Mitch Hines

dnsteal. DNS Exfiltration tool for stealthily sending files over DNS requests.

ARDT. Akamai Reflective DDoS Tool - Attack the origin host behind the Akamai Edge hosts and DDoS protection offered by Akamai services.

cobaltstrike_bofs. My CobaltStrike BOFS

piescan. A simple fast port scanner for when you cant use Nmap on a pentest.

myCVT. Checkpoint Firewall Ruleset Auditor ( For the HTML exports when you do not have the object files )

x86_syscall_ref. An x86 linux syscall table reference tool. Handy for when writing shellcode and exploits.

vconfigurator. Automatic VLAN configuration tool for Linux

snoopbrute. Multithreaded DNS recursive host brute-force tool

massmailer. A simple SMTP Mass mailer program utilising open relays.

bigdrop. DigitalOcean python tool utilising the API for creating and managing multiple customised droplets.

burppy. A tool to allow you to extract fine-grained information on requests and responses that have been captured through Burp.

binmagic. A binary image extraction tool for identifying file structures within binary blobs and firmware images, and extracting them for for further anlysis.

KillTheGibson. A public version of the killthegibson.sh script mentioned in the OpNasaDrones zine.

freeswitch_review. A simple FreeSWITCH configuration review tool for identifying weak SIP security settings

EQGRP. Mirror

randomrepo. Repo for random stuff

VeraCryptThief. Extracting clear-text passwords from VeraCrypt.exe using API hooking

chisel. A fast TCP/UDP tunnel over HTTP

DomainPasswordSpray. DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

bof_helper. Beacon Object File (BOF) Creation Helper

JohnTheRipper. This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS: https://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/john/john/src/).

UnmanagedPowerShell. Executes PowerShell from an unmanaged process

rewolf-msi-exploit. MSI NTIOLib/WinIO Local Privilege Escalation exploit

code-snippets. Various code snippets

Metaphor. Metaphor - Stagefright with ASLR bypass

sinkhole. The memory sinkhole

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

password_cracking_rules. One rule to crack all passwords. or atleast we hope so.

34c3ctf. 34C3 Junior CTF pwnables

donut. Generates x86 and x64 position-independent shellcode that loads .NET Assemblies from memory and runs them with parameters

Empire. Empire is a PowerShell and Python post-exploitation agent.