YSGoh

NewPipe

A libre lightweight streaming front-end for Android.

winutil

Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates

ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

bypass-403

A simple script just made for self use for bypassing 403

evilgophish

evilginx3 + gophish

vscan

开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

Mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

Shhhloader

Syscall Shellcode Loader (Work in Progress)

TangledWinExec

PoCs and tools for investigation of Windows process execution techniques

gargoyle

A memory scanning evasion technique

NetLoader

Loads any C# binary in mem, patching AMSI + ETW.

AzureGoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

cdncheck

A utility to detect various technology for a given IP address.

SecurityList

A list for Web Security and Code Audit

RustHound

Active Directory data collector for BloodHound written in Rust. 🦀

PyFuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

mx-takeover

mx-takeover focuses DNS MX records and detects misconfigured MX records.

code-inspector

JavaWeb漏洞审计工具，构建方法调用链并模拟栈帧进行分析

KillDefenderBOF

Beacon Object File PoC implementation of KillDefender

DNS_Tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

DCMB

Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!

KDStab

BOF combination of KillDefender and Backstab

WTSRM2

azbelt

AAD related enumeration in Nim

Cohab_Processes

A small Aggressor script to help Red Teams identify foreign processes on a host machine