Tor Autocircuit automaticall creates Tor circuits according to predefined set of rules (e.g. geolocation, number of hops, etc.). This script requires TorCtl python library.

SSLMap is a lightweight TLS/SSL cipher suite scanner.

• Uses custom TLS/SSL query engine for increased reliability/speed
• (No need for third-party libraries such as OpenSSL)
• Tests for 200+ known cipher suites.
• Capable of discovering undocumented cipher suites.
• Advises on cipher suite security based on Protocol, Key Exchange,
• Authentication, Encryption algorithm, and other parameters.
• Configurable handshake versions (e.g. TLSv1.1, SSLv2.0)

opte2kml converts Opte Project database of Internet backbones to Google Earth KML format. The following are required items for this script to run:

• Geo::IP perl module.
• The latest Maxmind GeoLiteCity.dat database (http://www.maxmind.com/app/geolitecity).
• Opte *.2D.coords, *.edgecolors, and *.lgl files (http://www.opte.org/maps/).

This script will convert GeoIP data obtained from maxmind to Google Earth's KML format for easy viewing. It also supports filters to narrow down interesting areas. You can get latest GeoIP database here: http://www.maxmind.com/app/geolitecity

Note: Click on 'Download the latest GeoLite City CSV Format' link and extract all files in the same directory as this executable The first time you execute, you will have to generate a new database optimized for operations of this script.

Orapass implements Oracle's password hashing algorithm. This script can be used for password strength audit and recovery. Uses Python Crypto library.

ip2kml converts a list of IP addresses into Google Earth compatible KML file using Maxmind's free GeoLiteCity database (http://www.maxmind.com/app/geolitecity). On Debian systems, you will need to copy GeoLiteCity.dat file to /usr/local/share/GeoIP/. You will also need Python GeoIP package to properly interface with the database.

Airoscapy is a passive wireless access point scanner. Using this tool you can monitor Access Point's SSID, BSSID, Channel, Encryption support, and Power level. Adjust interface parameter to correspond to your setup.

Warrock Protocol Analyzer decodes encoded traffic generated by a popular game Warrock (http://www.gamersfirst.com/warrock/). Using this tool, you can study the protocol, intercept login and password in clear text, use as a foundation for active attacks. You need Scapy for this script to work.

Pastebin Grabber allows you to monitor and download content submitted to pastebin.com. This tool was created to bring awareness to the public nature of pastebin.com and similar sites.

IP Protocol Scanner allows to enumerate IP protocols supported by a host. This script requires hping3.

Covert Channel Communicator is a proof of concept covert channel sender/receiver pair used to send hidden messages over IP's protocol identifier. Requires hping3.

This script will respond to packets containing a 'secret' keyword and attempt to execute whatever commands that follow (if you send secretls 'ls' will be executed). It will also respond with a TCP RST packet containing full command output.

A proof of concept hping script to perform SYN and ACK port scan.

An exercise in decrypting of shift-based ciphers. Supports frequency analysis and brute force mechanisms for decryption.

A proof of concept script to perform a SYN flood attack on a target host. Requires Net::RawIP module.

Enumerates IP addresses of Tor nodes by querying Tor client. This script requires TorCtl library