its0x08

tailscale

The easiest, most secure way to use WireGuard and 2FA.

wireproxy

Wireguard client that exposes itself as a socks5 proxy

usbrubberducky-payloads

The Official USB Rubber Ducky Payload Repository

ssh-audit

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

proxmark3

Proxmark 3

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

PentesterSpecialDict

Dictionary sets often used in penetration testing work , 渗透测试工作中经常使用的字典集。

Qu1cksc0pe

All-in-One malware analysis tool.

ExploitGSM

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

Cubic

The Official Web Site for Cubic (Custom Ubuntu ISO Creator) (https://github.com/PJ-Singh-001/Cubic)

Offensive-OSINT-Tools

OffSec OSINT Pentest/RedTeam Tools

FindMyFlipper

The FindMy Flipper app turns your FlipperZero into an AirTag or other tracking device, compatible with Apple AirTags and Samsung SmartTag and Tile Trackers. It uses the BLE beacon to broadcast, allowing users to clone existing tags, generate OpenHaystack key pairs for Apple's FindMy network, and customize beacon intervals and transmit power.

toolkit

The essential toolkit for reversing, malware analysis, and cracking

Active_Directory_Advanced_Threat_Hunting

This repo is about Active Directory Advanced Threat Hunting

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

xcyclopedia

Encyclopedia for Executables

streamflix

An Android TV and mobile app to stream movies and TV shows for free

go-secdump

Tool to remotely dump secrets from the Windows registry

VolWeb

A centralized and enhanced memory analysis platform

pentesting-active-directory

Active Directory pentesting mind map

NativeDump

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

adPEAS

winPEAS, but for Active Directory

JiaTansSSHAgent

OK-VPS

Bug Bounty Vps Setup Tools

OUned

The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning

wcreddump

Fully automated windows credentials dumper, from SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with a mounted windows drive.

xiaomi-note-exporter

Export your notes stored on Mi Cloud to Markdown files 📝➡️🧾

Lestat

Check robustness of your (their) Active Directory accounts passwords

Vulnerability-Checklist

This comprehensive checklist has been Created for penetration testers and bug hunters seeking to identify and exploit vulnerabilities in web applications.

CVE-2024-1698-Exploit

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.