Karl Fritz's starred repositories
VolUtility
Web App for Volatility framework
Malleable-C2-Profiles
Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
RottenPotato
RottenPotato local privilege escalation from service account to SYSTEM
PowerTools
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
mimikittenz
A post-exploitation powershell tool for extracting juicy info from memory.
API-fuzzer
API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
windows-privesc-check
Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems
mobile-threat-catalogue
NIST/NCCoE Mobile Threat Catalogue
flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
LSB-Steganography
Python program to steganography files into images using the Least Significant Bit.
GRASSMARLIN
Provides situational awareness of Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) networks in support of network security assessments. #nsacyber
MailSniper
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.
PowerShell
PowerShell for every system!
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
TLS-Attacker
TLS-Attacker is a Java-based framework for analyzing TLS libraries. It can be used to manually test TLS clients and servers or as as a software library for more advanced tools.
awesome-sec-talks
A collected list of awesome security talks
nexpose-client
DEPRECATED: Rapid7 Nexpose API client library written in Ruby
metasploit-payloads
Unified repository for different Metasploit Framework payloads
metasploit-cache
Managing Metasploit content since 2015