boringthegod

domscan

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

PECracker

针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificate segment infection are supported.

SCCMSecrets

SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.

tldfinder

A streamlined tool for discovering TLDs, associated domains, and related domain names.

windows_sleep_techniques

A collections of methods to sleep on Windows using common and less-so-common techniques

dnscovery

Discover services embedded in a site's DNS records

wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available

TrickDump

Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

ICMP-TransferTools

Transfer files to and from a Windows host via ICMP in restricted network environments.

Shwmae

Graphpython

Modular cross-platform Microsoft Graph API (Entra, o365, and Intune) enumeration and exploitation toolkit

Maestro

grimoire

Generate datasets of cloud audit logs for common attacks

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

h2spacex

HTTP/2 Single Packet Attack low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

splitting-the-email-atom

cerbero

Kerberos protocol attacker

voice-changer

リアルタイムボイスチェンジャー Realtime Voice Changer

Retrieval-based-Voice-Conversion-WebUI

Easily train a good VC model with voice data <= 10 mins!

Deep-Live-Cam

real time face swap and one-click video deepfake with only a single image

deepface

A Lightweight Face Recognition and Facial Attribute Analysis (Age, Gender, Emotion and Race) Library for Python

EXOCET-AV-Evasion

EXOCET - AV-evading, undetectable, payload delivery tool

BinarySpy

一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.

LayeredSyscall

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.

BadExclusionsNWBO

BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR

goop

Yet another tool to dump a git repository from a website, focused on as-complete-as-possible dumps and handling weird edge-cases.

bypass-bot-detection

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

smbtakeover

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

CloudRecon

eza

A modern alternative to ls