Ridful

G-Trader

G-Earth extension for Habbo Origins

G-Earth

Cross-platform Habbo packet manipulator

G-Inventory-Viewer

Habbo Origins supported G-Earth extension to view inventory item count and IDs

G-Earth

Cross-platform Habbo packet manipulator

goearth

Go extension API for G-Earth.

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

AMSITrigger

The Hunt for Malicious Strings

hercules

Mythic Developer Series: Workshop Golang Agent

poseidon

Poseidon is a Golang agent targeting Linux and macOS

Mythic

A collaborative, multi-platform, red teaming framework

WDExtract

Extract Windows Defender database from vdm files and unpack it

UBoat

HTTP Botnet

Ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

IPObfuscator

A simple tool to convert the IP to a DWORD IP

UAC-BOF-Bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

vncdll

Stand-alone VNC server compiled as a Reflective DLL

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

Windows10Debloater

Script to remove Windows 10 bloatware.

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

c_std

Implementation of C++ standard libraries in C

Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

ThievingFox

linWinPwn

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Win32_Offensive_Cheatsheet

Win32 and Kernel abusing techniques for pentesters

BobTheSmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

uac-bypass-oneliners

Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applications to elevate privileges.