mgeeky

DeepFaceLive

Real-time face swap for PC streaming or video calls

crypto-js

JavaScript library of crypto standards.

dot

The Deepfake Offensive Toolkit

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

roop-unleashed

Evolved Fork of roop with Web Server and lots of additions

xca

X Certificate and Key management

WLED

Control WS2812B and many more types of digital RGB LEDs with an ESP32 over WiFi.

ja4

JA4+ is a suite of network fingerprinting standards

msg-extractor

Extracts emails and attachments saved in Microsoft Outlook's .msg files

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

BounceBack

↕️🤫 Stealth redirector for your red team operation security

Evilginx2-Phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

IconJector

Unorthodox and stealthy way to inject a DLL into the explorer using icons

lsa-whisperer

Tools for interacting with authentication packages using their individual message protocols

evilrdp

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

silentbridge

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

doods2

API for detecting objects in images and video streams using Tensorflow

CVE-2024-26229-BOF

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

esphome-panasonic-ac

Open source alternative for Panasonic air condition wifi adapters that works locally without the Comfort Cloud

RWX_MEMEORY_HUNT_AND_INJECTION_DV

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

MDE_Enum

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

DirtyCLR

An App Domain Manager Injection DLL PoC on steroids

CVE-2024-3400

CVE-2024-3400 Palo Alto OS Command Injection

Invoke-DumpMDEConfig

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

Monocle

Tooling backed by an LLM for performing natural language searches against compiled target binaries. Search for encryption logic, password strings, vulnerabilities, etc.

IronSharpPack

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE

cloud-hacking-labs

A not-curated list of cloud hacking labs