Information gathering & OSINT framework for phone numbers

Kali Linux Fixes for Newly Imported VM's

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advan…

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

Empire is a PowerShell and Python post-exploitation agent.

DumpTheGit searches through public repositories to find sensitive information uploaded to the Github repositories.

Automate getting Domain Admin using Empire

Tools for capturing and analysing keyboard input paired with microphone capture

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

WikiLeaks Vault 7 CIA Hacking Tools

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web A…

The Leading Security Assessment Framework for Android.

Metasploit Framework

POC of Mikrotik exploit from Vault 7 CIA Leaks

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Talk to MPESA API via a REST API. Bringing the MPESA G2 API to the 21st century. --

Cuckoo Sandbox is an automated dynamic malware analysis system

A curated list of awesome malware analysis tools and resources

WannaCry 2.0 Vaccine

Linux namespaces and seccomp-bpf sandbox

A repository of LIVE malwares for your own joy and pleasure

tools

Notes/Tools for pentesting

HOSTS file to block all known NSA / GCHQ / C.I.A. / F.B.I. spying servers

Android application to brute force WiFi passwords without requiring a rooted device.

Network Security Analysis (NSA) is a basic tool developed to automate the information gathering phase.

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in test…