☃ Stephen Shkardoon ☃

fortitoken-mobile-registration. Python implementation of FortiToken registration and TOTP token extraction

entrust-identityguard-tools. Tools for playing with Entrust IdentityGuard soft tokens, such as decrypting QR codes and deriving OTP secrets

hid-iclass-key. Global key for HID iCLASS

ioncube-string-decoder. Hacky script(s) for decoding strings stored in the ioncube loader

access-control. A reference of the different types of access control card readers and which countries they're commonly found in

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

php-tutorial. A PHP Tutorial

Lyrics-Database. A nice database/site for lyrics

ioncube-archive. An archive of collected ioncuber encoders, loaders, and associated files

BusitBalanceViewer. Android application for viewing the balance of a Busit card (from Hamilton, New Zealand)

tribot-authentication. A set of fake scripts and documentation for faking an authentication server for tribot

startmate-mobile. Dart

php-help. Hopefully some nice docs written on simple PHP topics for people who join #php and want it

Pass-Store. Storing Password Securely

NokeFiddler. Android application to fiddle with Nokē locks

fido2-pin-disable-extension. An extension to transparently disable the PIN requirement on FIDO2/Passkeys implementations

vdf-runner. Tool for running Steam/SteamWorks `.vdf` install files manually

ngrok-cap. Spider and capture websites that are exposed through ngrok.com/ngrok.io

infibot-authentication. Set of scripts and files for running an Infibot authentication server

p0rk-crackling. Distributed password cracker for operating over high latency networks of loosely coupled hosts.

airplay-control-intercept. Scripts and control panel for intercepting Airplay traffic and inspecting/messing with it

safuck. safuck module for Unrealircd

xDrip. Nightscout version of xDrip+

ssh-hijack. A simple proof of concept for how to hijack sshd as a non-privileged user

gogs. Gogs is a painless self-hosted Git service

random-bruteforcer. Tool for bruteforcing the output of random()

zKillboard. zKillboard

metasploit-framework. Metasploit Framework

ghidra-findcrypt. Ghidra analysis plugin to locate cryptographic constants

teamviewer-optionshash. Information and tools for working with the TeamViewer OptionsPasswordHash value

google-photos-delete-tool. Tool for deleting all photos from the Google Photos

proxmark3. Proxmark 3

sasquatch. SilverStripe Mighty Ops Team CrispyFi Project

ssy. Junky repository for scanning shit, yo.

cisco-ironport-appliances-service. https://www.exploit-db.com/exploits/35887/ - The Cisco Ironport appliances service account password generator, updated for Linux support

test123.

proxmark3-rfidresearchgroup. RRG / Iceman repo, the most totally wicked repo around if you are into Proxmark3 and RFID hacking

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

keyvalues. Source engine KeyValue format parser (e.g. gameinfo.txt, vmt, vmf)

unicorn. Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, X86)

cryptopals. Go

CitrineJS. A bittorent tracker written in node

fuzzy-go-monster. Daemon to manage assignment of fuzzers when running afl

brute-extensions. Small script to verify which extensions return a 403 vs non 403 error for a given URL/domain