Github useful tools & resources

AztecPo · May 27, 2023

ritiksahni/ASN-Eagle
A tool to discover ASN of any host and fetch IP ranges. - ritiksahni/ASN-Eagle

Rikozi/reverse-shell
reverse shell script. Contribute to Rikozi/reverse-shell development by creating an account on GitHub.

databurn-in/PrivacyBreacher
an app built to showcase the privacy issues in Android operating system - databurn-in/PrivacyBreacher

certego/IntelOwl
Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale - certego/IntelOwl

audibleblink/amnesia
Takes unallocated memory and fills it with junk to mess with forensics tools. - audibleblink/amnesia

NullPxl/traverse
Find more hosts related to a domain through searching for instances of repeated code/html and tracking ids across publically available data. - NullPxl/traverse

karma9874/AndroRAT
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side - karma9874/AndroRAT

Stevetec-exe/RandomUtils
Collection of standalone scripts. dumping ground for random tools etc. I build - Stevetec-exe/RandomUtils

Git-Scanner - A Tool For Bug Hunting Or Pentesting For Targeting We...
This tool can scan websites with open .git repositories for Bug Hunting / Pentesting Purposes and can dump the content of the .git re...

Useful Python libraries

hash-identifier is one of the most popular stalker utilities for identifying various types of hashes used to encrypt data, especially passwords.

GitHub

XSS Via Qr Code

Hi Al Salam Alykum, it’s a simple XSS but with a unexpected vulnerable point, i hope the write-up is clear, if not ping me, happy hacking.

medium.com

🪬 Services for deanonization.

I have collected for you a selection of OSINT resources, thanks to which you will be able to find the necessary information about the goal in social networks.

Search for a person by VKontakte account:
searchlikes.ru • tutnaidut.com • 220vk.com • vk5.city4me.com • vk.watch • vk-photo.xyz • vk-express.ru • archive.org • yasiv.com • archive.is • yzad.ru • vkdia.com

Search for a person by Twitter account:
followerwonk.com • sleepingtime.org • foller.me • socialbearing.com • keyhole.co • analytics.mentionmapp.com • burrrd.com • keitharm.me • archive.org • undelete.news

Search for a person by Facebook account:
graph.tips • whopostedwhat.com • lookup-id.com • keyhole.co • archive.org

Search for a person by Instagram account:
gramfly.com • storiesig.com • codeofaninja.com • sometag.org • keyhole.co • archive.org • undelete.news

Search for a person on a Reddit account:
snoopsnoo.com • redditinsight.com • redditinvestigator.com • archive.org • redditcommentsearch.com

Search for a person via Skype:
mostwantedhf.info • cyber-hub.pw • webresolver.nl

junegunn/fzf
cherry_blossom: A command-line fuzzy finder. Contribute to junegunn/fzf development by creating an account on GitHub.

fkie-cad/FACT_core
Firmware Analysis and Comparison Tool. Contribute to fkie-cad/FACT_core development by creating an account on GitHub.

fireeye/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com - fireeye/commando-vm

danieleperera/OnionIngestor
An extendable tool to Collect, Crawl and Monitor onion sites on tor network and index collected information on Elasticsearch - danieleperera/OnionIngestor

0xcabrex/Pentest-tools
A small program that installs tools that you might need! - 0xcabrex/Pentest-tools

0xkurome/Kurcoder
A tool kit to assist with encoding, decoding, IP calculator, and hex conversion information. - 0xkurome/Kurcoder

mitre-attack/attack-arsenal
A collection of red team and adversary emulation resources developed and released by MITRE. - mitre-attack/attack-arsenal

BlackSnufkin/LuckyCheck
Modular Privesc ToolBox Add or Remove Tools as you want just with 4 lines and 6 lines for making it looks good ;) - BlackSnufkin/LuckyCheck

machinexa2/My-Tools
My-Tools. Contribute to machinexa2/My-Tools development by creating an account on GitHub.

mrdgate/CentWSL
CentOS based WSL distribution. Supports multiple install. - mrdgate/CentWSL

NathanLundner/instashell
Instashell gives you pre built reverse shell command for multiple languages. All you need to do is just supply your IP, Port, and language. - NathanLundner/instashell

vulmon/Vulmap
Vulmap Online Local Vulnerability Scanners Project - vulmon/Vulmap

VanshDeshwal/Shell-Gen
Script to generate reverse shells preconfigured with your virtual or local IP and start a listener for it - VanshDeshwal/Shell-Gen

