3santree

OSX-KVM

Run macOS on QEMU/KVM. With OpenCore + Monterey + Ventura + Sonoma support now! Only commercial (paid) support is available now to avoid spammy issues. No Mac system is required.

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

shodan-dorks

Here are the most interesting Shodan dorks (according to me)

SpotX-Linux

Spotify Ad blocker based on SpotX for Linux

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

rod

A Chrome DevTools Protocol driver for web automation and scraping.

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

Metsubushi

Generate droppers with encrypted payloads automatically.

awesome-osint

:scream: A curated list of amazingly awesome OSINT

goLazagne

Go library for credentials recovery

UAC-BOF-Bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

GOAD

game of active directory

Jigsaw

Hide shellcode by shuffling bytes into a random array and reconstruct at runtime

fuzz.txt

Potentially dangerous files

juumla

🦁 Juumla is a python tool created to identify Joomla version, scan for vulnerabilities and sensitive files

v2rayA

A web GUI client of Project V which supports VMess, VLESS, SS, SSR, Trojan, Tuic and Juicity protocols. 🚀

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

PowerSharpPack

PowershellWebDelivery

Generate a Powershell oneliner to deliver a Shellcode generated from any Windows Module without touching the disk

obfuscator

PE bin2bin obfuscator

ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

gosecretsdump

Dump ntds.dit really fast

NetExec

The Network Execution Tool

powerview.py

Just another Powerview alternative

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.