Hynek Petrak

javascript-malware-collection. Collection of almost 40.000 javascript malware samples

malware-jail. Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

sshame. brute force SSH public-key authentication

CVE-2019-5544_CVE-2020-3992. Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

log4shell-finder. Fastest filesystem scanner for log4shell (CVE-2021-44228, CVE-2021-45046) and other vulnerable (CVE-2017-5645, CVE-2019-17571, CVE-2022-23305, CVE-2022-23307 ... ) instances of log4j library. Excellent performance and low memory footprint.

detect_bluekeep.py. Python script to detect bluekeep vulnerability (CVE-2019-0708) with TLS/SSL and x509 support

passat. passat - password auditing tool. Does statistical analyses on large sets of cracked passwords.

HynekPetrak.

nmap2web. Full text search engine for nmap results. Written in C# ASP.NET

metasploit-framework. Metasploit Framework

doublepulsar-detection-csharp. doublepulsar detection script rewritten in C#

impacket. Impacket is a collection of Python classes for working with network protocols.

HynekPetrak.github.io. Ruby

github-stats. Python

cve-2020-1350. Bash Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2003 up to Windows Server 2019.

bitnami-docker-openldap. Bitnami Docker Image for OpenLDAP

CVE-2021-3156. Sudo Baron Samedit Exploit

sqlcipher. SQLCipher is an SQLite extension that provides 256 bit AES encryption of database files.

whois. An intelligent — pure Ruby — WHOIS client and parser.

gitDigger. Shell

MANSPIDER. Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

pymodbus. A full modbus protocol written in python