FreeZeroDays

WerTrigger

Weaponizing for privileged file writes bugs with windows problem reporting

gpt4-captcha-bypass

Captcha Bypass using GPT4-o

IHxExec

Process injection alternative

mailgoose

A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.

headscale

An open source, self-hosted implementation of the Tailscale control server

myADMonitor

myADMonitor is an open-source Active Directory changes tracking tool

ADSpider

Monitor changes in Active Directory with replication metadata

WFPExplorer

Windows Filtering Platform Explorer

ThreadStackSpoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

bincapz

detect malicious program behaviors

linux-entra-sso

Browser plugin for Linux to SSO on Microsoft Entra ID using a locally running microsoft identity broker (Intune).

MSC_Dropper

EDRPrison

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

Venoma

Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution

monolith

⬛️ CLI tool for saving complete web pages as a single HTML file

Red-team-Interview-Questions

Red team Interview Questions

CaveCarver

CaveCarver - PE backdooring tool which utilizes and automates code cave technique

cave_miner

Search for code cave in all binaries

ImmoralFiber

Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)

profiler-lateral-movement

Lateral Movement via the .NET Profiler

nerve

Instrument any LLM to do actual stuff.

p0tools

Project Zero Docs and Tools

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

Nightmangle

bunkerweb

🛡️ Make your web services secure by default !

lessmsi

A tool to view and extract the contents of an Windows Installer (.msi) file.

RedFlag

RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and add reviewers. RedFlag's flexible configuration makes it valuable for any team.

Evilginx-Phishing-Infra-Setup

Evilginx Phishing Engagement Infrastructure Setup Guide

graphw00f

graphw00f is GraphQL Server Engine Fingerprinting utility for software security professionals looking to learn more about what technology is behind a given GraphQL endpoint.

angr_taint_engine

angr's exploration technique to perform taint analysis