br3ach3r-fff

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

the_cyber_plumbers_handbook

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Exegol

Fully featured and community-driven hacking environment

gsocket

Connect like there is no firewall. Securely.

cpu-internals

Intel / AMD CPU Internals

psudohash

Generates millions of keyword-based password mutations in seconds.

Kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

Windows-Local-Privilege-Escalation-Cookbook

Windows Local Privilege Escalation Cookbook

PsMapExec

A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

omg-payloads

Official payload library for the O.MG line of products from Mischief Gadgets

CSSG

Cobalt Strike Shellcode Generator

DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

Nemesis

An offensive data enrichment pipeline

SharpSCCM

A C# utility for interacting with SCCM

cookbook

OperatorsKit

Collection of Beacon Object Files (BOF) for Cobalt Strike

SQLRecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

Amsi_Bypass_In_2023

Amsi Bypass payload that works on Windwos 11

Linux-Incident-Response

practical toolkit for cybersecurity and IT professionals. It features a detailed Linux cheatsheet for incident response

Eyes

🕵️ Email osint tool

OffensiveCloud

Offensive security and Penetration Testing TTP for Cloud based environment (AWS / Azure / GCP)

CVE-2023-36874

ShowMeThePackets

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

CVE-2023-36874_BOF

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

PhishingTemplates

WMIProcessWatcher

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

juniper-rce_cve-2023-36844

Keres

Persistent Powershell backdoor tool {😈}