Amr-Hamza's repositories
SharpSocks
Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
Red-Team-Infrastructure-Wiki
Wiki to collect Red Team infrastructure hardening resources
reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
C3
Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.
jnitrace
A Frida based tool that traces usage of the JNI API in Android apps.
exploit-writing-for-oswe
Tips on how to write exploit scripts (faster!)
AntiFrida_Bypass
Generic Script To Bypass Some AntiFrida Checks
Arsenal
Arsenal is a Simple shell script (Bash) used to install tools and requirements for Bug Bounty
Covenant
Covenant is a collaborative .NET C2 framework for red teamers.
Tokenvator
A tool to elevate privilege with Windows Tokens
fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
donut
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
impacket
Impacket is a collection of Python classes for working with network protocols.
UACME
Defeating Windows User Account Control
requests-ntlm
NTLM authentication support for Requests.
VAmPI
Vulnerable REST API with OWASP top 10 vulnerabilities for security testing
grapefruit
(WIP) Runtime Application Instruments for iOS. Previously Passionfruit
UnhookingPatch
Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
FilelessPELoader
Loading Remote AES Encrypted PE in memory , Decrypted it and run it
RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
qark
Tool to look for several security related Android application vulnerabilities
ntdlll-unhooking-collection
different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)
OffensiveNim
My experiments in weaponizing Nim (https://nim-lang.org/)
palera1n
iOS 15.0-16.3 (semi-)tethered checkm8 jailbreak
BypassAV
This map lists the essential techniques to bypass anti-virus and EDR
Shellcode-Hide
This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)
portswigger-websecurity-academy
Writeups for PortSwigger WebSecurity Academy
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
AMSI_patch
Patching AmsiOpenSession by forcing an error branching