Castrick An #OSINT SaaS platform offering powerful email, username, and phone lookup tools. Empowering users to effortlessly gather and analyze open-source intelligence. castrickclues.com/ #cybersecurity #infosec @castrickclues

NipeJS A powerful tool designed to detect JavaScript leaks through precise regex pattern scanning, streamlining the identification of potential data leaks within code. github.com/i5nipe/nipejs #cybersecurity #pentesting #bugbounty

Christmas This #PoC creates multiple processes, where each process performs a specific task as part of the injection operation. github.com/Maldev-Academy/Ch… #cybersecurity #infosec #pentesting #redteam

JoomSploit A script designed to escalate a Cross-Site Scripting (#XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in #Joomla CMS. github.com/nowak0x01/JoomSpl… #pentesting #redteam #bugbounty

pandora A #redteam tool that assists into extracting/dumping master credentials and/or entries from different password managers. github.com/efchatz/pandora #cybersecurity #infosec #pentesting

WAF community bypasses 99.9% of WAF signatures are just RegExps written 10-15 years ago. To prove this, we put Twitter payloads with community bypasses to the CSV list you can check. github.com/waf-bypass-maker/… #cybersecurity #infosec #pentesting #redteam #bugbounty

Above v2.2 (Codename: Vettel) Invisible protocol sniffer for finding vulnerabilities in the network. Designed for pentesters and security professionals. github.com/wearecaster/Above #cybersecurity #infosec #pentesting #redteam

The Panthera(P.)uncia of #Cybersecurity Subdomain & Exploit Hunter powered by AI github.com/ARPSyndicate/punc… #infosec #pentesting

Cheat Sheet — Attack Active Directory This cheat sheet contains common enumeration and attack methods for Windows #ActiveDirectory with the use of #powershell. github.com/drak3hft7/Cheat-S… #cybersecurity #pentesting #redteam

matro7sh_loaders This script adds the ability to encode #shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b) github.com/matro7sh/matro7sh… #cybersecurity #infosec #pentesting #redteam

Kubeshark The API traffic analyzer for #Kubernetes providing real-time K8s protocol-level visibility, capturing and monitoring all traffic and payloads going in, out and across containers, pods, nodes and clusters. Inspired by #Wireshark, purposely built for Kubernetes github.com/kubeshark/kubesha… Website: kubeshark.co/ #cybersecurity #infosec #pentesting

PythonHacks This repo contains some solved python codes dedicated for below two cases. • Some solved hacker code , which developers will face ( has to solve) during hiring process. • AWS Cloud boto3 module usage - for Lambda and any other services aimed at automation. github.com/RekhuGopal/Python… #cybersecurity #infosec #pentesting #redteam #bugbounty

InfoHound - OSINT tool for domain profiling During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later help him to identify possible ways to get in an organization. InfoHound performs passive analysis techniques (which do not interact directly with the target) using #OSINT to extract a large amount of data given a web domain name. This tool will retrieve emails, people, files, subdomains, usernames and urls that will be later analyzed to extract even more valuable information. github.com/Fundacio-i2CAT/In… #cybersecurity #pentesting #redteam #bugbounty

Legba A multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. github.com/evilsocket/legba #cybersecurity #infosec #pentesting #redteam #bugbounty

Cisco-IOS-EX-Scanner CVE-2023-20198 & 0Day Implant Scanner (tested in a lab and works, YMMV) Quick and dirty scanner to run checks if the host is vulnerable/been compromised using 0day in Cisco IOS XE. This tool is designed to scan a given target or a list of targets to determine potential vulnerabilities based on specific checks. github.com/ZephrFish/Cisco-I… #cybersecurity #infosec #pentesting #redteam #bugbounty

This workshop has been presented at the Defcon31 event Part 0 - Presentation Part 1 - SimpleLoader Part 2 - DLL Injection Part 3 - Covering your tracks github.com/OtterHacker/Confe… #cybersecurity #infosec #pentesting #redteam

Telegram get remote IP Get IP address on other side audio call in #Telegram. This script is intended to be used to determine the IP address of the interlocutor in the telegram messenger. You must have tshark installed to use it. github.com/n0a/telegram-get-… #OSINT #cybersecurity #infosec

InQL A robust, open-source #BurpSuite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration. github.com/doyensec/inql #infosec #pentesting #bugbounty

🔐 Discover GraphQL security with "Black Hat GraphQL"! This hands-on guide helps penetration testers find vulnerabilities in GraphQL APIs. Learn to protect and break APIs, develop security, and more. 🛒 amzn.to/46xjhOO via t.me/PentestingShop/339 #cybersecurity #infosec #pentesting #redteam