MadHatt3R-0x90

Evilginx-Phishing-Infra-Setup

Evilginx Phishing Engagement Infrastructure Setup Guide

private-gpt

Interact with your documents using the power of GPT, 100% privately, no data leaks

html5-boilerplate

A professional front-end template for building fast, robust, and adaptable web apps or sites.

jsforhackers

Code for "JavaScript For Hackers" mini-course

Storm-Breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With {Py,JS,PHP}

FlavorTown

Various ways to execute shellcode

DC30_Workshop

DEFCON 30 Mainframe buffer overlow workshop container

cisco_asa_research

Cisco ASA Software and ASDM Security Research

AceLdr

Cobalt Strike UDRL for memory scanner evasion.

CredSniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

Modlishka

Modlishka. Reverse Proxy.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

aquatone

A Tool for Domain Flyovers

SharpWSUS

rp

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

InstallerFileTakeOver

DLL-Hijack-Search-Order-BOF

DLL Hijack Search Order Enumeration BOF

OffensiveVBA

This repo covers some code execution and AV Evasion methods for Macros in Office documents

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

sliver

Adversary Emulation Framework

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

RunPE

C# Reflective loader for unmanaged binaries.

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

ADCSPwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

HiveNightmare

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

SpoolSploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.