faloker

bat

A cat(1) clone with wings.

nushell

A new type of shell

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

webshell

This is a webshell open source project

quartz

🌱 a fast, batteries-included static-site generator that transforms Markdown content into fully functional websites

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

ssh3

SSH3: faster and rich secure shell using HTTP/3, checkout our article here: https://arxiv.org/abs/2312.08396 and our Internet-Draft: https://datatracker.ietf.org/doc/draft-michel-ssh3/

tacticalrmm

A remote monitoring & management tool, built with Django, Vue and Go.

MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

NetExec

The Network Execution Tool

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

zrok

Geo-scale, next-generation peer-to-peer sharing platform built on top of OpenZiti.

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

x8

Hidden parameters discovery suite

Security-Datasets

Re-play Security Events

SharPersist

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

SharpUp

SharpUp is a C# port of various PowerUp functionality.

Phishing.Database

Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.

fwknop

Single Packet Authorization > Port Knocking

adPEAS

Powershell tool to automate Active Directory enumeration.

uac

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

AWS-Threat-Simulation-and-Detection

Playing around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic

GAM-Scripts3

Scripts for use with GAM - Python 3.6+

halogen

Automatically create YARA rules from malicious documents.

remoteInjector

Inject remote template link into word document for remote template injection

data-perimeter-policy-examples

Example policies demonstrating how to implement a data perimeter on AWS.

oidc-scanner-aws