> Projects

I will let here an index of some of my tools, since they are scattered throughout different repos due to they are created both in my free time and as part of my work.

Anyway, I have more tools and stuff in my personal repos:

• https://gitlab.com/Zer1t0/
• https://github.com/zer1t0/

> barrido

Tool to discover paths in several web applications at once. It includes several options to filter the requests based in path, body and headers.

> cerbero

A tool to interact and attack the Kerberos protocol. It includes different commands to perform Kerberos related actions.

> dnsresolv.py

Console utility to resolve the ip or hostname of several targets.

> gmcalc

gmcalc is a glibc malloc calculator that allows to found the relations between the malloc sizes, the chunk sizes and the bins.

> heap_explorer

A library to parse the structures of the glibc malloc heap.

> htesterp

Console utility to check if a host has HTTP endpoints.

> httpfileserver

A simple http server that allows to easily download/upload files.

> iplist

Console utility to expand ip ranges like '192.168.0.0/24' into lists of ips.

> kerbeiros

A set of libraries to work with the Kerberos protocol in rust.

> kerbrute

An script to perform kerberos bruteforcing by using the Impacket library.

> nmapxml

Library to parse nmap xml output into python objects.

> ntml-info

Tool to get system information from the NTLM handshake of several endpoints.

> pivotnacci

Tool to deploy HTTP agents in web servers and pivot to the internal network.

> red_asn1

A library to build/parse ASN1 DER comfortably.

> root-domain

Console utility to parse a list the subdomains and extract the root domains.

> sepriv

Tool to modify windows user privileges. It allows to add or delete privileges from an user, as well as enable or disable the privileges of processes tokens.

> tickey

Tool to extract Kerberos tickets from Linux kernel keys.

> urld

Console utility to descompose an URL in different parts.

> wap

Library to parse Wappalyzer technologies.json and use its rules to discover web technologies by looking in the HTTP responses.

> wappy

Tool to discover technologies in web applications, based on the rules of Wappalyzer.