
These files and scripts are not intended for malicious purposes, they are to be used for training, and legally approved assessments. File Lists: + banner_grabber.py:…

vBulletin 5.1.x – PreAuth 0day Remote Code Execution Exploit. Requirements – Python 3.4.x , Requests, Colorama Tested on: – Windows 7/Vista/8.1/ Ubuntu 14.04, Kali 2.0…

Firefox Security ToolKit – A tool that transforms Firefox Browsers into a penetration testing suite.
How? It downloads the most important extensions, and install it on your browser. The used extensions has been chosen by a survey among the information…

[Mass Exploit] Joomla 3.2 – 3.44 SQL Injection. SCanner and exploiter for CVE-2015-7297, CVE-2015-7857, and CVE-2015-7858. Requirements : + Python version 3.4.x + A third…

Python script which utilizes the xgoogle python module to perform automated LinkedIn dorking. This script prints user information to the screen including: – Name –…

This project inject a DLL in a running process (Using PID or process name) to hook and intercept call to CryptGenKey. If possible, a null…

Dnstwist is a tools for Generate and resolve domain variations to detect typo squatting, phishing and corporate espionage. Find similar-looking domains that adversaries can use…

X-Backdoor is a tool to take advantage of a persistent XSS vulnerability. The idea is to play and explore the modern browsers capabilities and the…