j3seer

remotechrome

dump Chrome cookies remotely with atexec and CDP

pyrdp

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

vbindiff

Visual Binary Diff (VBinDiff) displays files in hex & ASCII and can highlight the differences between 2 files

katana

A next-generation crawling and spidering framework.

faction

Pen Test Report Generation and Assessment Collaboration

ChromeKatz

Dump cookies and credentials directly from Chrome/Edge process memory

mimikatz2.1.1

Old version of mimikatz for OSCP labs

keyring

Proper Payload Protection Prevents Poor Performance

JNDI-Injection-Exploit-Plus

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

SerialKillerBypassGadgetCollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

Deaddrop

Secure, authenticated, and monitored file 'dead drops'

MultiDump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

MagBastard

Magnanimous Bastard

shortscan

An IIS short filename enumeration tool

jaguar

Jaguar, a server framework built for speed, simplicity and extensible. ORM, Session, Authentication & Authorization, OAuth

Easy-GPU-PV

A Project dedicated to making GPU Partitioning on Windows easier!

Process-Injection-Techniques

Various Process Injection Techniques

SharpUp

SharpUp is a C# port of various PowerUp functionality.

PWA-Phishing

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

SharpBlock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Havoc

The Havoc Framework.

attack-coverage

an excel-centric approach for the MITRE ATT&CK® Tactics and Techniques

HRShell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

PowerHub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

CarbonCopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

DLLirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

ReflectiveDLLInjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.