jack51706

sgCheckup

sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.

PowerShellForPentesters

Course repository for PowerShell for Pentesters Course

scantron

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

LiquidSnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

BeaconEye

Hunts out CobaltStrike beacons and logs operator command output

LazySign

Create fake certs for binaries using windows binaries and the power of bat files

EDD

Enumerate Domain Data

kubescape

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

CamPhish

Grab cam shots from target's phone front camera or PC webcam just sending a link.

ProxyShell

ProxyShell POC Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)

mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

Redlinestealer2020

New Redline Leak

proxyshell-poc

useful_random_stuff

Just some things that have some cool uses

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

KnockOutlook

A little tool to play with Outlook

zuthaka

Zuthaka is an open source application designed to assist red-teaming efforts, by simplifying the task of managing different APTs and other post-exploitation tools.

dnsmonster

Passive DNS Capture and Monitoring Toolkit

injectAmsiBypass

Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.

Beginners-Guide-to-Obfuscation

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

CyberPipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

BadAssMacros

BadAssMacros - C# based automated Malicous Macro Generator.

PickleC2

PickleC2 is a post-exploitation and lateral movements framework

HookHunter

Analyze patches in a process

CredPhish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

hack-cs-tools

client side (C-S) penetration toolkit

CS-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist