gurubyte

rspe

Simple Native Rust Reflective PE loader library

pe_to_shellcode

Converts PE into a shellcode

InflativeLoading

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

venom-rs

Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)

eagle-rs

Rusty Rootkit - Windows Kernel Rookit in Rust (Codename: Eagle)

PowerShell-Obfuscation-Bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

pentest-pivoting

A compact guide to network pivoting for penetration testings / CTF challenges.

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

bof_template

A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beacon agent with new post-exploitation features.

bof-vs

A Beacon Object File (BOF) template for Visual Studio

Aggressor-Aggregator

A helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.

impacket

Impacket is a collection of Python classes for working with network protocols.

Whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Rubeus

Trying to tame the three-headed dog.

mimikatz

A little tool to play with Windows security

SharpUp

SharpUp is a C# port of various PowerUp functionality.

SharPersist

PhishingTemplates

linkedin_scraper

A library that scrapes Linkedin for user data

ShodanX

ShodanX is a tool to gather information of targets using shodan dorks⚡.

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

CVENotifier

Customized CVE FEED Notifier

RedTeam

This repo offers notes and resources on ethical hacking, covering information gathering, scanning, web hacking, exploitation, and Windows/Linux hacking.

WindMine

A BashBunny Payload To Install A Silent Monero Miner On Windows Computers.

bbot

A recursive internet scanner for hackers.

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

xcap

XCap is a cross-platform screen capture library written in Rust. It supports Linux (X11, Wayland), MacOS, and Windows. XCap supports screenshot and video recording (to be implemented).