0xSploit

The Exploiter's starred repositories

uBlock

uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.

Language:JavaScriptGPL-3.044978 911 3445

termshark

A terminal UI for tshark, inspired by Wireshark

Language:GoMIT8829 121 130

WindowsSpyBlocker

Block spying and tracking on Windows

Language:GoMIT4555 144 272

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

Language:HTMLGPL-3.02177 144 12

ruler

A tool to abuse Exchange services

Language:GoNOASSERTION2128 99 99

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Language:C#GPL-3.02095 90 46

The-Hackers-Hardware-Toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.

MPL-2.02058 113 15

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Language:PHPMIT1836 54 122

Sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

Language:PythonGPL-3.01315 64 64

TCM-Security-Sample-Pentest-Report

Sample pentest report provided by TCM Security

1040 360

ReverseTCPShell

PowerShell ReverseTCP Shell - Framework

Language:PowerShell1032 45 3

atomic-threat-coverage

Actionable analytics designed to combat threats

Language:PythonApache-2.0953 56 100

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

Language:PythonMIT887 18 11

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

Language:RubyNOASSERTION712 47 43

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

Language:PowerShellAGPL-3.0646 16 22

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

Language:PythonMIT617 19 3

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams

Language:HCLGPL-3.0370 28 10

grinder

:mag_right: Python framework to automatically discover and enumerate hosts from different back-end systems (Shodan, Censys)

Language:PythonGPL-2.0285 19 13

prads

Passive Real-time Asset Detection System

Language:Standard ML228 23 34

Graffiti

A tool to generate obfuscated one liners to aid in penetration testing

Language:Python178 17 4

security-courses

various courses, presentation etc.

Language:TeXBSD-3-Clause162 22 3

PeekABoo

PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote desktop is disabled by default on all Windows operating systems.

Language:Python132 12 1