InfiniteDevelopment

esp8266_honeypot

THE ESP8266 HONEYPOT: A PROJECT TO TRAP SCRIPT KIDDIES EVERYWHRE!!

hwthdc2020

anonym8

Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has never been so easy.

Application-and-Image-Security-Scans-in-CI-CD

Application and Image Security Scans in CI/CD

arc

API server for your secrets.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

aws-serverless-auth-reference-app

Serverless reference app and backend API, showcasing authentication and authorization patterns using Amazon Cognito, Amazon API Gateway, AWS Lambda, and AWS IAM.

C4

Cyberdelia, a Collection of Command and Control frameworks

colly

:zap: Lightning Fast and Elegant Scraping Framework for Gophers :zap:

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com

Cronos

PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.

DumpThatLSASS

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

Ebowla

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

Empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

exploitdb-bin-sploits

Exploit Database binary exploits located in the /sploits directory

FilelessRemotePE

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

Fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

gcredstash

gcredstash manages credentials using AWS Key Management Service (KMS) and DynamoDB.

go-get-news

gocrack

hello-auth-grpc

two grpc microservices with mutual TLS and token authentication in Go

hwthdc-nondemo

IntruderPayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

osmedeus-base

Build your own reconnaissance system with Osmedeus Next Generation

privacy.sexy

Open-source tool to enforce privacy & security best-practices on Windows, because privacy is sexy 🍑🍆

RedTeam-Tactics-and-Techniques

Red Teaming Tactics and Techniques

snap_wtf_macos

WTF Snapshot fuzzing of macOS targets

subnet

Simple VPN.

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.