Hzllaga

hot-manchego

Macro-Enabled Excel File Generator (.xlsm) using the EPPlus Library.

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

DFSCoerce

ClassHound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

CVE-2022-23222

CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation

proxy.py

💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework

static-arm-bins

Statically compiled ARM binaries for debugging and runtime analysis

Arjun

HTTP parameter discovery suite.

PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

Go365

An Office365 User Attack Tool

Chunk-Proxy

ev

EV: IDS Evasion via Packet Manipulation

switcher

一个多功能的端口转发/端口复用工具，支持转发本地或远程地址的端口，支持正则表达式转发（实现端口复用）。

PortBender

TCP Port Redirection Utility

FourEye

AV Evasion Tool For Red Team Ops

ldapdomaindump

Active Directory information dumper via LDAP

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

SpringBootExploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

reFlutter

Flutter Reverse Engineering Framework

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

osmedeus

A Workflow Engine for Offensive Security

Smap

a drop-in replacement for Nmap powered by shodan.io

cdb-wds

利用白名单文件 cdb.exe 执行 shellcode

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

htshells

Self contained htaccess shells and attacks

FuckThatPacker

A simple python packer to easily bypass Windows Defender

PasswordDecrypts

Handy Stored Password Decryption Techniques

Invoke-Obfuscation

PowerShell Obfuscator