X1pe0

huginn

Create agents that monitor and act on your behalf. Your agents are standing by!

posthog

🦔 PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host.

sniffnet

Comfortably monitor your Internet traffic 🕵️‍♂️

opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

openhaystack

Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.

neko

A self hosted virtual browser that runs in docker and uses WebRTC.

handwriting-synthesis

Handwriting Synthesis with RNNs ✏️

Project-Quantum

超迷你模块化卡片电脑计划

remoteapptool

Create and manage RemoteApps hosted on Windows 7, 8, 10, 11, XP and Server. Generate RDP and MSI files for clients.

JAWS

JAWS - Just Another Windows (Enum) Script

medicat_installer

Medicat Installer Repo

DetectDee

DetectDee: Hunt down social media accounts by username, email or phone across social networks.

HiddenDesktop

HVNC for Cobalt Strike

zip-slip-vulnerability

Zip Slip Vulnerability (Arbitrary file write through archive extraction)

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

o365recon

retrieve information via O365 and AzureAD with a valid cred

raspberry-noaa-v2

V2 of the fantastic Raspberry Pi NOAA setup

Revenant

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

HyperDeceit

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system tasks with ease.

raweb

A simple web interface for your RemoteApps hosted on Win 7, 8, 10 and Server

skyhook

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

dmarcts-report-parser

A Perl based tool to parse DMARC reports from an IMAP mailbox or from the filesystem, and insert the information into a database. ( Formerly known as imap-dmarcts )

KittyStager

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to be able to have a web server and some kitten and be able to use the with any shellcode.

through_the_wire

CVE-2022-26134 Proof of Concept

file-archiver-in-the-browser

wtfbins

WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.

RunAsPasswd

A RunAs clone with the ability to specify the password as an argument.

ScrapingKit

Scraping Kit is made up of several tools for scraping services for keywords, useful for initial enumeration of Domain Controllers or if you have popped a user's desktop and their outlook client.

Shell3er

PowerShell Reverse Shell

DomainPasswordSpray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!