NoF0rte

kratos

The most scalable and customizable identity server on the market. Replace your Homegrown, Auth0, Okta, Firebase with better UX and DX. Has all the tablestakes: Passkeys, Social Sign In, Multi-Factor Auth, SMS, SAML, TOTP, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

lux

👾 Fast and simple video download library and CLI tool written in Go

spotify

A Go wrapper for the Spotify Web API

WhoAmISlack

Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.

WatchYourLAN

Lightweight network IP scanner. Can be used to notify about new hosts and monitor host online/offline history

yazi

💥 Blazing fast terminal file manager written in Rust, based on async I/O.

Tempest

A command and control framework written in rust.

cstc

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

rmm

Recon MindMap (RMM)

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

humanify

Deobfuscate Javascript code using ChatGPT

Platypus

Create native Mac applications from command line scripts.

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

OSEP-Tools

WALK_WebAssembly_Lure_Krafter

A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims at aiding with initial access during red teams and phishing exercises leveraging WASM smuggling techniques.

PWA-Phishing

CursedChrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

crux

A proof-of-concept malicious Chrome extension

go-winres

Command line tool for adding Windows resources to executable files

sql-injection-payload-list

🎯 SQL Injection Payload List

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

GoPurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

The_Shelf

Retired TrustedSec Capabilities

OffensiveGolang

A collection of offensive Go packages inspired by different Go repositories.