TartarusLabs

OneRuleToRuleThemStill

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Expeditus

Expeditus is a loader that executes shellcode on a target Windows system. It combines several offensive techniques in order to attempt to do this with some level of stealth.

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

Cronos-Rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

CACTUSTORCH

CACTUSTORCH: Payload Generation for Adversary Simulations

DarkLoadLibrary

LoadLibrary for offensive operations

DotNetToJScript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

Shellcoding

Shellcoding utilities

Crypto-Tricks

This repo is a collection of proof-of-concepts, examples, essays and experiments in cryptography, cryptanalysis, steganography and covert channels that I originally wrote in 2015.

Cobra

Source Code Security Audit (源代码安全审计)

Burp-Request-Signer

Burp extension to sign Payment Gateway API requests by calculating a variation of a HMAC-SHA512 and adding it to the request.

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

CyberChef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Coyote

Coyote is a standalone C# post-exploitation implant for maintaining access to compromised Windows infrastructure during red team engagements using DNS tunneling.

nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

Veil

Veil 3.1.X (Check version info in Veil at runtime)

GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

gym-malware

apkinfector

Advanced Android AV Evasion Tool Written In Python 3 that can Embed/Bind meterpreter APK to any Legitimate APK

Android-InsecureBankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

afl-cov

Produce code coverage results with gcov from afl-fuzz test cases

Awesome-Fuzzing

A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Generic-University

Vulnerable API

openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

kiterunner

Contextual Content Discovery Tool

osmedeus-base

Build your own reconnaissance system with Osmedeus Next Generation