-
ScaryByte
- South Africa
- https://karimjaber.net
- @exfil0
-
SMTP-Hunter Public
SMTP-Hunter is an advanced, aggressive SMTP penetration testing tool designed for security professionals to identify vulnerabilities in SMTP servers.
-
IronVeil Public
Iron Veil is a comprehensive, militarized subdomain enumeration and verification tool built in Python.
Python MIT License UpdatedJul 11, 2025 -
cerberus-singularity Public
Cerberus Singularity is the ultimate evolution in adaptive web application infiltration, designed specifically to target JSF (JavaServer Faces) login pages with unparalleled intelligence, stealth, …
Python UpdatedJul 9, 2025 -
browsec Public
This project provides a robust, stealth-optimized framework for collecting detailed browser and system information from a website visitor without their explicit consent, and exfiltrating that data …
UpdatedJun 21, 2025 -
ad_takeover_wizard Public
tealthWizard is a military-grade penetration testing tool engineered for covert operations against Active Directory (AD) environments and Microsoft 365 (M365) cloud tenants.
Python UpdatedJun 5, 2025 -
CVE-2024-55591-POC Public
A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.
-
CVE-2025-32756-POC Public
Designed for Demonstration of Deep Exploitation.
-
-
MSSQLSEC Public
MSSQLSEC is a comprehensive toolkit, incorporating advanced tools and methodologies, specifically designed for performing in-depth audits on MSSQL databases. It is more than just a static set of to…
-
-
PDFdisarm Public
Advanced PDF Analysis & Disarm Tool is a robust Python-based utility designed to scan, analyze, and neutralize potentially malicious elements in PDF files.
Python UpdatedFeb 12, 2025 -
SIGINTPI Public
This document explains how to set up and run the wizard scripts in the wizard/ folder of the SIGINTPI project.
Python UpdatedFeb 5, 2025 -
WinMal Public
Advanced PowerShell-based red team implant along with a custom C2 (Command & Control) server
-
falconone-stealer Public
FalconOne is a proof-of-concept phishing and tracking toolkit designed for authorized security research and educational demonstrations.
PHP UpdatedFeb 1, 2025 -
WiEvil Public
Generates a Root CA to facilitate certificate-based HTTPS interception, serves that certificate via a captive portal, and optionally installs mitmproxy for full HTTPS MITM.
-
Debian-Tor-Site-Engine Public
A comprehensive wizard-style tool to install and configure a single-instance Tor hidden service on Debian/Ubuntu systems.
-
pi_full_monitor Public
Pi Full Monitor is a Python-based CLI tool designed for monitoring the performance and health of a Raspberry Pi device in real-time.
-
CVE-WIZARD Public
Advanced Python-based wizard tool designed for managing and analyzing vulnerabilities.
Python UpdatedJan 12, 2025 -
luhn-wizard Public
This repository contains a Python script that validates card numbers using the Luhn algorithm, fetches BIN details using the Binlist API, and generates professional JSON reports for single and batc…
Python UpdatedJan 10, 2025 -
Below is a complete Python script that implements a single-node or distributed 5G slicing lab wizard.
-
dynamic_enum_wizard Public
Dynamic_enum_Wizard is a curses-based wizard that conducts a wide range of security reconnaissance tasks while keeping the terminal output to a minimum.
-
WEAPONIZING-CVE-2024-4367 Public
CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the FontMatrix object within PDF files.
-
collectjuices Public
CollectJuices is a powerful tool designed to automate the process of fetching, analyzing, and recursively processing JavaScript files to discover URLs and secrets. Leveraging the capabilities of th…
-
attack-surface-radar Public
The Attack Surface Radar tool helps cybersecurity professionals visualize and analyze the attack surface of a system. It allows users to input various attack vectors, entry points, and other risk-r…
-
test_iconv Public
This repository contains a C program to test for CVE-2024-2961, a buffer overflow vulnerability in the iconv() function of glibc.
C UpdatedJun 4, 2024 -
SQLi-Advanced-Scanner Public
The Advanced SQL Injection Scanner is a sophisticated, Python-based tool crafted for security analysts and penetration testers. It automates the detection of SQL Injection vulnerabilities in web ap…
-
IR-Linux Public
Incident Response Linux Investigation Tool: A concise, efficient script for system administrators and IT professionals, perfect for Linux system diagnostics. It gathers essential data on user accou…
-
This tool is designed for file extension spoofing. It allows users to create a copy of a file with a spoofed extension. This can be useful in various testing scenarios, including security testing a…