Penetration Testing & Interception

Browser exploitation framework for the assessment of web client, XSS, and social-engineering security controls through hooked browser sessions.

Lightweight web security auditing proxy written in Rust, offering fast HTTP traffic interception and workflow automation.

WinRM shell for Linux and Windows that supports authorized remote management, file transfers, and PowerShell execution during security reviews.

Fast web fuzzer written in Go for recursive directory discovery, content enumeration, and brute force scans of HTTP request parameters at scale.

Fast Go-based directory, DNS, and virtual host brute forcer with multiple modes for web application attack surface discovery.

Python library of classes and example tools for the construction, parsing, and interaction with Windows and Active Directory network protocols.

Asynchronous TCP port scanner that probes thousands of ports per second for large-scale asset and network discovery in authorized environments.

Penetration testing platform and exploit database used to verify security flaws, manage payloads, and assess network posture.

Network service assessment tool for automating authentication checks, credential sprays, and Active Directory evaluations.

Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.

LinPEAS, WinPEAS, and macPEAS scripts that audit Linux, Windows, and macOS systems for privilege escalation paths and exposed credentials.

LLMNR, NBT-NS, and mDNS poisoner that captures network credentials and runs rogue authentication servers during authorized internal assessments.

Modern Rust-based port scanner that maps open ports quickly and feeds results into Nmap for detailed follow-up service enumeration.

Command-line search tool for the Exploit Database that searches a local copy of exploits, shellcodes, and papers for disclosed vulnerabilities.

Automated penetration testing tool that detects and exploits SQL injection flaws to assess database security configurations.