Current Projects
WLAuthor: Customized Wordlist Generator
WLAuthor is a proof of concept custom wordlist generator. It can be used to create a custom dictionary/wordlist for password guessing or cracking attacks in penetration testing. This script takes a target domain as input and will browse the target web site and parse it for potential words used in passwords. It will then manipulate the wordlist to include special characters and numbers.
Latest Version
WLAuthor-0.12.pl
Old Version
WLAuthor-0.05.pl
Intelligent Port Scanning
One concept I have been throwing around with the group is the idea of more intelligent port scanning. I think it would be great to have a port scanner that could detect an IPS and adjust appropriately. By feeding the tool "previously known open ports", it could have sort of a heartbeat back to the target to detect if there has been a service crash or IPS interference. Ideally, it could run the check from separate IP addresses to differentiate between the two. See proof of concept code below:
Latest Version
IntelliScan.pl
Old Version
IntelliScan0.02.pl
Social Engineering Repository
Collection of resources for social engineering assessments and prevention. It is in Wiki form to promote public contributions.
Visit the repository
WLAuthor is a proof of concept custom wordlist generator. It can be used to create a custom dictionary/wordlist for password guessing or cracking attacks in penetration testing. This script takes a target domain as input and will browse the target web site and parse it for potential words used in passwords. It will then manipulate the wordlist to include special characters and numbers.
Latest Version
WLAuthor-0.12.pl
Old Version
WLAuthor-0.05.pl
Intelligent Port Scanning
One concept I have been throwing around with the group is the idea of more intelligent port scanning. I think it would be great to have a port scanner that could detect an IPS and adjust appropriately. By feeding the tool "previously known open ports", it could have sort of a heartbeat back to the target to detect if there has been a service crash or IPS interference. Ideally, it could run the check from separate IP addresses to differentiate between the two. See proof of concept code below:
Latest Version
IntelliScan.pl
Old Version
IntelliScan0.02.pl
Social Engineering Repository
Collection of resources for social engineering assessments and prevention. It is in Wiki form to promote public contributions.
Visit the repository