henshin

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Rubeus

Trying to tame the three-headed dog.

Hash-Buster

Crack hashes in seconds.

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

ExchangeRelayX

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

CVE-2017-8759

NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements

headless-burp

Automate security tests using Burp Suite.

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

Red-Baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

dirsearch

Web path scanner

archaeologit

Archaeologit scans the history of a user's GitHub repositories for a given pattern to find sensitive things.

BlindElephant

Getting BlindElephant into a working state, and updating the plugin files

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

cutter

Free and Open Source Reverse Engineering Platform powered by rizin

Invoke-WMILM

XFLTReaT

XFLTReaT tunnelling framework

AppSecEzine

AppSec Ezine Public Repository.

THC-Archive

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

minidump

Python library to parse and read Microsoft minidump file format

pypykatz

Mimikatz implementation in pure Python

chunkyTuna

An interactive webshell and HTTP tunnel for TCP connections using chunked transfer encoding

hacking-material-books

collection of articles/books about programing

EmbedInHTML

Embed and hide any file in an HTML file

J2EEScan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.