fbkch

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ghidra

Ghidra is a software reverse engineering (SRE) framework

Deep-Learning-Papers-Reading-Roadmap

Deep Learning papers reading roadmap for anyone who are eager to learn this amazing tech!

mimikatz

A little tool to play with Windows security

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

impacket

Impacket is a collection of Python classes for working with network protocols.

pwntools

CTF framework and exploit development library

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

BloodHound

Six Degrees of Domain Admin

CrackMapExec

A swiss army knife for pentesting networks

Empire

Empire is a PowerShell and Python post-exploitation agent.

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

Rubeus

Trying to tame the three-headed dog.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

PrintSpoofer

Abusing impersonation privileges through the "Printer Bug"

SharpShooter

Payload Generation Framework

GraphQLmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

SharpUp

SharpUp is a C# port of various PowerUp functionality.

Powermad

PowerShell MachineAccountQuota and DNS exploit tools

krbrelayx

Kerberos unconstrained delegation abuse toolkit

muraena

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

Ten-lines-or-less

Python scripts that are short but useful or interesting

EXCELntDonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

HostRecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

adlab

OSED_Resources

A curated list of resources for the OSED journey.

misc

Tools I wrote for personal use in C, Python, Powershell, Bash, ...