NilangaPerera

OSCE3-Complete-Guide

OSWE, OSEP, OSED, OSEE

CloudFlair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

inceptor

Template-Driven AV/EDR Evasion Framework

wordlists

Real-world infosec wordlists, updated regularly

waf-bypass

Check your WAF before an attacker does

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

BChecks

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

GodGenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

FindUncommonShares

FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer

Amsi_Bypass_In_2023

Amsi Bypass payload that works on Windwos 11

Gsec

Web Security Scanner

Awesome-AV-EDR-XDR-Bypass

Awesome AV/EDR/XDR Bypass Tips

python-x86-obfuscator

This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.

knowsmore

KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

SharpReflectivePEInjection

reflectively load and execute PEs locally and remotely bypassing EDR hooks

SharpLateral

Lateral Movement

chomtesh

CHOMTE.SH is a powerful shell script designed to automate reconnaissance tasks during penetration testing. It utilizes various Go-based tools to gather information and identify the attack surface, making it a valuable asset for bug bounty hunters and penetration testers.

AMSI-Reaper

SCMUACBypass

EvilCrowCable-Pro

Evil Crow Cable Pro device

birdnet-poc

Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

DomainForPhishing

books

📚 I've captured the responses from various discussions of movies, tv shows, books and events that infosec peeps love.

LOLDrivers

Living Off The Land Drivers

mixtape

🎧 tunes we listen to while we hack + code

movies

📺 I've captured the responses from recent slack discussions of movies, tv shows and events that inspired peeps to move into infosec.

Certipy

Tool for Active Directory Certificate Services enumeration and abuse