bewniac

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

flawfix

FlawFix Backend - Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy, Compliance to security Frameworks - OWASP Incubating Project

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

VirtualGHOST

VirtualGHOST Detection Tool

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

germy

GERMY is a Linux Kernel n-day in the N_GSM line discipline

SharpGraphView

Microsoft Graph API post-exploitation toolkit

devopspass

DevOps Pass AI - Keep DevOps Simple Stupid

PingCastle-Notify

Monitor your PingCastle scans to highlight the rule diff between two scans

llm-security-101

Delving into the Realm of LLM Security: An Exploration of Offensive and Defensive Tools, Unveiling Their Present Capabilities.

opentofu

OpenTofu lets you declaratively manage your cloud infrastructure.

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

HSC24RedTeamInfra

Slides and Codes used for the workshop Red Team Infrastructure Automation

UserManagerEoP

attackgen

AttackGen is a cybersecurity incident response testing tool that leverages the power of large language models and the comprehensive MITRE ATT&CK framework. The tool generates tailored incident response scenarios based on user-selected threat actor groups and your organisation's details.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

RustRedOps

🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language

connectwise-screenconnect_auth-bypass-add-user-poc

ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to DM if you find some bugs :)

UAC-BOF-Bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

SharpADWS

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

GPOddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

SharpRODC

To audit the security of read-only domain controllers

MDE-DFIR-Resources

A curated list of resources for DFIR through Microsoft Defender for Endpoint leveraging kusto queries, powershell scripts, tools such as KAPE and THOR Cloud and more.

gocheck

Because AV evasion should be easy.

raven

CI/CD Security Analyzer

OffensiveCpp

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.