Peter Kim

sslScrape. SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

thp2. thp2 setup

THP3_Updates.

Easy-P. PowerShell Helper Tool

brutescrape. A web scraper for generating password files based on plain text found

PowerTools. Veil's PowerTools are a collection of PowerShell projects with a focus on offensive operations.

THP-ChatSupportSystem. The Hacker Playbook 3 - Web Commands

hidemyps. Python

icmpshock. A scanning tool for the ShellShock bash vulnerability

PowerShell_Popup. PowerShell_Popup

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

generateJenkinsExploit. Python

thpDropper. Custom THP Dropper

ceylogger. Basic c-keylogger

adobe_password_checker. Python

reddit_xss. Reddit XSS Gather Tool

c2. Covert Channels for C2 Server

spearphishing. HTML

pi_phone_home. Raspberry Pi 2 C2

Password_Plus_One. initial push

THP1-2_Updates.

nishang. Nishang - PowerShell for penetration testing and offensive security.

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

Probable-Wordlists. Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

meterssh. MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

jenkins-decrypt. Credentials dumper for Jenkins

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

NoSQL_Test. Test lab from https://github.com/tcstool/NoSQLMap

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

Web_Password_Gen. Python

dirtycow.

stayroot. C

metasploit-payloads. Unified repository for different Metasploit Framework payloads

dnscat2. C++

Internal-Monologue. Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS