Netscylla

JWT_Hacking. Collection of scripts that aid in penetration testing of JSON Web Tokens

super-card. A windows client using libnfc to interface with the Mifare Super-card

GBucketDump. Tool for enumerating and exploring data in Google Storage Buckets

SocksoverRDP. Socks4/5 proxy over RDP Protocol

exploit_me. Very vulnerable ARM application (CTF style exploitation tutorial)

whois_search. Small python flask application that uses the whoisxmlapi, to search for whois changes via keyword/domain-name in the last 14 days. Purpose is for threat hunting and brand abuse searches.

Ducky-Firmware. Fork of the USB Rubber Ducky Firmware, for further developments

Pineapple_Patches. Custom Pineapple Patches

Ducky-Encoder. Fork of the USB Rubber Ducky Encoder, for further developments

Security-Research. Exploits written by the Rhino Security Labs team

blog. netscylla blog

chocolateypackages. Application packages for Windows

XFLTReaT. XFLTReaT tunnelling framework

Terraform-RedTeam. Terraform scripts for building red-team infrastructure on AWS

QCSuper. QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

netscylla.

lme. Logging Made Easy

whereis. Python program that mines whois databases for a company name and returns CIDR net-ranges for further investigation.

dmarc_or_not_dmarc. A python program to enumerate a list of domains for weak/strong dmarc implementations.

termshark. A terminal UI for tshark, inspired by Wireshark

smbdoor. Windows kernel backdoor via registering a malicious SMB handler

automactc. AutoMacTC: Automated Mac Forensic Triage Collector

slack-c2bot. Slack C2bot that executes commands and returns the output.

pdf-analysis. docker container for extracting URL's from non-/encrypted PDF's

AWS_Scripts. Various AWS Scripts

AWSBucketDump. Fork from AWSBucketDump that adds an option to add an organisation name

SMBGhost. SMBGhost (CVE-2020-0796) threaded scanner

Jupyter_Vulncheck. Collection of Jupyter notebooks to carve out monthy vendor vulnerability information

Powershell_Scripts. Various Powershell scripts