SpiderLabs

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP...

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it...

A repository of tools and scripts related to malware analysis

SpiderLabs shared Nmap Tools

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

A JBoss script for obtaining remote shell access

cribdrag - an interactive crib dragging tool for cryptanalysis on ciphertext generated with reused or predictable stream cipher keys

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

Inject beef hooks into HTTP traffic and track hooked systems from cmdline

A configurable SQL injection test-bed

This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)

Perl/Python modules for interfacing with Metasploit MSGRPC

Simple REST-style web service for the CVE searching

Burplay is a Burp Extension allowing for replaying any number of requests using same modifications definition. Its main purpose is to aid in searching for Privilege Escalation issues.

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

Updated version of the 2010 KoreLogic password cracking rules for John the Ripper

TCP session interception and injection framework

Set of CLI tools to transform ModSecurity logs into a meaningful information, given a context.