b-l4ck

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

PentesterOps

Penetration Testing with Kali Linux

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

Freeway

WiFi Penetration Testing & Auditing Tool

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

github-secrets

This tool analyzes a given Github repository and searches for dangling or force-pushed commits containing potential secret or interesting information.

certina

Certina is an OSINT tool for red teamers and bug hunters to discover subdomains from web certificate data

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

windows-privilege-escalation

this repo is for windows privilege escalation technique

ntlm_theft

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

wigle-wifi-wardriving

Nethugging client for Android, from wigle.net

post-exploitation-wiki

Post Exploitation Wiki

post-exploitation

Post Exploitation Collection

BlueDucky

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

hi_my_name_is_keyboard

NetExec

The Network Execution Tool

NoArgs

NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly.

PrivescCheck

Privilege Escalation Enumeration Script for Windows

CommandInWiFi-Zeroclick

CommandInWiFi: Investigating Command Injection Flaws in WiFi Access Point Storage

dirsearch

Web path scanner

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

nomore403

Tool to bypass 403/40X response codes.

ranger

A tool for security professionals to access and interact with remote Microsoft Windows based systems.

gasmask

Information gathering tool - OSINT

CVE-2023-22515-Scan

Scanner for CVE-2023-22515 - Broken Access Control Vulnerability in Atlassian Confluence

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

nfc-pcsc

Easy reading and writing NFC tags and cards in Node.js