eklypze

LAPSToolkit

Tool to audit and attack LAPS environments

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

Optimize-WsusServer

Comprehensive Windows Server Update Services (WSUS) cleanup, optimization, maintenance, and configuration PowerShell script.

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

Havoc

The Havoc Framework.

terminator

multiple GNOME terminals in one window

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell

Web-Shells

websocat

Command-line client for WebSockets, like netcat (or curl) for ws:// with advanced socat-like functions

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

espnet

End-to-End Speech Processing Toolkit

kns

quick Kubernetes Namespace Switcher

PentestGPT

A GPT-empowered penetration testing tool

AskJOE

This is a Ghidra script that calls OPENAI to give meaning to decompiled functions

tfsec

Tfsec is now part of Trivy

postee

Notice: Postee is no longer under active development or maintenance.

Kali-Parrot_Dual_Monitor

Fix the Issue (OS can not detect HDMI monitors)

pwnbox

Instructions on how to create your very own Pwnbox, originally created by HTB

terraformer

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

PMapper

A tool for quickly evaluating IAM permissions in AWS.

panw-partner-wiki

aws-toolbox

This repository contains a collection of awesome tools and scripts for Developers and Engineers seeking to automate routine tasks on AWS Cloud.

azureOutlookC2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

yq

yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

kube_security_lab

dive

A tool for exploring each layer in a docker image

keyctl-unmask

Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.