NathanLundner/Tools
Small collection little scripts for pentesting. Contribute to NathanLundner/Tools development by creating an account on GitHub.

thewhiteh4t/FinalRecon
The Last Web Recon Tool You'll Need. Contribute to thewhiteh4t/FinalRecon development by creating an account on GitHub.

shellphish/how2heap
A repository for learning various heap exploitation techniques. - shellphish/how2heap

APIScorcher/inforecon
A website recon script. Contribute to APIScorcher/inforecon development by creating an account on GitHub.

guillaC/JSBatchobfuscator
JSBatchobfuscator is a simple obfuscator for batch script - guillaC/JSBatchobfuscator

omer-dogan/whoami
Whoami is a Linux privacy tool developed to keep you anonymous at the highest level. - omer-dogan/whoami

GitHub - e-m3din4/osintxcarplate: Obtain a profile from car plate, ...
Obtain a profile from car plate, including car jacking report, verified data related to vehicles registered in the Mexican SCT.. - GitHub - e-m3din4/osintxcarplate: Obtain a profile from car plate,...

Nice beginners series by
@IntezerLabs
on malware reverse engineering Part 1: https://intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/… Part 2: https://intezer.com/blog/incident-response/malware-reverse-engineering-for-beginners-part-2/…

Nice quick introduction to persistence techniques in Windows by Ari Novick (
https://cyberark.com/resources/threat-research-blog/persistence-techniques-that-persist…

Excellent series on reversing, emulating and exploiting smartphones (Pixel 6) bootloaders (credits
Part 1: https://eshard.com/posts/pixel6_bootloader… Part 2: https://eshard.com/posts/pixel6bootloader-2… Part 3: https://eshard.com/posts/pixel6_bootloader_3…

ytisf/theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public. - ytisf/theZoo

PySDR by Marc Lichtman is a great resource for starting with Software Defined Radios (SDRs) and Digital signal processing. It explains things in a very intuitive way. https://pysdr.org

Analysis of BPFDoor backdoor targeting Linux with BPF based packet sniffing capabilities Credits
Analysis: https://sandflysecurity.com/blog/bpfdoor-an-evasive-linux-backdoor-technical-analysis/… Source code: https://pastebin.com/kmmJuuQP

ytisf/theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public. - ytisf/theZoo

Cybercrack-bot/Cybercrack
This tool is great for information gathering and post- exploitation - Cybercrack-bot/Cybercrack

IppSec/forward-shell
Contribute to IppSec/forward-shell development by creating an account on GitHub.

jivoi/awesome-osint
scream: A curated list of amazingly awesome OSINT - jivoi/awesome-osint

malwaredllc/byob
An open-source post-exploitation framework for students, researchers and developers. - malwaredllc/byob

d4rckh/shlol
do common hacking tasks with a simple menu. Contribute to d4rckh/shlol development by creating an account on GitHub.

DiscordDigital/headless-xfce4
This docker image deploys an xfce4 desktop in a container with Alpine Linux. It can be used to do basic desktop stuff, however due to the nature of VNC it performs poorly on video playback. - Disco...

d4rckh/windows-customization-scripts
A collection of scripts to customize Windows by manipulating the registry - d4rckh/windows-customization-scripts

TheOddZer0/sudo-SCAM
They correct way to scam a sysadmin. Contribute to TheOddZer0/sudo-SCAM development by creating an account on GitHub.

Github useful tools & resources

Currently reading: Github useful tools & resources

AztecPo

XSS Via Qr Code

"S'all Good, Man."​

"Perfection Is The Enemy Of Perfectly Adequate."​

"Money Is The Point!"​

"I Travel In Worlds You Can't Even Imagine."​

"Say Nothing, You Understand? Get A Lawyer!"​

“Confidence is good. Facts on your side, better.” ​

“Facts are facts.”​

“Sometimes the good guys win.”​

“I’m not good at building shit, you know? I’m excellent at tearing it down.”​

“Money is not beside the point… Money is the point.”​

“Whoa, whoa. Hold up. What the hell happened to you? I get it, the first rule of Fight Club, right?”​

“A good magician never reveals his secrets.”​

“Got to look successful to be successful.”​

“The lesson is, if you’re gonna be a criminal, do your homework.” ​

“If I had to do it all over again, I would maybe do some things differently. I just thought you should know that.”​

“Some men aren't looking for anything logical. They can't be bought, bullied, reasoned or negotiated with. Some men just want to watch the world burn.”​

