Popular repositories Loading

1. burpext-signature-generator burpext-signature-generator Public

   Burp Suite extension that auto-recalculates JSON body signatures and updates custom headers for signed API requests. Enables replay and fuzzing of mobile app APIs that require RSA-signed payloads.

   Java

2. htaccess-nginx-proxy-o365-phish htaccess-nginx-proxy-o365-phish Public

   Apache .htaccess + NGINX reverse proxy setup for advanced O365 phishing. Chains a compromised corporate site with Evilginx to keep victims on a legitimate domain throughout the auth flow.

3. proxmark-mifare-uid-fuzzer proxmark-mifare-uid-fuzzer Public

   Lua script for Proxmark3 that fuzzes MIFARE Classic UIDs to assess UID-based access control systems. Supports pseudo-random, incremental, and decremental search strategies around a target UID.

   Lua

4. cisco-psirt-asset-monitor cisco-psirt-asset-monitor Public

   Python tool for vulnerability management that queries Cisco PSIRT openVuln API against an asset inventory. Maps Cisco devices (IOS/NX-OS) to relevant security advisories when VA scanners can't reac…

   Python

5. PhantomPi PhantomPi Public

   Raspberry Pi-based covert network implant for physical red team engagements. Transparent L2 bridging, 802.1X bypass, identity spoofing, and out-of-band 4G/LTE control

   Shell