bcoles

kernel-exploits. Various kernel exploits

kasld. KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.

ssrf_proxy. SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

local-exploits. Various local exploits

jira_scan. A simple remote scanner for Atlassian Jira

metasploit-logos. Custom Metasploit logos

liferay_scan. A simple remote scanner for Liferay Portal

linux-audit. Lazily wraps various Linux system auditing tools

so-check. Checks for search order privilege escalation vectors in system environment, system shared objects and executable files in $PATH.

serenity-exploits. Various exploits for SerenityOS

sitecore_scan. A simple remote scanner for Sitecore CMS

simplywallst_snowflake. An unofficial client for Simply Wall St Snowflake API

spiderfoot. SpiderFoot, the most complete OSINT collection and reconnaissance tool.

WhatWeb. Next generation web scanner

metasploit-framework. Metasploit Framework

linux-exploit-suggester. Linux privilege escalation auditing tool

pega_scan. A simple remote scanner for PegaRules

bcoles.

envex. Extract and analyze environment variables from running Linux processes.

jalesc. Just Another Linux Enumeration Script: A Bash script for locally enumerating a compromised Linux box. Local fork of itsKindred/jalesc which has been deleted as per https://twitter.com/kindredsec/status/1284183131151577093

beef. The Browser Exploitation Framework Project

nmap. Nmap - the Network Mapper. Github mirror of official SVN repository.

OSINT-Framework. OSINT Framework

rootkit-signal-hunter. Detect Linux rootkits which use signals to elevate process privileges.

auth-log-scraper. Rust CLI that searches Linux auth logs for usernames that look like accidentally typed passwords.

bettercap. A complete, modular, portable and easily extensible MITM framework.

serenity. The Serenity Operating System 🐞

bettercap-proxy-modules. This repository contains some bettercap transparent proxy example modules.

lkrg-bypass. LKRG bypass methods

arp-scan. The ARP Scanner

graudit. grep rough audit - source code auditing tool

kernel-hardening-checker. A tool for checking the security hardening options of the Linux kernel

metasploit-payloads. Unified repository for different Metasploit Framework payloads

kerbrute. A tool to perform Kerberos pre-auth bruteforcing

shellcode. Assembly

serenity-fuzz-corpora. Fuzz corpora that shouldn't *quite* go into Serenity, I think

ssh-probe-guard. Detect and automatically respond to Metasploit SSH login scanner fingerprinting activity on Linux hosts.