SolomonSklash

goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

hoarder

A self-hostable bookmark-everything app (links, notes and images) with AI-based automatic tagging and full text search

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

nmap-did-what

Nmap Dashboard Mini Project

Voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

icmptunnel

Tunnel IP over ICMP.

PingRAT

PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.

Invoke-ADEnum

Automate Active Directory Enumeration

icmpdoor

ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

IconJector

Unorthodox and stealthy way to inject a DLL into the explorer using icons

RdpStrike

Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.

The_Shelf

Retired TrustedSec Capabilities

ImmoralFiber

Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)

gcpwn

Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

SteppingStones

A Red Team Activity Hub

ETWInspector

IPPrintC2

PoC for using MS Windows printers for persistence / command and control via Internet Printing

MSC_Dropper

conpass

Continuous password spraying tool

Invoke-RunAsWithCert

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

c2-cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly interface.

ShadowStackWalk

Finding Truth in the Shadows

TrollDump

CelestialSpark

A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust

gimmick

Section-based payload obfuscation technique for x64

FetchPayloadFromDummyFile

Construct the payload at runtime using an array of offsets

MAT

This tool, programmed in C#, allows for the fast discovery and exploitation of vulnerabilities in MSSQL servers

squeegee

A collection of tools using OCR to extract potential usernames from RDP screenshots.

RtlClone