"Ernest Hemingway once wrote, "The world is a fine place and worth fighting for." I agree with the second part."​

“There’s no better way to destroy someone’s life than to uncover their secrets.”​

“Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business.”​

“Hackers often describe what they do as playfully creative problem-solving.”​

“Computer hackers do not need to know each other’s real names, or even live on the same continent, to steal millions in mere hours."​

“While many hackers have the knowledge, skills, and tools to attack computer systems, they generally lack the motivation to cause violence or severe economic or social harm.”​

“Very smart people are often tricked by hackers, by phishing. I don’t exclude myself from that. It’s about being smarter than a hacker. Not about being smart.”​

“At the end of the day, my goal was to be the best hacker.”​

“Humiliation is the favorite currency of the hacker.”​

“The hacker didn’t succeed through sophistication. Rather he poked at obvious places, trying to enter through unlocked doors. Persistence, not wizardry, let him through.”​

"Rules. Without Them We Live With The Animals.”​

“Consider This A Professional Courtesy.”​

"I've Lived My Life My Way, And I'll Die My Way."​

"You stabbed the devil in the back, and forced him back into the life that he had just left."​

"You Want A War, Or Do You Want To Just Give Me A Gun?"​

"Leave one wolf alive and the sheep are never safe."​

"When you play the game of thrones, you win or you die. There is no middle ground."​

"It's not easy to see something that’s never been before: A good world."​

"I believe in second chances. I don't believe in third chances."​

"If you only trust the people you grew up with, you won't make many allies."​

"A man with no motive is a man no one suspects. Always keep your foes confused: If they don't know who you are, what you want—they can't know what you plan to do next."​

"Never forget what you are, the rest of the world will not. Wear it like armor and it can never be used to hurt you."​

"I try to know as many people as I can. You never know which one you'll need."​

"It's hard to put a leash on a dog once you've put a crown on its head."​

“Everything before the word ‘but’ is horseshit.”​

“A lion doesn’t concern himself with the opinions of a sheep.”​

“Nothing FUCKS you harder than time.”​

“You pray for rain, you gotta deal with the mud too. That’s a part of it.”​

“I’d be more frightened by not using whatever abilities I’d been given.”​

“Luck is where opportunity meets preparation.”​

“If you have an enemy, then learn and know your enemy, don’t just be mad at him or her.”​

“Every failed experiment is one step closer to success.”​

When you work on a computer your hands travel 20 kilometres a day!​

Fugaku supercomputer is the world’s fastest computer. The $1-billion supercomputer has 7,630,848 cores, requires 29,899 kilowatts of electricity, and can execute 442,010 teraFLOPs.​

“Every day, about 317 million new viruses are discovered.​

“Microsoft’s founder, the infamous Bill Gates, was actually a college dropout."​

Did you know?​

“On average, a human blinks 20 times per minute, but using a computer reduces it to 7."​

Did you know?​

“The most common password for a computer and social media platforms is 123456."​

Did you know?​

“There are eight varieties of computers: mainframe, supercomputer, workstation, personal computer, Apple Macintosh, laptop, tablet, and smartphone."​

Did you know?​

“Linux leads the industry as it is used by Google, Facebook, Twitter, and Amazon."​

Did you know?​

“NASA computers were hijacked by a 15-year-old, resulting in a 21-day halt."​

Did you know?​

“You may heat a room with Gaming PCs more effectively than a heater."​

Did you know?​

“Physical money accounts for just around 10% of global cash, while the rest is stored on computers."​

Did you know?​

“YouTube actually started as a dating website." (Oh crap xD)​

Did you know?​

“Before they could progress as stable brands, Microsoft, HP, and Apple began manufacturing computers in their Garages."​

Did you know?​

“For every 12 million email spams, only one gets a reply."​

Did you know?​

“Banks and other corporate giants hire white hats or “good hackers” to help fix security issues and prevent system infiltration."​

Did you know?​

“If Earth stopped rotating for 1 second, everyone would die."​

Currently reading:
Github useful tools & resources

"S'all Good, Man."

"Perfection Is The Enemy Of Perfectly Adequate."

"Money Is The Point!"

"I Travel In Worlds You Can't Even Imagine."

"Say Nothing, You Understand? Get A Lawyer!"

“Confidence is good. Facts on your side, better.”

“Facts are facts.”

“Sometimes the good guys win.”

“I’m not good at building shit, you know? I’m excellent at tearing it down.”

“Money is not beside the point… Money is the point.”

