Jonas Lejon

💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh

Tor Browser and Tails version fingerprint PoC

Headless web crawler for bugbounty and penetration-testing/redteaming

No description.

A collection of awesome penetration testing resources, tools and other shiny things

Certificate Transparency Log Monitor

HTTP(S) directory/file brute forcer

Reverse backdoor written in PowerShell and obfuscated with Python. It generates payloads for popular hacking devices like Flipper Zero and Hak5 USB Rubber Ducky, and changes its signature after every build for evasion.

Reads and Swagger/OpenAPI JSON file and routes the requests via Burp Suite

AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover/Kerberoast/AS-REP/AD CS ESC1-16/Shadow Creds/RBCD+KCD/Ghost-SPN/TGS-rewrite/Dollar-Ticket/WPAD/WSUS/PXE/SCCM/BloodHound auto-action/Loot/DCSync/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726/2026-24294/2026-26128). Authorized pentesting only.

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

Nmap SSH Banner EOL Checker - Identifies Ubuntu and Debian versions from SSH banners and checks their EOL status

Multiplatform Python WebShell

APT / Cloud Hopper Yara rules

A curated list of amazingly awesome WordPress resources, themes, plugins and shiny things. Inspired by awesome-php.

Fake a raspberry pi zero w to look like a keyboard to a Windows 10 PC

🍻 A CLI workflow for the administration of macOS applications distributed as binaries

No description.

Disposable email detection library for PHP

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

No description.

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

NFPA helps optimize investigations by reducing errors that are typically involved in manually processing and analyzing network-based evidence through various tools and command-line options.

Source repo for Docker's Documentation

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

OpenVPN Fingerprinting Tool

A list of free and open forensics analysis tools and other resources

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Python script to parse Burp Suite log files

Making containers more secure with eBPF and Linux Security Modules (LSM)

Malicious traffic detection system

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

Fuzz servers and clients using pcaps or mitm based approaches

Open Source Web based SMS Management

CLI to dump a KeePass database

Utility for detecting phishing domains targeting Ethereum users

All the deals for InfoSec related software/tools this Black Friday

Run Capture the Flags and Security Trainings with OWASP Juice Shop

Ansible deployment of the Kolla containers. Mirror of code maintained at opendev.org.

Contextual Content Discovery Tool

No description.

A TCP/UDP based network daemon fuzzer

RSA tool for ctf - retreive private key from weak public key and/or uncipher data (feel free to ask questions : @G4N4P4T1)

The main project for the Unfetter-Discover application. This is the project that will hold the configuration files, the docker-compose files, issue tracking, and documentation

Signature base for my scanner tools

The offical repository for helsingborg.se

Factoring as a Service

Simple, Pythonic remote execution and deployment.

Drop-in replacement of PHPMailer which sends email via Amazon SES