1N3

windows

Windows inside a Docker container.

lynis

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

NetExec

The Network Execution Tool

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

rexray

REX-Ray is a container storage orchestration engine enabling persistence for cloud native workloads

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

nanodump

The swiss army knife of LSASS dumping

GAP-Burp-Extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

psudohash

Generates millions of keyword-based password mutations in seconds.

AD_Miner

AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

jwt-cracker

Simple HS256, HS384 & HS512 JWT token brute force cracker.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information.

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

keepass-password-dumper

Original PoC for CVE-2023-32784

BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

whispers

Identify hardcoded secrets in static structured text

goddi

goddi (go dump domain info) dumps Active Directory domain information

pablodraw

PabloDraw is an Ansi/Ascii text and RIPscrip vector graphic art editor/viewer with multi-user capabilities.

ScriptSentry

ScriptSentry finds misconfigured and dangerous logon scripts.

racepwn

Race Condition framework

smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

rogcat

A `adb logcat` wrapper

puff

Clientside vulnerability / reflected xss fuzzer

metasecjs

MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts

docker_explorer

Scan DockerHub images that match a keyword to find secrets.

Illicit-Services-Enum-Script