iox86

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

awesome-tunneling

List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

DefenderCheck

Identifies the bytes that Microsoft Defender flags on.

Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

SharpShooter

Payload Generation Framework

ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

awesome-linux-rootkits

awesome-linux-rootkits

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

OffensiveCSharp

Collection of Offensive C# Tooling

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

Pentest-Tools-Collection

meterssh

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network.

RedRabbit

Red Team PowerShell Script

binjection

Injects additional machine instructions into various binary formats.

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

crash

crypted admin shell: SSH-like strong crypto remote admin shell for Linux, BSD, Android, Solaris and OSX

NativePayload_Reverse_tcp

Meterpreter Encrypted Payload by C#

SharpPack

An Insider Threat Toolkit

FileSend

Simple, encrypted file sharing. https://filesend.standardnotes.com

psc

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

spotter

Targeted Payload Execution

ycsm

This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).

voipwardialer

A Voip Wardialer for the phreaking of 2020

x25zine

Collection of old X.25 related e-zine

nuascanner

Nua Scanner over Cisco IOS telnet terminal