Exploit for CVE-2017-12945.

Burp Suite plugin that adds additional checks to the passive scanner to reveal the origin IP(s) of Cloudflare-protected web applications.

Copy as PowerShell request(s) plugin for Burp Suite (approved by PortSwigger for inclusion in their official BApp Store).

Parse OpenAPI documents into Burp Suite for automating OpenAPI-based APIs security assessments (approved by PortSwigger for inclusion in their official BApp Store).

Perform various SMB-related attacks, particularly useful for testing large Active Directory environments.

Excel parser for various pentesting tools.

Excel parser for testssl scan results.

XLSX parser for nessus and nmap scan results.

Framework designed to automate various wireless networks attacks (the project was presented on Pentester Academy TV's toolbox in 2017).

Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in their official BApp Store).

Display OpenVPN connected clients and their associated routing information in a user-friendly fashion.

A compilation of PowerShell utility scripts.

A collection of dotfiles.

Generate various type of statistics from phishing engagement results.

Framework designed to automate the process of assembly code injection (trojanising) within Android applications.

JSON Web Token (JWT) cracker.

Multi-threaded XMLRPC brute forcer using amplification attacks targeting WordPress installations prior to version 4.4.

An Android RAT that collects various sensitive information in real-time and send them to the attacker databse.

XOR file encryptor.

Web proxy coupled with a URL-based and content-based filter.

Gestionnaire libre de parc informatique (Free Management of Computer Equipment).

Distributed chat system.

Centralized messaging system.

Interactive, multi-users, multi-sessions web platform for quiz and courses.