AymanRbati

RustScan

🤖 The Modern Port Scanner 🤖

SigThief

Stealing Signatures and Making One Invalid Signature at a Time

Exegol

Fully featured and community-driven hacking environment

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

nanodump

The swiss army knife of LSASS dumping

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

WiFiChallengeLab-docker

Virtualized WiFi pentesting laboratory without the need for physical WiFi cards, using mac80211_hwsim. Docker version of WiFiChallenge Lab with modifications in the challenges and improved stability. Ubuntu virtual machine with virtualized networks and clients to perform WiFi attacks on OPN, WPA2, WPA3 and Enterprise networks.

teams-for-linux

Unofficial Microsoft Teams for Linux client

python-demoapp

Simple Python Flask web application designed for running in containers for demos

APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

hackvertor

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

APKHunt

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their code.

PowerShellRunner

PowerShell runner for executing malicious payloads in order to bypass Windows Defender.

EDRSandblast

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

sqlmap-websockets-threads

Tool to proxy sqlmap requests to a websocket server, with support for multiple threads.

php-reverse-shell

docker-yara

Yara Dockerfile

php-malware-finder

Detect potentially malicious PHP files

CrackMapExec

A swiss army knife for pentesting networks

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

DonPAPI

Dumping DPAPI credz remotely

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

GPRegistryPolicyParser

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.