Discover @Zarcolio Open Source projects

@Zarcolio

Zarcolio

Stars
1,360
Global Rank 22,807 (Top 0.8 %)
Followers 97
Registered about 9 years ago
Most used languages

Python
53.6 %

Shell
25.0 %

Batchfile 10.7 %

Roff 3.6 %

AutoIt 3.6 %

PowerShell
3.6 %
Location 🇳🇱 Netherlands
Country Total Rank 551
Country Ranking

AutoIt 9

PowerShell
9

Batchfile 14

Roff 14

Python
81

Shell
565

sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.

flipperzero

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

wwwordlist

Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quoted texts in the text and mail files in order to generate wordlists.

grepaddr

Use grepaddr to extract (grep) all kinds of addresses from stdin like URLs (incl. IPv4/IPv6), IP addresses & ranges (IPv4/IPv6), e-mail addresses, MAC addresses.

GoogleZorks

Google search queries for searching some kind of information about interesting stuff (OSINT)

1pfuscat0r

A tool to automatically generate alternative IP representations, a rewritten version of IPFuscator

Wappaligner

Changes the output of Wappalyzer into something human readable. It also provides links to useful websites and a Google query for finding information on vulnerabilities.

2cmd

Got a command that doesn't support input files like whois or sqlmap? Use 2cmd to take input from stdin and run each line with the command(s) given in the script file. Comes with lot's of pentest/red teaming/bug bounty/CTF scripts ready to use

rssfeeds

My personal security feeds divided into pentest feeds and other security feeds

2ulb

Easy shortcut to make scripts executable and link them from /usr/local/bin

uniqurl

Use uniqurl to filter only unique content from a list of URLs with stdin, making it usable within piped commands

WinIPFinder

Tries to find IP addresses from within Windows, useful when engaged in an on-prem pentest / red teaming exercise.

s3-bulk-cp

Copy all files found from AWS S3 bucket to local

hardening_guides

A gathered list of hardening guides

Nmap

Scripts around Nmap and plugins for Nmap

clio

Different tools that take input from stdin, does some stuff and give output stdout, making them perfect for use in pided commands

Dangerous-Windows-Commands

This is a list of built-in Windows executables that are potentially dangerous an could be use by malware or another type of attacker.

kali-additions

My personal additions to Kali Linux

.KaliConfig

A script which install all scripts I want with a fresh Kali

hlt

Handy Linux Tools

useshttp

Takes host names as input (ports and HTTP status code are optional) and outputs the base URL if a GET request is successful, making it usable in piped commands.

resolves

Takes host names as input and output the host name if it resolves, making it usable in piped commands.

ZecList

Some lists I created / gathered and put together / improved

local_connectivity_check

Routes connectivity checks to pi-hole

splitfqdn

Split an FQDN in parts and rearrange its parts

reusables

Predominantly contains functions that can be reused.

WebCapper

Uitilizes subfinder and cutycapt to retrieve a list of hostnames and create a screenshot if a websites exists @ 80 or 443/TCP

GetPdfAuthors

Download al files from a website and extract all authors from the PDF files

urldecode

Take a string from stdin a performs an urldecode x times

whoami-gui

urlcoding

Short script to encode or decode input from standard input

mailgen

Use mailgen to generate bogus e-mail addresses.

Linux-Fixes

When I stumbe across an issues, which I manage to fix, I'll add a solution. A big warning: DON'T JUST EXECUTE THESE SCRIPTS IF YOU DON'T KNOW WAT YOU'RE DOING, IT MIGHT BREAK STUFF!!!