Explore @sensepost Open Source projects

SensePost (@sensepost)

sensepost

Stars
27,377
Global Org. Rank 682 (Top 0.3 %)
Registered over 12 years ago
Most used languages

Python
32.1 %

C
10.1 %

Perl
9.2 %

Go
8.3 %

C#
7.3 %

Java
6.4 %

C++
4.6 %

HTML
3.7 %

Shell
3.7 %

Ruby
2.8 %

JavaScript
2.8 %

Rust
1.8 %

CSS
1.8 %

PHP
1.8 %

Others 3.6 %
Location 🇿🇦 South Africa
Country Total Rank 1
Country Ranking

C
1

Go
1

HTML
1

Perl
1

Python
1

Smali 1

C++
2

Java
2

CMake 3

Ruby
3

Shell
5

CSS
6

C#
8

Lua
8

Rust
13

JavaScript
17

PHP
85

TypeScript
189

objection

📱 objection - runtime mobile exploration

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

ruler

A tool to abuse Exchange services

mana

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM

DET

(extensible) Data Exfiltration Toolkit (DET)

godoh

🕳 godoh - A DNS-over-HTTPS C2

kwetza

Python script to inject existing Android applications with a Meterpreter payload.

Snoopy

Snoopy: A distributed tracking and data interception framework

hostapd-mana

SensePost's modified hostapd for wifi attacks.

rattler

Automated DLL Enumerator

DNS-Shell

DNS-Shell is an interactive Shell over DNS channel

USaBUSe

Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.

snoopy-ng

Snoopy v2.0 - modular digital terrestrial tracking framework

reDuh

Create a TCP circuit through validly formed HTTP requests

autoDANE

Auto Domain Admin and Network Exploitation.

Frack

Frack - Keep and Maintain your breach data

SPartan

Frontpage and Sharepoint fingerprinting and attack tool.

wiresocks

A sock, with a wire, so you can tunnel all you desire.

impersonate

A windows token impersonation tool

mallet

Mallet is an intercepting proxy for arbitrary protocols

UserEnum

Domain user enumeration tool

jack

Drag and Drop ClickJacking PoC development assistance tool.

wpa_sycophant

Evil client portion of EAP relay attack

wikto

Nikto for Windows with some extra features.

routopsy

Routopsy - Hacking Routers with Routers

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

dwn

d(ockerp)wn - a docker pwn tool manager

gdi-palettes-exp

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

wadi

Wadi Fuzzing Harness

birp

Big Iron Recon & Pwnage

assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

liniaal

Liniaal - A communication extension to Ruler

frida-windows-playground

A collection of Frida hooks for experimentation on Windows platforms.

ms16-098

Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow

notruler

The opposite of Ruler, provides blue teams with the ability to detect Ruler usage against Exchange.

mydumbedr

go-out

☄️ go-out - A Golang egress buster.

offensive-rpc

Offensive RPC PoC

anapickle

Toolset for writing shellcode in Python's Pickle language and for manipulating pickles to inject shellcode.

autoresponder

Quick python script to automatically load NTLM hashes from Responder logs and fires up Hashcat to crack them

mail-in-the-middle

xrdp

A rudimentary remote desktop tool for the X11 protocol exploiting unauthenticated x11 sessions

peanuts

Peanuts is a free and open source wifi tracking tool. Based on the SensePosts Snoopy-NG project that is now closed.

apostille

WiFi-Rifle

Creating a wireless rifle de-authentication gun, which utilized a yagi antenna and a Raspberry Pi.

common-substr

Simple tool to extract the most common substrings from an input text. Built for password cracking.

shinai-fi

Docker images for learning wifi hacking

hash-cracker

Script to perform some hashcracking logic automagically

punch-q

👊 A small utility to play with IBM MQ

thumbscr-ews

Exchangelib wrapper for pentesting

BiLE-suite

The Bi-directional Link Extractor.

wsproxy

A websocket proxy

go-derper

Memcache hacking tool.

yeti

SensePost's network footprinting and enumeration tool. You can't pwn what you don't know about.

understanding-eap

A repository with toy implementations of MSCHAPv2, MPEE and WPA/2 to understand EAP better

sockstlsproxy

ntcrack

Left To My Own Devices - NT hash tools

policies

Collection of information security policies.

Suru

Suru is one of the original Man In The Middle (MITM) proxies that sits between the user's browser and the web application.

dual-pod-shock

squeeza

SQL Injection without the pain of syringes.

steampipe-plugin-projectdiscovery

A steampipe plugin to query projectdiscovery.io tools.

wpa3-vuln

hostapd and wpa_supplicant 2.7 vulnerable to Mathy's WPA3 bugs

x11-active-displays

Checks X11 and outputs a screenshot to of the display if allowed and the display is active

SapCap

SApCap is a SAP packet sniffer and decompression tool for analysing SAP GUI (DIAG) traffic

6thSense

A while back antirez, in a post to Bugtraq, detailed a new Tcp portscan method.

password-tools

Service desk password tools.

maltego-mvs

Tools to combine MVS data with external sources and visualise the output in Maltego.

ntp_monlist

Basic script to pull addresses from a NTP server using the monlist command.

XAPSpy

Runtime analysis of windows phone 7 applications.

cipherchecks

visually see issues with supported cipher suites

esp-vnc

Our fork of the esp-link firmware with a built in VNC server for passing input events to an AVR. Part of our Universal Serial aBUSe project.

SAPProx

SAPProx is a proof of concept tool for intercepting and modifying SAP GUI (DIAG protocol) traffic.

JBaah

HTTP Brute Forcer (Java replacement for SP's CrowBar).

SP-DNS-mine

Google DNS name / sub domain miner.

casper

Casper is a tiny system tray application that can be used to view the invisible windows on your desktop.

SpUD

SensePost Unified Data API (SPUD) is a wrapper for apps requiring use of the deprecated Google API.

neverevercookie

GUI for cleaning out evercookie persistence locations.

dresscode

berate_radius

Alpine hostapd-mana based RADIUS server

Manifestor

Android Manifest.xml tool

glypeahead

Port scan through Glype proxies.

ClashofSpamTitan

BilePublic

BiLE stands for Bi-directional Link Extraction. It is used in the footprinting process to find non-obvious relationships between different web sites.

jcertchecker

JCertChecker is used to check HTTPS certificates.

Scully

Scully is a client interface to MSSQL and MySQL database servers.

finder

Finder.pl remotely checks IIS Servers for most of the methods used by WebDAV.

desperate

CarbanakCheck

Check squid logs for possible Carbanak malware.

MonSoen

Proxy Server network scanner and tunnelling tool.

hash-cracker-apple-silicon

Script to perform some hashcracking logic automagically

sconwar

a bring your own client programming game

go

Seriously primitive portscanner using Squid proxy.

pudding

IDS evasion for web-based exploits via encoding built into a "proxy"

gr-protocoldecoder

A simple way to decode a known protocol in GRC in real time.

unitools

For working with IIS servers with the Unicode bug

file-read-experiments

A few short scripts to look at the performance of various file read strategies.

mpdchecker

Confirm the presence of HTTP methods per directory.

sensedecode

Sensedecode includes 2 perl scripts which exploit the IIS url decoding bug.