sensepost

📱 objection - runtime mobile exploration

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

A tool to abuse Exchange services

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM

(extensible) Data Exfiltration Toolkit (DET)

🕳 godoh - A DNS-over-HTTPS C2

Python script to inject existing Android applications with a Meterpreter payload.

SensePost's modified hostapd for wifi attacks.

Snoopy: A distributed tracking and data interception framework

Automated DLL Enumerator

DNS-Shell is an interactive Shell over DNS channel

Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.

Snoopy v2.0 - modular digital terrestrial tracking framework

Frack - Keep and Maintain your breach data

A Windows Named Pipe Multi-tool / Proxy

Create a TCP circuit through validly formed HTTP requests

A windows token impersonation tool

psexecsvc - a python implementation of PSExec's native service implementation

A sock, with a wire, so you can tunnel all you desire.

Auto Domain Admin and Network Exploitation.

Mallet is an intercepting proxy for arbitrary protocols

Frontpage and Sharepoint fingerprinting and attack tool.

Evil client portion of EAP relay attack

Domain user enumeration tool

Drag and Drop ClickJacking PoC development assistance tool.

Nikto for Windows with some extra features.

Routopsy - Hacking Routers with Routers

Test for SSL heartbeat vulnerability (CVE-2014-0160)

d(ockerp)wn - a docker pwn tool manager

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

Big Iron Recon & Pwnage

☄️ go-out - A Golang egress buster.

InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.

Wadi Fuzzing Harness

A collection of Frida hooks for experimentation on Windows platforms.

Liniaal - A communication extension to Ruler

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow

Script to perform some hashcracking logic automagically

Offensive RPC PoC

LPE / RCE Exploits for various vulnerable "Bloatware" products

Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.

A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions

Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them

Docker images for learning wifi hacking

Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.

Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.

Exchangelib wrapper for pentesting

Simple tool to extract the most common substrings from an input text. Built for password cracking.

👊 A small utility to play with IBM MQ

The Bi-directional Link Extractor.

A websocket proxy