Ivan ล incek (@ivan-sincek)

Top repositories

1

penetration-testing-cheat-sheet

Work in progress...
PHP
425
star
2

php-reverse-shell

PHP shells that work on Linux OS, macOS, and Windows OS.
PHP
335
star
3

invoker

Penetration testing utility and antivirus assessment tool.
C++
293
star
4

wifi-penetration-testing-cheat-sheet

Work in progress...
291
star
5

powershell-reverse-tcp

PowerShell scripts for communicating with a remote host.
PowerShell
271
star
6

android-penetration-testing-cheat-sheet

Work in progress... Thanks for all the stars, I will try to prioritize this project :)
JavaScript
241
star
7

forbidden

Bypass 4xx HTTP response status codes and more. Based on PycURL.
Python
195
star
8

ios-penetration-testing-cheat-sheet

Work in progress...
JavaScript
142
star
9

php-ransomware

PHP ransomware that encrypts your files, as well as file and directory names.
PHP
100
star
10

keylogger

Windows OS keylogger with a hook mechanism (i.e. with a keyboard hook procedure).
C++
66
star
11

evil-twin

Learn how to set up a fake authentication web page on a fake WiFi network.
PHP
55
star
12

chat-app

Multithreading TCP server and client communicating over TCP/IP - Windows Forms Application.
C#
43
star
13

java-reverse-tcp

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.
Java
35
star
14

xss-catcher

Simple API for storing all incoming XSS requests.
HTML
26
star
15

phishing-mobile-app

Phishing mobile application made in React Native for both Android and iOS devices.
JavaScript
24
star
16

secure-website

Secure website with a registration, sign in, session management, and CRUD controls.
PHP
22
star
17

dns-exfiltrator

Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.
Batchfile
17
star
18

metagoofeel

Web crawler and downloader based on GNU Wget.
Shell
11
star
19

jwt-bf

Brute force a JWT token. Script uses multithreading.
Python
9
star
20

wordlist-extender

Extend wordlist by appending digits and special characters to each word.
Python
9
star
21

chad

Search Google Dorks like Chad.
Python
8
star
22

domain-extractor

Extract valid or partially valid domain names and IPs from malicious or invalid URLs.
Python
8
star
23

file-shredder

PowerShell script for shredding files.
PowerShell
7
star
24

dnsrecon-chunked

Brute force subdomains in multiple smaller iterations. Based on DNSRecon.
Shell
7
star
25

websocket-bf

Brute force a REST API query through WebSocket. Based on cURL.
Shell
6
star
26

unquoted-service-paths

List unquoted service paths and start, stop, or restart services as needed.
PowerShell
5
star
27

amounts

Generate a wordlist to fuzz amounts or any other numerical values.
Python
5
star
28

transporter

Send packets through raw sockets.
Python
4
star
29

pre-master-secret-key

Set up all you need to capture pre-master secret keys to decrypt SSL in Wireshark.
Batchfile
4
star
30

malware-droppers

Custom malware droppers written in multiple languages.
C#
4
star
31

css-dictionary-attack

Example on how to steal information with CSS from web forms.
CSS
3
star
32

ivan-sincek

My profile info.
3
star
33

nagooglesearch

Not another Google searching tool.
Python
2
star
34

uninstall-msi-products

Uninstall a specific or all MSI products.
PowerShell
2
star
35

send-tcp-payload

Send a payload through TCP.
Python
1
star
36

python-actions

Python SAST workflows.
Python
1
star
37

property-lister

Extract and convert property list files from SQLite database files and from other property list files.
Python
1
star
38

mixaudit-sarif

Convert MixAudit's JSON formatted results to SARIF format.
Python
1
star
39

go-actions

Golang SAST workflows.
Go
1
star