Praetorian ORG

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.

LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

Organizational asset discovery tool with 20+ plugins covering certificate transparency, passive DNS, and all 5 Regional Internet Registries.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

A static analysis tool for securing Go code

Password cracking rules for Hashcat based on statistics and industry patterns

TCP Port Redirection Utility

Standalone utility for service discovery on open ports!

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

Python and Powershell internal penetration testing framework

The Damn Vulnerable Router Firmware Project

A tool to transform Chromium browsers into a C2 Implant

A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom.

A Go implementation of Cobalt Strike style BOF/COFF loaders.

A transparent proxy that can modify and drop traffic for arbitrary TCP connections.

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

No description.

An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.

Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS

Automated Responder/secretsdump.py cracking

A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.

a tool to audit the istio service mesh

a tool to make it easy and fast to test various forms of injection

A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

A lightweight redirector for Google Cloud Run, enabling domain fronting via Google-owned infrastructure.

automated password spraying tool

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs

WasmForge — compile Go and C# programs to single-binary, WASM-sandboxed native executables with polymorphic output.

A Proof of Concept Rootkit Demonstrating Keylogging and Virtual File System (VFS) Capabilities

radare, angr, pwndbg, binjitsu, ect in a box ready for pwning

API security testing framework for REST, GraphQL, and gRPC that validates authorization logic using role-based testing and YAML-driven templates

Open-source cloud security reconnaissance framework

Interactive results explorer and annotation tool for Nosey Parker

Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.

Slack C2bot that executes commands and returns the output.

An implementation of the hashcat rules engine in javascript

Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.

Command line wrapper, Library, and Rest API for oclHashcat.

Caeruleus is a Bluetooth Low Energy testing toolkit for Linux/BlueZ, implemented as a single Go binary. It covers the full interaction-to-assessment lifecycle

Next Generation Phishing Tool For Internal / Red Teams

DNS Enumeration and Reconnaissance Tool

Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.

MCP security testing framework for evaluating Model Context Protocol server vulnerabilities

GitLab Attack TOolkit

Collection of Praetorian solutions to CTF challenges

A command-line tool to mount SMB shares and scan them for secrets using NoseyParker.

Claude Code skill for systematically reducing VirusTotal/EDR detection rates on compiled Go binaries via PE structural analysis and disciplined A/B testing.

No description.

No description.

Burp extension for decoding WCF-gzipped requests.

Scripts to demonstrate VPC Service Controls between tenant and shared projects

No description.

An application to demonstrate stealing an AI model through knowledge distillation.

GitHub Actions Pipeline Enumeration and Attack Tool

A symbolic execution engine for the VEX IR

Text file to BMP image with box drawing and blurring from the command line

Application Security Verification Standard

Log4j detector and reporting server for scalable detection of vulnerable running processes.

Enumerate the permissions associated with AWS credential set

A Nuclei template to detect ZeroQlik (CVE-2023-41265 and CVE-2023-41266)

Repository for information about 0-days exploited in-the-wild.

set up rpi for zbwardrive

No description.

No description.

CLI and SDK for interacting with the Praetorian Chariot platform

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

No description.

No description.

Multi-Cloud Security Auditing Tool

No description.

A Rails application containing multiple vulnerabilities used for demonstration purposes

Six Degrees of Domain Admin

Azure Data Exporter for BloodHound

Impacket is a collection of Python classes for working with network protocols.

Vulnerabilities discovered in npm repository [Berkeley PL & Security Research].

Use Terraform to scaffold a reference AWS architecture for IoT usage

No description.

This repo hosts shared workflows that could be called from other repos (both public or private) of Praetorian

No description.

No description.

documents, scripts, output, and images related to the z32 cipher research

Digging Deeper....

A graph conversion tool for https://cloud.google.com/

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

An implementation of GraphQL for Go / Golang

No description.

No description.