SensePost

All

128 repositories

depscanner
Public
Detect public repository dependencies in the GitHub repositories with an orphan required library.
Python
•
GNU General Public License v3.0
•1•18•0•0•Updated Jun 24, 2025Jun 24, 2025
shellnot
Public
Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.
shell socket reverse-shell proxy session rce bind-shell
C
•
GNU General Public License v3.0
•3•27•0•0•Updated Jun 12, 2025Jun 12, 2025
objection
Public
📱 objection - runtime mobile exploration
android security ios mobile framework instrumentation pentest frida
Python
•
GNU General Public License v3.0
•912•8.3k•70•9•Updated Jun 11, 2025Jun 11, 2025
gowitness
Public
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
golang security screenshot chrome web reporting headless fingerprint technologies chrome-headless
Go
•
GNU General Public License v3.0
•397•3.9k•30•5•Updated May 27, 2025May 27, 2025
mallet
Public
Mallet is an intercepting proxy for arbitrary protocols
netty
Java
•43•280•13•1•Updated Apr 14, 2025Apr 14, 2025
capchan
Public
Solving CAPTCHA with Image Classification
Python
•
GNU General Public License v3.0
•0•9•0•0•Updated Mar 13, 2025Mar 13, 2025
dresscode
Public
Scan websites CSP policies and visualise their vunlnerabilities from a dashboard
csp
Python
•
GNU General Public License v3.0
•3•13•0•0•Updated Mar 11, 2025Mar 11, 2025
InvokeADCheck
Public
InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.
PowerShell
•
BSD 3-Clause "New" or "Revised" License
•15•113•4•0•Updated Mar 10, 2025Mar 10, 2025
goLAPS
Public
Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
Go
•
GNU General Public License v3.0
•8•85•0•0•Updated Mar 6, 2025Mar 6, 2025
reGeorg
Public
The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
Python
•
Other
•832•3.1k•16•4•Updated Mar 6, 2025Mar 6, 2025
thumbscr-ews
Public
Exchangelib wrapper for pentesting
Python
•9•64•0•0•Updated Feb 17, 2025Feb 17, 2025
susinternals
Public
psexecsvc - a python implementation of PSExec's native service implementation
Python
•
GNU General Public License v3.0
•19•206•0•0•Updated Feb 11, 2025Feb 11, 2025
berate_ap
Public
Script for orchestrating mana rogue WiFi Access Points.
Shell
•
BSD 2-Clause "Simplified" License
•1k•244•1•0•Updated Feb 3, 2025Feb 3, 2025
mail-in-the-middle
Public
Python
•
GNU General Public License v3.0
•9•109•0•0•Updated Nov 7, 2024Nov 7, 2024
Frack
Public archive
Frack - Keep and Maintain your breach data
osint breaches
Python
•
GNU General Public License v3.0
•29•365•0•0•Updated Sep 1, 2024Sep 1, 2024
hostapd-mana
Public
SensePost's modified hostapd for wifi attacks.
C
•
Other
•133•575•19•1•Updated Aug 5, 2024Aug 5, 2024
steampipe-plugin-projectdiscovery
Public
A steampipe plugin to query projectdiscovery.io tools.
projectdiscovery steampipe steampipe-plugin
Go
•
Apache License 2.0
•1•27•0•1•Updated Jul 23, 2024Jul 23, 2024
cipherchecks
Public
visually see issues with supported cipher suites
Python
•
GNU General Public License v3.0
•7•16•1•0•Updated Jun 18, 2024Jun 18, 2024
ruler
Public
A tool to abuse Exchange services
pentesting shells exchange mapi
Go
•
Other
•363•2.2k•13•1•Updated Jun 10, 2024Jun 10, 2024
apostille
Public
Java
•
Other
•19•73•1•0•Updated May 23, 2024May 23, 2024
hash-cracker
Public
Script to perform some hashcracking logic automagically
automation toggle combinator ntlm hybrid hashes hacktoberfest hashcat ntlmv2 hash-cracking
C
•
GNU General Public License v3.0
•13•73•0•0•Updated May 16, 2024May 16, 2024
assless-chaps
Public
Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes
Python
•18•133•1•0•Updated Mar 19, 2024Mar 19, 2024
mydumbedr
Public
C
•
GNU General Public License v3.0
•17•119•0•0•Updated Jan 30, 2024Jan 30, 2024
wiresocks
Public
A sock, with a wire, so you can tunnel all you desire.
Shell
•
GNU General Public License v3.0
•32•290•2•0•Updated Jan 19, 2024Jan 19, 2024
go-out
Public
☄️ go-out - A Golang egress buster.
security network scanner buster egress-filtering
Go
•
GNU General Public License v3.0
•13•129•3•1•Updated Dec 19, 2023Dec 19, 2023
godoh
Public
🕳 godoh - A DNS-over-HTTPS C2
doh c2 command-and-control dns golang dns-over-https
Go
•
GNU General Public License v3.0
•128•783•1•2•Updated Dec 19, 2023Dec 19, 2023
beacon-pipe-frame-proxy
Public
A toy, C# Cobalt Strike Beacon TCP to Named Pipe Frame Proxy
C#
•
GNU General Public License v3.0
•0•1•0•0•Updated Nov 22, 2023Nov 22, 2023
hash-cracker-apple-silicon
Public archive
Script to perform some hashcracking logic automagically
automation toggle combinator md5 ntlm hybrid hashes hashcat ntlmv2 password-cracking
Python
•
GNU General Public License v3.0
•0•6•0•0•Updated Nov 13, 2023Nov 13, 2023
UserEnum
Public
Domain user enumeration tool
Python
•
GNU General Public License v3.0
•42•215•3•1•Updated Nov 2, 2023Nov 2, 2023
file-read-experiments
Public
A few short scripts to look at the performance of various file read strategies.
Rust
•
GNU General Public License v3.0
•0•7•1•0•Updated Sep 19, 2023Sep 19, 2023