SensePost

All

132 repositories

objection
Public
📱 objection - runtime mobile exploration
android security ios
android security ios mobile framework instrumentation pentest frida
Python
•
GNU General Public License v3.0
•958•9k•61•11•Updated Mar 12, 2026Mar 12, 2026
go-out
Public
☄️ go-out - A Golang egress buster.
security network scanner
security network scanner buster egress-filtering
Go
•
GNU General Public License v3.0
•13•126•3•1•Updated Feb 6, 2026Feb 6, 2026
gowitness
Public
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
golang security screenshot
golang security screenshot chrome web reporting headless fingerprint technologies chrome-headless
Go
•
GNU General Public License v3.0
•427•4.2k•25•7•Updated Jan 21, 2026Jan 21, 2026
pipetap
Public
A Windows Named Pipe Multi-tool / Proxy
research proxy namedpipe
research proxy namedpipe
C++
•
GNU General Public License v3.0
•22•310•1•0•Updated Dec 7, 2025Dec 7, 2025
CVE-2025-64446
Public
A scanner for the FortiNet vulnerability CVE-2025-64446
cve-2025-64446
cve-2025-64446
Python
•6•30•0•0•Updated Nov 18, 2025Nov 18, 2025
hash-cracker
Public
Script to perform some hashcracking logic automagically
automation bruteforce toggle
automation bruteforce toggle combinator md5 ntlm hybrid hashes hacktoberfest hashcat
C
•
GNU General Public License v3.0
•13•81•0•0•Updated Nov 12, 2025Nov 12, 2025
wpswag
Public
Create an OpenAPI/Swagger spec from a WordPress REST entry point.
Python
•1•7•0•0•Updated Sep 10, 2025Sep 10, 2025
bloatware-pwn
Public
LPE / RCE Exploits for various vulnerable "Bloatware" products
C#
•5•87•0•0•Updated Aug 5, 2025Aug 5, 2025
depscanner
Public
Detect public repository dependencies in the GitHub repositories with an orphan required library.
Python
•
GNU General Public License v3.0
•1•23•0•0•Updated Jun 24, 2025Jun 24, 2025
shellnot
Public
Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.
shell socket reverse-shell
shell socket reverse-shell proxy session rce bind-shell
C
•
GNU General Public License v3.0
•3•44•0•0•Updated Jun 12, 2025Jun 12, 2025
mallet
Public
Mallet is an intercepting proxy for arbitrary protocols
netty
netty
Java
•42•289•13•1•Updated Apr 14, 2025Apr 14, 2025
capchan
Public
Solving CAPTCHA with Image Classification
Python
•
GNU General Public License v3.0
•0•10•0•0•Updated Mar 13, 2025Mar 13, 2025
dresscode
Public
Scan websites CSP policies and visualise their vunlnerabilities from a dashboard
csp
csp
Python
•
GNU General Public License v3.0
•2•13•0•0•Updated Mar 11, 2025Mar 11, 2025
InvokeADCheck
Public
InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.
PowerShell
•
BSD 3-Clause "New" or "Revised" License
•15•117•4•0•Updated Mar 10, 2025Mar 10, 2025
goLAPS
Public
Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.
Go
•
GNU General Public License v3.0
•8•87•0•0•Updated Mar 6, 2025Mar 6, 2025
reGeorg
Public
The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
Python
•
Other
•828•3.2k•16•4•Updated Mar 6, 2025Mar 6, 2025
thumbscr-ews
Public
Exchangelib wrapper for pentesting
Python
•10•67•0•0•Updated Feb 17, 2025Feb 17, 2025
susinternals
Public
psexecsvc - a python implementation of PSExec's native service implementation
Python
•
GNU General Public License v3.0
•24•241•0•3•Updated Feb 11, 2025Feb 11, 2025
berate_ap
Public
Script for orchestrating mana rogue WiFi Access Points.
Shell
•
BSD 2-Clause "Simplified" License
•1k•245•1•0•Updated Feb 3, 2025Feb 3, 2025
mail-in-the-middle
Public
Python
•
GNU General Public License v3.0
•10•108•0•0•Updated Nov 7, 2024Nov 7, 2024
Frack
Public archive
Frack - Keep and Maintain your breach data
osint breaches
osint breaches
Python
•
GNU General Public License v3.0
•29•385•0•0•Updated Sep 1, 2024Sep 1, 2024
hostapd-mana
Public
SensePost's modified hostapd for wifi attacks.
C
•
Other
•132•602•20•1•Updated Aug 5, 2024Aug 5, 2024
steampipe-plugin-projectdiscovery
Public archive
A steampipe plugin to query projectdiscovery.io tools.
projectdiscovery steampipe steampipe-plugin
projectdiscovery steampipe steampipe-plugin
Go
•
Apache License 2.0
•1•27•0•1•Updated Jul 23, 2024Jul 23, 2024
cipherchecks
Public
visually see issues with supported cipher suites
Python
•
GNU General Public License v3.0
•8•18•1•1•Updated Jun 18, 2024Jun 18, 2024
ruler
Public
A tool to abuse Exchange services
exchange mapi pentesting
exchange mapi pentesting shells
Go
•
Other
•366•2.3k•13•1•Updated Jun 10, 2024Jun 10, 2024
apostille
Public
Java
•
Other
•19•76•1•0•Updated May 23, 2024May 23, 2024
assless-chaps
Public
Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes
Python
•18•140•1•0•Updated Mar 19, 2024Mar 19, 2024
mydumbedr
Public
C
•
GNU General Public License v3.0
•17•119•0•0•Updated Jan 30, 2024Jan 30, 2024
wiresocks
Public
A sock, with a wire, so you can tunnel all you desire.
Shell
•
GNU General Public License v3.0
•32•297•2•0•Updated Jan 19, 2024Jan 19, 2024
godoh
Public
🕳 godoh - A DNS-over-HTTPS C2
dns golang dns-over-https
dns golang dns-over-https doh c2 command-and-control
Go
•
GNU General Public License v3.0
•130•805•1•2•Updated Dec 19, 2023Dec 19, 2023