GeekScripts

PNGify is command line tool written in Go that allows you to encode text and files into PNG images and decode them back to their original form. This approach blends text and image processing, offering a funny way to store and retrieve data. The goal of this experimental project is to explore creative possibilities.InstallationMake sure you have the Go compiler installed on your computer and simply compile this project with go install:UsageEncodeUse the encode command to convert data into a PNG image. You can use either the -t flag to encode text or the -f flag to encode a file.Encode text:Encode a fileAn image with […]

SQLMutant is a comprehensive SQL injection testing tool that provides several features to test for SQL injection vulnerabilities in web applications, uses various techniques to detect vulnerabilities, including pattern matching, error analysis, and timing attacks. The integration of Waybackurls and Arjun allows the tool to find additionalSQLMutant is written by Chris “SaintDruG” Abou-Chabke from Black Hat Ethical Hacking and is designed for Red Teams and Bug Bounty Hunters!DescriptionSQLMutant will search for automated subdomain enumeration and SQL injection testing, utilizing several tools including waybackurls, httpx, Arjun, and sqlmap. It begins with a Sun Tzu quote and checks if the user is […]

Deepfence SecretScanner can find unprotected secrets in container images or file systems.What are Secrets?Secrets are any kind of sensitive or private data which gives authorized users permission to access critical IT infrastructure (such as accounts, devices, network, cloud based services), applications, storage, databases and other kinds of critical data for an organization. For example, passwords, AWS access IDs, AWS secret access keys, Google OAuth Key etc. are secrets. Secrets should be strictly kept private. However, sometimes attackers can easily access secrets due to flawed security policies or inadvertent mistakes by developers. Sometimes developers use default secrets or leave hard-coded secrets […]

LazyXss is an automation tool designed to test and confirm XSS (Cross-Site Scripting) vulnerabilities, specifically focusing on reflected XSS in URLs.About LazyXssLazyXss automates the process of detecting reflected XSS vulnerabilities in URLs. This tool does not scan for DOM-based XSS or other types of vulnerabilities. It focuses exclusively on reflected XSS based on the provided URL. Thank you for using LazyXss!FeaturesUpcoming FeaturesSetup LazyXssEnsure you install the latest version of Google Chrome and the corresponding version of ChromeDriver for your device to avoid errors.Installation InstructionsWindowsClone the Repository
git Install DependenciesRun the InstallerStart LazyXssDebian-based Systems (e.g., Ubuntu)Update and Upgrade PackagesInstall DependenciesRun the Installer
Start […]

Puter is an advanced, open-source internet operating system designed to be feature-rich, exceptionally fast, and highly extensible. Puter can be used as: Getting Started Local Development This will launch Puter at http://localhost:4000 (or the next available port). Docker Docker Compose Linux/macOS Windows Puter.com Puter is available as a hosted service at puter.com. System Requirements

WinFiHack is a recreational attempt by me to rewrite my previous project Brute-Hacking-Framework’s main wifi hacking script that uses netsh and native Windows scripts to create a wifi bruteforcer. This is in no way a fast script nor a superior way of doing the same hack but it needs no external libraries and just Python and python scripts. Installation The packages are minimal or nearly none 😅. The package install command is: Thats it. Features So listing the features: How it works So this is how the bruteforcer works: How to run this After installing all the packages just run […]

EyeSpy is a tool designed to enumerate and gain access to IP cameras via RTSP. It provides a flexible and efficient way to scan for open RTSP ports, check if authentication is required, and attempt common credential spraying attacks. Introduction EyeSpy is developed by Miiden and utilises PowerShell to help with penetration tests and research in a Windows environment. EyeSpy is designed to enumerate and gain access to IP cameras via RTSP. It provides a flexible and efficient way to scan for open RTSP ports, check if authentication is required, and attempt common credential spraying attacks. Installation There is no […]

Sniffnet is completely free, open-source software which needs lots of effort and time to develop and maintain. If you appreciate Sniffnet, consider sponsoring: your support will allow me to dedicate more time to this project, constantly expanding it including new features and functionalities. Download Links in the table above will download the latest version of Sniffnet directly from GitHub releases. Note Remember to also install the required dependencies for your operating system. Alternative installation methods are reported in the following: Follow this method only if you have Rust installed on your machine.In this case, the application binary can be built […]

