Beast code in Giters

iox86's starred repositories

sgn

Shikata ga nai (仕方がない) encoder ported into go with several improvements

Language:GoMIT141800

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

Language:CNOASSERTION121000

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Language:PythonNOASSERTION370700

golden-frieza

ELF launcher for encrypted binaries decrypted on-the-fly and executed in memory

Language:C2600

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Language:ShellMIT176100

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

Language:PythonApache-2.0214100

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

Language:GoApache-2.068200

Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

Language:Java77400

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Language:JavaMIT4100

Cheats

Various Cheat Sheets

17900

P4wnP1_aloa

P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".

Language:JavaScriptGPL-3.0370300

LetMeHID

LetMeHID is a tool that generates Windows HID payloads to obtain bind or reverse access using Raspberry PI0 and P4wnP1 A.L.O.A.

Language:PythonMIT5000

awesome-rtc-hacking

a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE

CC0-1.039300

pentesting-cookbook

A set of recipes useful in pentesting and red teaming scenarios

Language:PowerShell13600

rpivot

socks4 reverse proxy for penetration testing

Language:Python55000

phishlets

Phishlets for Evilginx2 (MITM proxy Framework)

GPL-3.014500

gscript

framework to rapidly implement custom droppers for all three major operating systems

Language:GoAGPL-3.067100

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

Language:CNOASSERTION121600

DomainCheck

DomainCheck is designed to assist operators with monitoring changes related to their domain names. This includes negative changes in categorization, VirusTotal detections, and appearances on malware blacklists. DomainCheck currently works only with NameCheap.

Language:Python23000

iox86