TactiFail / Metasploit-Plugins
A collection of Metasploit plugins I have written for various reasons.
☆15Updated 4 years ago
Alternatives and similar repositories for Metasploit-Plugins:
Users that are interested in Metasploit-Plugins are comparing it to the libraries listed below
- A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.☆16Updated 4 years ago
- Supporting material for the "Hunting Bugs In The Tropics" DEFCON 30 talk☆9Updated 2 years ago
- Automated Payload Test Controller☆9Updated 7 years ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Updated 5 years ago
- LyncSniper: A tool for penetration testing Skype for Business and Lync deployments☆9Updated 7 years ago
- LetMeOutOfYour.net Resources☆20Updated 4 years ago
- parsers to make life easier☆12Updated 4 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Updated 6 years ago
- Take a list of URIs and print all the of the paths☆10Updated 4 years ago
- A BurpSuite extension for beautifying .NET message parameters and hiding some of the extra clutter that comes with .NET web apps (i.e. __…☆12Updated 9 years ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10Updated 3 years ago
- Pythonize Intruder Payload☆13Updated 4 years ago
- ☆20Updated 5 years ago
- Scripts for OSCE☆18Updated 6 years ago
- A Burp Extender plugin that will allow you to tamper with requests containing compressed, serialized java objects.☆24Updated 6 years ago
- Burp extension for automated handling of CSRF tokens☆16Updated 7 years ago
- A basic proxylogon scanner☆27Updated 3 years ago
- Identify common attack paths to get Domain Administrator☆22Updated 5 years ago
- A tool for the lazy OSINTer that focuses on discovery of subdomains related to a specific domain. The tool will run for free in Google Ap…☆11Updated 4 years ago
- A playground to practice SSRF Attacks against web apps☆17Updated 6 years ago
- just manipulatin these here tokens yes sir nothing weird☆22Updated 2 years ago
- ☆11Updated 6 years ago
- A simple grep user interface for searching code which can be used for SAST.☆8Updated 5 years ago
- Do the unexpected with AD GPO processing☆9Updated 5 years ago
- Exploit PoC for CVE's and non CVE's alike☆22Updated 4 years ago
- ☆11Updated 6 years ago
- Small utility script to notify via Slack about Hashcat's progress during a password cracking session☆10Updated 6 years ago
- ☆15Updated 3 years ago
- An information gathering tool to collect git emails in version control host services☆11Updated 5 years ago
- String or worldlist encoder for use in fuzzing or web application testing☆18Updated 5 years ago