Amr-Hamza

InveighZero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

ExploitCapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

psgetsystem

getsystem via parent process using ps1 & embeded c#

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

Exchange-AD-Privesc

Exchange privilege escalations to Active Directory

GMSAPasswordReader

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

fierce

A DNS reconnaissance tool for locating non-contiguous IP space.

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

LaZagne

Credentials recovery project

username-anarchy

Username tools for penetration testing

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

betterdefaultpasslist

upx

UPX - the Ultimate Packer for eXecutables

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell

darkarmour

Windows AV Evasion

Mythic

A collaborative, multi-platform, red teaming framework

OSCP-Tricks-2023

OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

android_application_analyzer

The tool is used to analyze the content of the android application in local storage.

Tool-ExploitPack

Exploit Pack contains a full set of 39.000+ exploits, you can be sure that your next pentest will become unstoppable. All operating systems are supported as targets, including: Windows, Linux, Unix, Minix, SCO, Solaris, OSX, etc. and even mobile and web platforms.

Nemesis

An offensive data enrichment pipeline

Frida-Labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

Application-Security

Resources for Application Security including Web, API, Android, iOS and Thick Client

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

SweetPotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

dnschef-ng

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

noPac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user