0x00-0x00

ShellPop

Pop shells like a master.

FakePip

Pip install exploit package

CVE-2018-12613

PHPMyAdmin v4.8.0 and v.4.8.1 LFI exploit

CVE-2018-10517

CMS Made Simple 2.2.7 RCE exploit

Hash-Buster

Crack hashes in seconds.

CVE-2018-8440

CVE-2018-8440 standalone exploit

nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

OffensiveDLR

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

Covenant

Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraft easier, and serve as a collaborative command and control platform for red teamers.

CVE-2018-15131

Zimbra Collaboration Suite Username Enumeration

CVE-2018-7422

Wordpress plugin Site-Editor v1.1.1 LFI exploit

diaghub_exploit

Simplified version of Forshaw's Diaghub Collector Exploit

goHackTools

Hacker tools on Go (Golang)

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

zeroday-powershell

A PowerShell example of the Windows zero day priv esc

Amber

Reflective PE packer.

CheckPlease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

cowrie

Cowrie SSH/Telnet Honeypot

CryptoNoter

In-Browser Javascript Monero Miner for websites / Payout towards personal XMR wallet

CVE-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

darknet

darknet with CMake both linux and windows

Internal-Monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

koadic

Koadic C3 COM Command & Control - JScript RAT

ldapdomaindump

Active Directory information dumper via LDAP

pocs

Rubeus

Trying to tame the three-headed dog.

SAP-Pentest

SuriLogger

A Suricata "eve.json" parser to alert Administrator for events.

UACME

Defeating Windows User Account Control

xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.