“Whoa, whoa. Hold up. What the hell happened to you? I get it, the first rule of Fight Club, right?”

“A good magician never reveals his secrets.”

“Got to look successful to be successful.”

“The lesson is, if you’re gonna be a criminal, do your homework.”

“If I had to do it all over again, I would maybe do some things differently. I just thought you should know that.”

“Some men aren't looking for anything logical. They can't be bought, bullied, reasoned or negotiated with. Some men just want to watch the world burn.”

"Ernest Hemingway once wrote, "The world is a fine place and worth fighting for." I agree with the second part."

“There’s no better way to destroy someone’s life than to uncover their secrets.”

“Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business.”

“Hackers often describe what they do as playfully creative problem-solving.”

“Computer hackers do not need to know each other’s real names, or even live on the same continent, to steal millions in mere hours."

“While many hackers have the knowledge, skills, and tools to attack computer systems, they generally lack the motivation to cause violence or severe economic or social harm.”

“Very smart people are often tricked by hackers, by phishing. I don’t exclude myself from that. It’s about being smarter than a hacker. Not about being smart.”

“At the end of the day, my goal was to be the best hacker.”

“Humiliation is the favorite currency of the hacker.”

“The hacker didn’t succeed through sophistication. Rather he poked at obvious places, trying to enter through unlocked doors. Persistence, not wizardry, let him through.”

"Rules. Without Them We Live With The Animals.”

“Consider This A Professional Courtesy.”

"I've Lived My Life My Way, And I'll Die My Way."

"You stabbed the devil in the back, and forced him back into the life that he had just left."

"You Want A War, Or Do You Want To Just Give Me A Gun?"

"Leave one wolf alive and the sheep are never safe."

"When you play the game of thrones, you win or you die. There is no middle ground."

"It's not easy to see something that’s never been before: A good world."

"I believe in second chances. I don't believe in third chances."

"If you only trust the people you grew up with, you won't make many allies."

"A man with no motive is a man no one suspects. Always keep your foes confused: If they don't know who you are, what you want—they can't know what you plan to do next."

"Never forget what you are, the rest of the world will not. Wear it like armor and it can never be used to hurt you."

"I try to know as many people as I can. You never know which one you'll need."

"It's hard to put a leash on a dog once you've put a crown on its head."

“Everything before the word ‘but’ is horseshit.”

“A lion doesn’t concern himself with the opinions of a sheep.”

“Nothing FUCKS you harder than time.”

“You pray for rain, you gotta deal with the mud too. That’s a part of it.”

“I’d be more frightened by not using whatever abilities I’d been given.”

“Luck is where opportunity meets preparation.”

“If you have an enemy, then learn and know your enemy, don’t just be mad at him or her.”

“Every failed experiment is one step closer to success.”

When you work on a computer your hands travel 20 kilometres a day!

Fugaku supercomputer is the world’s fastest computer. The $1-billion supercomputer has 7,630,848 cores, requires 29,899 kilowatts of electricity, and can execute 442,010 teraFLOPs.

“Every day, about 317 million new viruses are discovered.

“Microsoft’s founder, the infamous Bill Gates, was actually a college dropout."

Did you know?

“On average, a human blinks 20 times per minute, but using a computer reduces it to 7."

Did you know?

“The most common password for a computer and social media platforms is 123456."

Did you know?

“There are eight varieties of computers: mainframe, supercomputer, workstation, personal computer, Apple Macintosh, laptop, tablet, and smartphone."

Did you know?

“Linux leads the industry as it is used by Google, Facebook, Twitter, and Amazon."

Did you know?

“NASA computers were hijacked by a 15-year-old, resulting in a 21-day halt."

Did you know?

“You may heat a room with Gaming PCs more effectively than a heater."

Did you know?

“Physical money accounts for just around 10% of global cash, while the rest is stored on computers."

Did you know?

“YouTube actually started as a dating website." (Oh crap xD)

Did you know?

“Before they could progress as stable brands, Microsoft, HP, and Apple began manufacturing computers in their Garages."

Did you know?

“For every 12 million email spams, only one gets a reply."

Did you know?

“Banks and other corporate giants hire white hats or “good hackers” to help fix security issues and prevent system infiltration."

Did you know?

“If Earth stopped rotating for 1 second, everyone would die."

Did you know?

“If someone made a sound of 1100db or larger a black hole would form sucking in our whole solar system."

“People shouldn't be afraid of their government. Governments should be afraid of their people.”