chuck2909

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

spy-pixel

A spy pixel which can be emedded into web pages or emails.

Data-Acquisition-OSINT

You can find links to data acquisition websites.

awesome-web-hacking

A list of web application security

skyhook

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

Voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

XnlReveal

A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements.

toutatis

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

Security-101

8 Lessons, Kick-start Your Cybersecurity Learning.

Havoc-C2-SSRF-poc

Havoc C2 0.7 Teamserver SSRF exploit

IHxExec

Process injection alternative

ADSpider

Monitor changes in Active Directory with replication metadata

bifrost

Objective-C library and console to interact with Heimdal APIs for macOS Kerberos

RemoteSessionEnum

Remotely Enumerate sessions using undocumented Windows Station APIs

incidental

An opensource incident management platform integrating with Slack.

collateral-damage

Kernel exploit for Xbox SystemOS using CVE-2024-30088

lemma

Remote CLI tools at your fingertips

JScripter

JScripter is a Python script designed to scrape and save unique JavaScript files from a list of URLs or a single URL.

theHarvester

E-mails, subdomains and names Harvester - OSINT

mimikatz

ssdeep

Fuzzy hashing API and fuzzy hashing tool

dfir-toolkit

CLI tools for forensic investigation of Windows artifacts

CVE-2024-4879

CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow

Parth

Heuristic Vulnerable Parameter Scanner

Android-iOS-Cheat-Sheet

binaryninja-ollama

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

blackbox-fuzzing

Fuzzing IoT Devices Using the Router TL-WR902AC as Example

SMBGhost_RCE_PoC