JoelGMSec

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

OffSec-Reporting

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

ETWHash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

s3cXSSer

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

ExtensionSpoofer

Spoof file icons and extensions in Windows

vecna

Automatic tool to find arbitrary Intent that gets reflected back vulnerabilities on Android apps.

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

RedTeamOps-Havoc-101

Materials for the workshop "Red Team Ops: Havoc 101"

GodPotato

wmiexec-Pro

New generation of wmiexec.py

XSS-Payloads

List of XSS Vectors/Payloads

PS2

A port scanner written purely in PowerShell.

Medusa

LD_PRELOAD Rootkit

Amsi-Killer

Lifetime AMSI bypass

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

Kraken

Kraken, a modular multi-language webshell coded by @secu_x11

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

certsync

Dump NTDS with golden certificates and UnPAC the hash

nanny

Cares the child processes. Bash script to watch and save the whole command of any child process given a PID

PSByPassCLM

Bypass for PowerShell Constrained Language Mode

Villain

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

Havoc

The Havoc Framework.

hacktricks-cloud

Kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

AzureAttackKit

Collection of Azure Tools to Pull down for Attacking an Environment + quick tips and other useful information

Windows-11-VPS

😎😘 Free Windows 11 VPS for 2 Hours ! Easy Method!

reinschauer

it is very good

SubSeven

SubSeven Legacy Official Source Code Repository