare and CloudFront

NAC-RPi4. Bash Script to Initialize a Raspberry Pi 4 for NAC Bypassing

Reconizer. Python3 script to resolve hostnames to IP addresses and query Shodan's free InternetDB for ports and CVEs as well as ipinfo.com for IP details

FileZilla-Password-Decryptor. Python script to brute force the clear text password of FileZilla's XML file

GZCTF-Cloner. Python 3 Script to Clone/Backup GZCTF Games and Challenges

Invoke-CIS-Benchmark-IIS10. PowerShell Script to Automate CIS Benchmark Auditing for Microsoft IIS 10

send. Simple, private file sharing. Mirror of https://gitlab.com/timvisee/send

Requestbin. clone of https://github.com/Runscope/requestbin

xsshunter. An easy-to-setup version of XSS Hunter 2023 with steroids. Sets up in five minutes and requires no maintenance!

transfer.zip-web. Transfer files securely between browsers using WebRTC peer2peer

mirotalk. 🚀 WebRTC - P2P - Simple, Secure, Fast Real-Time Video Conferences Up to 4k and 60fps, compatible with all browsers and platforms.

Django-Ultimate. The ultimative Django 5 Boostrap Template based on NiceAdmin, UWSGI and Django-Celery-Beat with support for OIDC SSO.

GitLab-Enum. Python 3 script to fingerprint GitLab CE/EE instances

Windows-Root-CA-Store-Checker. PowerShell Script to Validate Windows Root CA Trust Store

AtEar. Wireless Hacking, WiFi Security, Vulnerability Analyzer, Pentestration

SpoolSample. PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

CVE-2024-49369. PoC Exploit Script for CVE-2024-49369

cvecheck. A simple command line tool to query the National Vulnerability Database (NVD) with template (Jinja2) and color support.

SecureTheJuice. OWASP Juice Shop hosted by Traefik SSL Reverse Proxy and Authelia Single-Sign-On (SSO) provider. Comes with Cowrie SSH honeypot.

posio. A multiplayer geography game using Websockets

ssh-audit-excel. Python 3 script to convert ssh-audit JSON result files to XLSX

CVSS-API. Simple Python Flask API server that returns CVSS scores for CVSS vector strings

PoC-CVE-2024-39924. PoC for CVE-2024-39924

Kali-Linux-Dockerfile. A simple Dockerfile to build an image starting from the latest official one of Kali Linux and including some useful tools.

Invoke-CIS-Benchmark-MSSQL. PowerShell script to audit MSSQL servers against CIS Benchmark

VHost-SNIffler. Python 3 script to enumerate VHosts via Hostname/SNI brute-forcing

BadBlood. BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Goreport. A Python script to collect campaign data from Gophish and generate a report

shcheck2excel. Python3 script to convert shcheck json output to xslt

xsshunter-express. An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

GoPhish-Phishing-Campaign-Reporting. GoPhishReport is a penetration testing and red teaming tool that creates custom phishing campaign reports for GoPhish phishing campaigns based of the two CSV files that GoPhish can generate.

Invoke-SeMachineAccountPrivilege. PowerShell snippet to retrieve all AD groups with the ability to add up to 10 computers to the domain

shcheck. A basic tool to check security headers of a website. Supports a single url, a file with urls or an nmap xml file.

rootAVD. Script to root AVDs running with QEMU Emulator from Android Studio

powershell-profile. Pretty PowerShell that looks good and functions almost as good as Linux terminal

pentest2xlsx. Excel parser for various pentesting tools.

Invoke-SPNDCSync. PowerShell

bloodhound_mcp. A Model Context Protocol (MCP) server to converse with data in Bloodhound

ADModule. Microsoft signed ActiveDirectory PowerShell module

cs2-rcon-panel. A simple web panel to control CS2 servers using RCON

nmap-query-xml. A simple program to query nmap xml files in the terminal.