Zach Grace

changeme. A default credential scanner.

sticky_keys_hunter. A script to test an RDP host for sticky keys and utilman backdoor.

red_team_telemetry. Python

pwn_lab. Ruby

pwnboard. CCDC Red Team PWNboard

mole. Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

wlgen. Wordlist generator

recon_scripts. Python

junk_drawer. Python

metasploit-framework. Metasploit Framework

docem. Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

sec_infrastructure. Security testing and analysis infrastructure based on Vagrant and Ansible.

pentest-tools. Custom pentesting tools

WASE. The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

beef_injection_framework. Inject beef hooks into HTTP traffic and track hooked systems from cmdline

docker_sec_tools. A collection of Docker files to build security tool containers.

dotfiles. Vim Script