Adam M Toscher

Awesome-Cellular-Hacking

Wifi Hacking

AWS S3 Bucket/Object Finder

A collection of various awesome lists for hackers, pentesters and security researchers

API and Web App for analyzing & finding a person profile across +300 social media websites (Detections are updated regularly)

Phonia Toolkit is one of the most advanced toolkits to scan phone numbers using only free resources. The goal is to first gather standard information such as country, area, carrier and line type on any international phone numbers with a very good accuracy.

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

A free guide for learning to create ChatGPT3 Prompts

802.11 Attack Tool

List of Awesome Red Teaming Resources

No description.

jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).

List of Awesome Asset Discovery Resources

Build apps for pixel-based displays ✨

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

A pentesting tool that dumps the source code from .git even when the directory traversal is disabled

Memory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Burpsuite Extension to bypass 403 restricted directory

No description.

Cross-Platform SDR Software

Wireshark Bluetooth sniffer for HackRF, BladeRF, and USRP

Crazy cool setup for Alacritty + Tmux + Neovim & OhMyZsh

No description.

A publishing platform for apps developed by the Tidbyt community 🚀

No description.

A post exploitation framework designed to operate covertly on heavily monitored enviroments

An implementation of TEMPEST en GNU Radio

Customisable and automated HTTP header injection

python-based Mac Command and Control that uses internal API calls instead of command line utilities. Author: Cedric Owens

Hide your scrapers IP behind the cloud. Provision proxy servers across different cloud providers to improve your scraping success.

Sparrow.ps1 was created by CISA's Cloud Forensics team to help detect possible compromised accounts and applications in the Azure/m365 environment.

Pentester's Promiscuous Notebook. Use your Ctrl-F to navigate around

Network Analysis Tool

:zap: A collection of awesome lists, manuals, blogs, hacks, one-liners, cli/web tools and more. Especially for System and Network Administrators, DevOps, Pentesters or Security Researchers.

The most complete and up-to-date repository for BladeRF and YateBTS compatibility

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Public repository for Agent Skills

OpenCL, SDR, TDD/FDD LTE cell scanner, full stack from A/D samples to SIB ASN1 messages decoded in PDSCH, (optimized for RTL-SDR HACKRF and BladeRF board)

Notes on how to use Visual Studio 2019 command line in order to compile a .asm file with .cpp using ml64

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

macOS Artifact Parsing Tool

bootstrap Kubernetes with k3s over SSH < 1 min 🚀

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.

A repo containing different tools for OpenWRT i consider useful.

The new bridge between Burp Suite and Frida!

Hijackable CloudFront Domain Names - Protect yourself

A User Interface for the Aircrack suite, folded into Kismet

A modified frequency regulatory domain configuration that doesn't limit you.

A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card "wirelessly", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card numbers with 100% accuracy.

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.

No description.

Store 802.11 frames in Elasticsearch. Visualize with Kibana

Selective wifi jammer - control who can connect where

Automated victim-customized phishing attacks against Wi-Fi clients

Continuously jam all wifi clients/routers

A framework for wireless pentesting.

A Software Defined Radio Attack Tool

WiFi arsenal

People tracker on the Internet: Learn to track the world, to avoid being traced.

Th3Inspector 🕵️ best tool for Information Gathering 🔎

An Information Security Reference That Doesn't Suck

This repository includes resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

A collection of hacking / penetration testing resources to make you better!

Ultimate phishing tool. Socialize with the credentials.

No description.

Install Linux from a running Windows system, without need for a live USB.

.NET 2.0 CLR Project to retrieve Google Chrome data, such as cookies, history and saved logins.

Fast web fuzzer written in Go

VoIP Hopper security tool

defeating the latest version of ReCaptcha with 91% accuracy

Various tips & tricks

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

No description.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

DeimosC2 is a Golang command and control framework for post-exploitation.

Enumerate and disable common sources of telemetry used by AV/EDR.

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

All MITM attacks in one place.

Coming Soon...

How I'm learning to build secure systems

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled, and is incredibly useful for social engineering assessments to find which emails exist and which don't.

A python tool to create obfuscated HTA script.

Tool for extracting information from newly spawned processes

Juniper Junos Space (CVE-2020-1611) (PoC)

A Dead Simple VPN.

No description.

