These are the projects that I have created or am a core developer of said project.

DNSrecon

A DNS enumeration script that is used for OSINT. Download DNSrecon core developer

Discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux. Download Discover core developer

theHavester

Is used a beginning of a pentest to collect data from various sources to gather recon like subdomains, e-mails etc. It also has a restAPI. Download theHarvester core developer

SSLstrip

A tool for exploiting Moxie Marlinspike’s SSL “stripping” attack. As the tool was no longer maintained, I forked it and ported it from Python2 to Python3. Download SSLstrip maintainer

Ansible DVWA/Mutillidae

These are both vulnerable web apps to practice exploiting web vulnerabilities. I have created Ansible playbooks for them both to make it easy to install and get up and running. Download Ansible DVWA Download Ansible Mutillidae

Gochecksec

A program to check linux binaries security flags, to help you with your exploit development. Download Gochecksec