g0xp1

nanodump

The swiss army knife of LSASS dumping

DonPAPI

Dumping DPAPI credz remotely

memory-baseliner

Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on multiple such images

VanillaWindowsReference

A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!

Invoke-Obfuscation

PowerShell Obfuscator

APTnotes

Various public documents, whitepapers and articles about APT campaigns

awesome-osint

:scream: A curated list of amazingly awesome OSINT

TgUserDetails

Fetch detailed Telegram user and chat info using this Python script with Telethon. Download profile pictures and more!

PoshKPBrute

Powershell Keepass Brute Force Tool

grab_beacon_config

srum-dump

A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.

Talks-and-Presentations

Slides and Other Resources from my latest Talks and Presentations

Z0FCourse_ReverseEngineering

Reverse engineering focusing on x64 Windows.

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

binwalk

Firmware Analysis Tool

SliverC2-Forensics

A collection of tools and detections for the Sliver C2 Frameworj

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

Rubeus

Trying to tame the three-headed dog.

SharPersist

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

LOLDrivers

Living Off The Land Drivers

impacket

Impacket is a collection of Python classes for working with network protocols.

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

LinkedInt

LinkedIn Recon Tool

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

arttoolkit.github.io

A RedTeam Toolkit

deepdarkCTI

Collection of Cyber Threat Intelligence sources from the deep and dark web