0x9f99

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Purple-Pwny

Automatted Purple Team Script

PlumHound

Bloodhound Reporting for Blue and Purple Teams

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

fakelogonscreen

Fake Windows logon screen to steal passwords

shellcodetester

An application to test windows and linux shellcodes

Photon

Incredibly fast crawler designed for OSINT.

ServerScan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

codimd

CodiMD - Realtime collaborative markdown notes on all platforms.

pivotnacci

A tool to make socks connections through HTTP agents

git-hound

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

Quasar

Remote Administration Tool for Windows

rat

Compose shell commands to build interactive terminal applications

udp2raw

A Tunnel which Turns UDP Traffic into Encrypted UDP/FakeTCP/ICMP Traffic by using Raw Socket,helps you Bypass UDP FireWalls(or Unstable UDP Environment)

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

awesome-linux-rootkits

awesome-linux-rootkits

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

Ghost-In-The-Logs

Evade sysmon and windows event logging

APT_Digital_Weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

HFish

安全、可靠、简单、免费的企业级蜜罐

MoveKit

Cobalt Strike kit for Lateral Movement

bypass_disablefunc_via_LD_PRELOAD

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

Keylogger

A simple keylogger for Windows, Linux and Mac

Ps-Tools

Ps-Tools, an advanced process monitoring toolkit for offensive operations

shellinabox

Official-ish Fork of Shell In A Box

marshalsec

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。