Keramas

mssqli-duet

SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing

DS_Walk

Python tool for enumerating directories and files on web servers that contain a publicly readable .ds_store file.

Blowhole

Docker auditing and enumeration script.

PwnagotchiPlayground

Some scripts for Pwnagotchi

WindowsKernelExploits

Repository for Windows 10 x64 kernel research, exploitation learning, and reference/supplementary code.

CTF-Writeups

Compendium of various CTF challenges

Slacker

Python script for pulling chat history for Slack channels using a stolen API token.

ShellcodeCarver

Python script to carve shellcode into the EAX register

CabCloningFactory

A Python-based tool for cloning .cab certificates

ElNombre

Generate a list of different username/email formats from a list of scraped full names

ReverseShellCheatSheet

Python script to generate reverse shells based on Pentestmonkey's reverse shell cheat sheet.

Lord_of_Cereal

Java deserialization tool for creating encrypted and HMAC protected payloads.

Hexxorscii

Quick tool to XOR hex values and then convert them to an ascii string.

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

ADFSpoof

chisel

A fast TCP/UDP tunnel over HTTP

duckyPad

Do-It-All Mechanical Macropad

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Image_Optimizer

Shell script to optimize and rename images

impacket

Impacket is a collection of Python classes for working with network protocols.

Inveigh

Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

keramas.github.io

mona

Corelan Repository for mona.py

PowerSCCM

PowerSCCM - PowerShell module to interact with SCCM deployments

RedWarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

RPG_Battle

Text-based RPG-style battle system

security

Stuff about it-security that might be good to know

Serverless-Top-10-Project

OWASP Serverless Top 10

Translation_Payment_Tracker

Vulnhub_VM_Walkthroughs

Compendium of walkthroughs for VMs found on Vulnhub