hookech0

mimikatz

A little tool to play with Windows security

impacket

Impacket is a collection of Python classes for working with network protocols.

LeakedWallpaper

Leak of any user's NetNTLM hash. Fixed in KB5040434

windows_hardening

HardeningKitty and Windows Hardening Settings

pre2k

ASPJinjaObfuscator

Heavily obfuscated ASP web shell generation tool.

email2phonenumber

A OSINT tool to obtain a target's phone number just by having his email address

Invoke-ADEnum

Automate Active Directory Enumeration

Shellcode-Loader

This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.

RemoteKrbRelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

ScrapedIn

A tool to scrape LinkedIn without API restrictions for data reconnaissance

fragtunnel

Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation firewalls en route to the target.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

TREVORspray

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

Volumiser

PowerLurk

Malicious WMI Events using PowerShell

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

remoteInjector

Inject remote template link into word document for remote template injection

PhishingTemplates

LinkedInt

LinkedIn Recon Tool

IconJector

Unorthodox and stealthy way to inject a DLL into the explorer using icons

nmap-parse-output

Converts/manipulates/extracts data from a Nmap scan output.

ROADtools

A collection of Azure AD/Entra tools for offensive and defensive security purposes

ProtectMyTooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

OffensiveCSharp

Collection of Offensive C# Tooling

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

Nimperiments

Various one-off pentesting projects written in Nim. Updates happen on a whim.

Dirty-Vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417