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Tracking Threat Actor Emails in Phishing Kits. CC @neonprimetime on twitter if you find a #threatactoremail in #phishingkit

[Linux] Two Privilege Escalation techniques abusing sudo token

Concierge Toolkit: Physical Access Control Identification and Exploitation

Software-Defined GPS Signal Simulator

A command line tool for creating malicious outlook rules

Enumeration and reconnaissance activities in the Microsoft Azure Cloud.

WePWNise generates architecture independent VBA code to be used in Office documents or templates and automates bypassing application control and exploit mitigation software.

Python api for usage with cobalt strike's External C2 specification

No description.

Phishing Campaign Toolkit

Persisting in the Windows registry "invisibly"

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

PEAS is a Python 2 library and command line application for running commands on an ActiveSync server e.g. Microsoft Exchange.

Faster Nmap Scanning with Rust

Password spraying on sites that require 2+ page loads and dynamic nonces

No description.

Program to detect when linux user opens terminal with root and inject intrusive commands in terminal with X11 lib

Open Source Office Malware Generation & Polymorphic Engine for Red Teams and QA testing

PowerShell One Liners

Hostapd-wpe (Wireless Pwnage Edition) packages for OpenWRT Barrier Breaker 14.07

No description.

Nintendo Switch Emulator

Brute Force Tool 🔓 WordPress , Joomla , DruPal , OpenCart , Magento

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

Subdomain Enumeration in Go

Defcon 27 "SDR Against Smart TVs: URL and Channel Injection Attacks" presentation repo

pwning IPv4 via IPv6

No description.

No description.

Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

No description.

Searches through git repositories for high entropy strings, digging deep into commit history

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

Power efficient dashboard for Kindle 4 NT devices

A command line tool that recreates the famous data decryption effect seen in the 1992 movie Sneakers.

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

Python3 tool to perform password spraying against Microsoft Online service using various methods

No description.

A small Bash utility used for pivoting into internal networks upon compromising a public-facing host.

Enables support for external USB adapters in WiFi Explorer Pro

No description.

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

Collect information about email addresses from Pastebin

📸 Polaroid for your code

Create a minidump of the LSASS process from memory

AD LDAP Command Line Searching that doesn't suck.

linikatz is a tool to attack AD on UNIX

NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following binary network packet capture formats are supported: *.pcap *.pcapng *.cap *.etl

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

PoC exploit for the CVE-2019-15126 kr00k vulnerability

The Azure AD exploration framework.

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

A traffic analyzer to evade Empire's communication from Anomaly-Based IDS

Course Repository for University of Cincinnati Malware Analysis Class (CS7038)

End-To-End File & Message Encryption For Discord

No description.

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

Apple Continuity Protocol Reverse Engineering and Dissector

Crack and decrypt BLE encryption

A framework for prompting users of Jamf-managed Macs to install Apple software updates.

Everyone's favorite SMB/SAMBA/CIFS enumeration tool ported over to Python.

A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.

RRG / Iceman repo - Proxmark3 / Proxmark / RFID / NFC

Fun Syscall Hooking Experiment to dump lsass

MouseJack device discovery and research tools

Docker in LinuxKit (qemu) in Docker

Objective-C library and console to interact with Heimdal APIs for macOS Kerberos

Simple (mainly PowerShell) solutions allowing you to dig a bit deeper than usual.

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

C# Script used for Red Team

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

Lateral Movement technique using DCOM and HTA

Package with useful methods for managing data encodings

Implant framework

A modular C2 framework

Tools and scripts to manipulate Android APKs

vulnerable single sign on

A toolset designed for attacks against common password managers.

An open source SPI flash emulator and monitor

A flexible DNS proxy, with support for encrypted DNS protocols.

My musings with PowerShell

Notes about attacking Jenkins servers

No description.

Purple Team Security

A toolkit to attack Office365

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Privilege escalation tools on Mainframe

A LinkedIn user/company enumeration tool.

Create and view web pages stored entirely in the URL

No description.

Tool to extract Kerberos tickets from Linux kernel keys.

No description.

Documentation of captive network portal behavior on different devices

Find emails of Github users

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and OS X Apps

Share your terminal over the web

viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

Multi Tool Subdomain Enumeration

A repository with toy implementations of MSCHAPv2, MPEE and WPA/2 to understand EAP better

Dump Azure AD Connect credentials for Azure AD and Active Directory

OSINT Tool: Generate username lists for companies on LinkedIn

Security aspects of AWS products for the Security Specialist certification

Username tools for penetration testing

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Code samples for ALEOS Application Framework

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Web path scanner