Havoc
A modern post-exploitation command and control framework with a client-server architecture and extensibility features.
A simple SSRF-testing sheriff written in Go. This tool is designed to test for Server-Side Request Forgery (SSRF) vulnerabilities in web applications. It works by sending HTTP requests to a target URL and analyzing the responses to identify potential SSRF vulnerabilities. The tool is easy to use and provides detailed information about the vulnerabilities it finds.
A modern post-exploitation command and control framework with a client-server architecture and extensibility features.
A tool for enumerating and attacking GitHub Actions pipelines
A Ruby framework designed to aid in the penetration testing of WordPress systems.
A Go client to communicate with Chaos DB API
A powerful tool for hiding the true location of your Teamserver, evading detection from Incident Response, redirecting users, blocking specific IP addresses, and managing Malleable C2 traffic in Red Team engagements.
Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis with various tools and resources.