Beast code in Giters

EvilHat's starred repositories

ShellcodeFluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

Language:C++MIT93000

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

Language:VueNOASSERTION1038600

MicroBurst

A collection of scripts for assessing Microsoft Azure security

Language:PowerShellNOASSERTION204400

AutoGPT

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

Language:PythonNOASSERTION16808900

sslyze

Fast and powerful SSL/TLS scanning library.

Language:PythonAGPL-3.0326400

attack-website

MITRE ATT&CK Website

Language:HTMLApache-2.048800

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Language:PythonGPL-3.0404300

Invoke-PowerThIEf

The PowerThIEf, an Internet Explorer Post Exploitation library

Language:PowerShellBSD-3-Clause13000

jaeles

The Swiss Army knife for automated Web Application Testing

Language:GoMIT216300

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Language:C++121900

expandpass

Implements a simple nested grammar for expanding passwords

Language:C++16100

PENTESTING-BIBLE

articles

MIT1290400

FDsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

Language:PythonGPL-3.026600

svn-extractor

simple script to extract all web resources by means of .SVN folder exposed over network.

Language:PythonGPL-3.044900

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

Language:C#GPL-3.0418300

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Language:PythonCC-BY-4.0485400

BADministration

Language:Python12800

wesng

Windows Exploit Suggester - Next Generation

Language:PythonBSD-3-Clause420700

kb

All my infosec notes I have been building up over the years

32800

vpn-arsenal

VPN pentest tools and scripts

Language:Perl12100

GourdScanV2

被动式漏洞扫描系统

Language:PythonGPL-2.086600

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Language:CBSD-3-Clause358100