Skip to content

@PhantasmLab @Phantasm_Lab

Change the repository type filter

All

    Repositories list

    53 repositories

    • django-DefectDojo

      Public
      DefectDojo is an open-source application vulnerability correlation and security orchestration tool.
      HTML
      •
      BSD 3-Clause "New" or "Revised" License
      •1.8k•0•0•0•Updated Sep 9, 2020Sep 9, 2020

    • AwesomeXSS

      Public
      Awesome XSS stuff
      JavaScript
      •
      MIT License
      •779•0•0•0•Updated May 5, 2019May 5, 2019

    • PayloadsAllTheThings

      Public
      A list of useful payloads and bypass for Web Application Security and Pentest/CTF
      Python
      •17k•0•0•0•Updated Feb 17, 2019Feb 17, 2019

    • WhatWaf

      Public
      Detect and bypass web application firewalls and protection systems
      Python
      •
      Other
      •470•0•0•0•Updated Feb 8, 2019Feb 8, 2019

    • sslyze

      Public
      Fast and powerful SSL/TLS server scanning library.
      Python
      •
      GNU Affero General Public License v3.0
      •493•0•0•0•Updated Jan 31, 2019Jan 31, 2019

    • Brickcom-Surveillance-Exploit

      Public
      🎥 Brickcom Private Security Cam's Scan and Exploit Improper view DataBase 📺 Watching priv8 (records 📼) in real time from almost country's arround the world. Exp…
      GNU General Public License v3.0
      •5•0•0•0•Updated Jan 16, 2019Jan 16, 2019

    • AhMyth-Android-RAT

      Public
      Android Remote Administration Tool
      Smali
      •
      GNU General Public License v3.0
      •1.9k•1•0•0•Updated Dec 24, 2018Dec 24, 2018

    • NodeJsScan

      Public
      NodeJsScan is a static security code scanner for Node.js applications.
      Python
      •
      GNU General Public License v3.0
      •343•0•0•0•Updated Sep 19, 2018Sep 19, 2018

    • CloudFlair

      Public
      🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.
      Python
      •383•0•0•0•Updated Jun 28, 2018Jun 28, 2018

    • unzipper

      Public
      Small class to extract + compress .zip, .gz, .rar archives via browser.
      PHP
      •
      GNU General Public License v3.0
      •1.3k•0•0•0•Updated May 8, 2018May 8, 2018

    • brutespray

      Public
      Brute-Forcing from Nmap output - Automatically attempts default creds on found services.
      Python
      •
      MIT License
      •425•0•0•0•Updated Apr 12, 2018Apr 12, 2018

    • retire.js

      Public
      scanner detecting the use of JavaScript libraries with known vulnerabilities
      Roff
      •
      Other
      •434•0•0•0•Updated Apr 7, 2018Apr 7, 2018

    • wfuzz

      Public
      Web application fuzzer
      Python
      •
      GNU General Public License v2.0
      •1.4k•0•0•0•Updated Mar 25, 2018Mar 25, 2018

    • SecLists

      Public
      SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passw…
      PHP
      •25k•1•0•0•Updated Mar 20, 2018Mar 20, 2018

    • RedXBlue

      Public
      a project created to simulate the environment with several security holes, to serve as a training platform for security researchers.
      PHP
      •0•4•0•0•Updated Mar 3, 2018Mar 3, 2018

    • fuzzdb

      Public
      Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
      PHP
      •2.1k•0•0•0•Updated Mar 3, 2018Mar 3, 2018

    • CSS-Keylogging

      Public
      Chrome extension and Express server that exploits keylogging abilities of CSS.
      CSS
      •430•2•0•0•Updated Feb 20, 2018Feb 20, 2018

    • knock

      Public
      Knock Subdomain Scan
      Python
      •883•0•0•0•Updated Jan 30, 2018Jan 30, 2018

    • patator

      Public
      Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
      Python
      •
      GNU General Public License v2.0
      •831•0•0•0•Updated Jan 8, 2018Jan 8, 2018

    • commix

      Public
      Automated All-in-One OS command injection and exploitation tool.
      Python
      •925•0•0•0•Updated Dec 21, 2017Dec 21, 2017

    • zaproxy

      Public
      The OWASP ZAP core project
      Java
      •
      Apache License 2.0
      •2.5k•0•0•0•Updated Dec 20, 2017Dec 20, 2017

    • tplmap

      Public
      Server-Side Template Injection and Code Injection Detection and Exploitation Tool
      Python
      •
      GNU General Public License v3.0
      •685•0•0•0•Updated Nov 30, 2017Nov 30, 2017

    • wpscan

      Public
      WPScan is a black box WordPress vulnerability scanner
      Ruby
      •
      Other
      •1.3k•0•0•0•Updated Nov 15, 2017Nov 15, 2017

    • domain_analyzer

      Public
      Analyze the security of any domain by finding all the information possible. Made in python.
      Python
      •237•0•0•0•Updated Nov 12, 2017Nov 12, 2017

    • kernelpop

      Public
      kernel privilege escalation enumeration and exploitation framework
      C
      •131•0•0•0•Updated Nov 6, 2017Nov 6, 2017

    • Reptile

      Public
      LKM Linux rootkit
      C
      •581•0•0•0•Updated Nov 3, 2017Nov 3, 2017

    • papers

      Public
      Some papers and talks that I have done
      C
      •21•0•0•0•Updated Oct 28, 2017Oct 28, 2017

    • LaZagne

      Public
      Credentials recovery project
      Python
      •
      GNU Lesser General Public License v3.0
      •2.1k•0•0•0•Updated Oct 26, 2017Oct 26, 2017

    • dirsearch

      Public
      Web path scanner
      Python
      •2.4k•0•0•0•Updated Oct 26, 2017Oct 26, 2017

    • unicorn

      Public
      Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and th…
      Python
      •
      Other
      •822•0•0•0•Updated Oct 17, 2017Oct 17, 2017
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.