A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks.

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Domain Availability Checker

EZEA (EaZy Enum Automator), made for OSCP. This tool uses bash to automate most of the enumeration proces

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Contained is all my reference material for my OSCP / Red Teaming. Designed to be a one stop shop for code, guides, command syntax, and high level strategy. One simple clone and you have access to some of the most popular tools used for pentesting.

Tuoni

Automation script to download missing tools and configurate kali linux for various cybersecurity categories

The Collective. A repo for a collection of red team and/or pen test projects found mostly on Github. https://github.com/ceramicskate0/TheCollective #infosec #redteaming #pentest

Easy to extend initial access scenario to help with EDR testing on Linux and Mac

zwatcher is a lightweight bash script for monitoring sub/domains or a list of sub/domains and javascript files. It compares HTTP status codes and content length to detect changes and notifies the user when any modifications occur. Easily keep track of your domains' health and security with zwatcher.

This script was developped to assist in SpearPhishing campaign during Red Team operations. It can be used to generate random name based on country of origin, sex and how common the combination of surname and firstname can be.

🏴‍☠️ BST is an ever-evolving collection of 🛠 tools to help in security and administration tasks 😉

Pentesting tools packaged for Arch Linux.

Red Team Infrastructure As Code

This is a bash script that allows you to monitor multiple files for modifications and receive notifications when changes occur. It uses the inotifywait command-line tool to track file system events and provide real-time monitoring capabilities.

A docker container that will enumerate subdomains and then filters out injection point parameters and much more.

Upgrades nc tty functionality

Public Toolkit - https://mikeabreu.github.io/public-toolkit/