X-toolkit is the ultimate tool to conveniently carry out the reconnaissance of your target and discover its attacking surface. The tool itself comes with two options for installation. First is the API mode, that is based on hackertarget API making it light and efficient and can be used for the identification of potential vulnerabilities. However, the API is the free one so the scans are limited to 100 calls per day per IP. So either you can use proxy to change your public IP after API counter exceedes, or you can go with the second mode of this tool, which […]

PacketSpy is a powerful network packet sniffing tool designed to capture and analyze network traffic. It provides a comprehensive set of features for inspecting HTTP requests and responses, viewing raw payload data, and gathering information about network devices. With PacketSpy, you can gain valuable insights into your network’s communication patterns and troubleshoot network issues effectively. Features Installation Requirements PacketSpy requires the following dependencies to be installed: Getting Started To get started with PacketSpy, use the following command-line options: Examples

SQLMC (SQL Injection Massive Checker) is a tool designed to scan a domain for SQL injection vulnerabilities. It crawls the given URL up to a specified depth, checks each link for SQL injection vulnerabilities, and reports its findings. Features Installation Usage Run sqlmc with the following command-line arguments: Example usage: sqlmc -u http://example.com -d 2 Replace http://example.com with the URL you want to scan and 3 with the desired depth of the scan. You can also specify an output file using the -o or --output flag followed by the desired filename. The tool will then perform the scan and display the results. ToDo

APKDeepLens is a Python based tool designed to scan Android applications (APK files) for security vulnerabilities. It specifically targets the OWASP Top 10 mobile vulnerabilities, providing an easy and efficient way for developers, penetration testers, and security researchers to assess the security posture of Android apps. Features APKDeepLens is a Python-based tool that performs various operations on APK files. Its main features include: Installation To use APKDeepLens, you’ll need to have Python 3.8 or higher installed on your system. You can then install APKDeepLens using the following command: For Linux For Windows Usage To simply scan an APK, use the […]

Omnisci3nt is a powerful web reconnaissance tool designed to unravel the concealed intricacies of the online realm. With a comprehensive array of capabilities, Omnisci3nt offers users the means to delve into various aspects of a target domain, including IP lookup, domain information, SSL certificate details, DNS enumeration, subdomain enumeration, port scanning, web crawling, analysis of technologies utilized, Wayback Machine exploration, DMARC record examination, social media link discovery, and more. Whether you’re a cybersecurity professional, researcher, or individual seeking to gain insights into a particular domain, Omnisci3nt’s versatile toolkit offers a comprehensive solution for navigating the intricate landscape of the web […]

OSINTk.o is a customized Kali Linux-based ISO image with pre-installed packages and scripts. The idea behind this project is to combine a portion of Kali Linux tools and some OSINT scripts that are freely available on GitHub. I started OSINTk.o as an educational and fun project to dive deeply into Kali Linux. My idea was to create a VM with some Kali generic tools and pre-installed OSINT scripts. I learned a lot, and although it may not seem like it at first glance, configuring XFCE menues and correctly placing Python scripts and their dependencies has its challenges when embedding them […]

This Python script is an OSINT (Open Source Intelligence) tool called “Ominis OSINT – Secure Web-History Search.” It performs online information gathering by querying Google for search results related to a user-inputted query. The tool extracts relevant information such as titles, URLs, and potential mentions of the query in the results. Compatibility and Future Releases Mobile Compatibility: Please note that Ominis OSINT Toolkit is primarily designed for use on PC platforms and may not work on mobile environments such as Termux. However, a mobile release is being considered for future development to extend the toolkit’s accessibility to mobile users. Stay tuned […]

DarkGPT is an OSINT assistant based on GPT-4-200K (recommended use) designed to perform queries on leaked databases, thus providing an artificial intelligence assistant that can be useful in your traditional OSINT processes. Installation Guide for DarkGPT Project DarkGPT is an artificial intelligence assistant based on GPT-4-200K designed to perform queries on leaked databases. This guide will help you set up and run the project on your local environment. Prerequisites Before starting, make sure you have Python installed on your system. This project has been tested with Python 3.8 and higher versions. Environment Setup First, you need to clone the GitHub […]

unve1ler is a potent social engineering tool tailored to unmask digital footprints and visual clues scattered across the vast expanse of the internet. This tool enables users to seamlessly locate online profiles by inputting usernames, coupled with an innovative reverse image search feature, adding a layer of convenience to the investigative process. This tool is a Proof of Concept and is for Educational Purposes Only. unve1ler begins its quest by conducting in-depth profile searches across a range of popular platforms. These platforms include prominent social media networks, professional platforms, creative spaces, and more. The tool threads its way through an […]