0xsudo

peoples-gavel

A way for the people to constitutionally express a vote of no confidence in their representatives.

crossplane

The Cloud Native Control Plane

PentestGPT

A GPT-empowered penetration testing tool

iscsicpl_bypassUAC

UAC bypass for x64 Windows 7 - 11

fav-up

IP lookup by favicon using Shodan

certsync

Dump NTDS with golden certificates and UnPAC the hash

KeePwn

A python tool to automate KeePass discovery and secret extraction.

File-Smuggling

HTML smuggling is not an evil, it can be useful

SeManageVolumeExploit

advanced-terraform-2823489

Advanced Terraform

90DaysOfDevOps

This repository is my documenting repository for learning the world of DevOps. I started this journey on the 1st January 2022 and I plan to run to March 31st for a complete 90-day romp on spending an hour a day including weekends to get a foundational knowledge across a lot of different areas that make up DevOps.

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Home-Grown-Red-Team

mosint

An automated e-mail OSINT tool

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Spartacus

Spartacus DLL/COM Hijacking Toolkit

lazyParam

A simple automation tool to detect lfi, rce and ssti vulnerability

Codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

chisel

A fast TCP/UDP tunnel over HTTP

secret_handshake

A prototype malware C2 channel using x509 certificates over mTLS

DevOps-The-Hard-Way-AWS

This repository contains free labs for setting up an entire workflow and DevOps environment from a real-world perspective in AWS

OneRuleToRuleThemStill

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

HellHall

Performing Indirect Clean Syscalls

Forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

AmsiBypassHookManagedAPI

A new AMSI Bypass technique using .NET ALI Call Hooking.

Alcatraz

x64 binary obfuscator

sub-scout

Simple bash Script to automate initial recon using (httpx, puredns, regulator, wayback, katana, aquatone)

CrossLinked

LinkedIn enumeration tool to extract valid employee names from an organization through search engine scraping

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

Kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)