malyshusness

AzureHound

BeRoot

Privilege Escalation Project - Windows / Linux / Mac

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

CVE-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

CVE-2021-33909

Sequoia exploit (7/20/21)

dnSpy

.NET debugger and assembly editor

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exploit-writing-for-oswe

Tips on how to write exploit scripts (faster!)

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

flare-vm

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

hate_crack

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

LOLBAS

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

OffensiveGoLang

A collection of Offensive Go packages.

penelope

Penelope Shell Handler

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pwnbox

Instructions on how to create your very own Pwnbox, originally created by HTB

pwntools

CTF framework and exploit development library

pypykatz

Mimikatz implementation in pure Python

random-python

Various Python scripts that have come in handy but aren't important enough to get their own repository

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

ScoutSuite

Multi-Cloud Security Auditing Tool

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

SharpSploit

SharpSploit is a .NET post-exploitation library written in C#

SilkETW

Stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

VECTR

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

wifite2

Rewrite of the popular wireless network auditor, "wifite"