Dan Borges

Reverse_DNS_Shell. A python reverse shell that uses DNS as the c2 channel

Cybersecurity-Tradecraft. A repo to support the book

gscripts. A repo full of example gscripts

PSSE. PowerShell Scripting Expert repository, contains template code for security and administrative scripting, largely derived through taking the SecurityTube PowerShell for Pentesters course

Reverse_SSH_Shell. A reverse ssh shell written in python, intended for penetration testers to use as a covert channel on windows

Reverse_HTTPS_Bot. A python based https remote access trojan for penetration testing

phish_composer. Automatically spin up infra for phishing

NTP_Trojan. Reverse NTP remote access trojan in python, for penetration testers

GoRedLoot. A tool to collect secrets (keys and passwords) and stage (compress and encrypt) them for exfiltration.

Stego_Dropper. A python based dropper, that uses steganography and an image over http to transfer a file

SPSE. Collection of scripts created while taking the SecurityTube Python Scripting Expert course

XMPP_Shell_Bot. A shell / chat bot for XMPP and cloud services

Wifi_Trojans. A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.

macOS_profiles. a collection of profiles for macOS designed for penetration testing or red teaming

GoRedShell. A cross platform tool for verifying credentials and executing single commands

HoneyTags. An opensource project similar to HoneyDocs

jammer. This is a fuzzer for automated web application scanners and vulnerability scanners. The idea is to send an unexpectedly large response to attack strings, and crash the scanner.

YARA. a collection of yara rules for binary analysis

GLSE. GoLang Scripting Expert, a repo for template scripts regarding basic golang functions, many with a security focus

GoRedSpy. post exploitation user monitoring tool

presentations. various slides and presentations I've worked on

GoRedDeath. Experimenting with destructive file attacks in Go

AppleScripts. experimenting w/ apple script for various macOS functionality

Ducky_Maker. A fun script to teach automation and create ducky scripts, from existing scripts or ASCII art files

nmap-to-netscan. A helper utility for turning nmap xml files into target lists for go-netscan

Go_Shells. a collection of shells written with the go programming language, golang

Jamf-Attack-Toolkit. Suite of tools to facilitate attacks against the Jamf macOS management platform.

go-powershell. a clone of the old gorillalabs go-powershell

godns. a simple client lib for doing dns over http

pocorgtfo. mirror to the Poc||GTFO zine

gloot. gloot is GoRedLoot adapted for gscript

Shr3dKit. Red Team Tool Kit

GoRedPrompt. POC cross platform prompts for creds

lavalink-musicbot. Music bot that uses Lavalink for its audio player.

replicant. social media bots

CloneWars. Test repo for cloning code signing certs on Windows

malware_sources. Pascal

DEFCON22-BADGE. My custom code for the DEFCON22 Badge, all in good fun.

CVE-2016-3714. ImaegMagick Code Execution (CVE-2016-3714)

gopkgs. a fork of github.com/uudashr/gopkgs

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

awesome-incident-response. A curated list of tools for incident response

go-mimikatz. A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

polaroid. Self contained phish endpoint generator and web server.

GoFileHash. fun project to mess around with hashing files

ad-ldap-enum. An LDAP based Active Directory user and group enumeration tool

CVE-2018-15473-Exploit. Exploit written in Python for CVE-2018-15473 with threading and export formats

bintriage. additional debug information about executable files

PrepCreds. small utility for preparing credential files for hydra or go-netscan

Invoke-Obfuscation. PowerShell Obfuscator

CVE-2014-4113. PowerShell CVE-2014-4113