mgeeky

roop

one-click face swap

arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

dot

The Deepfake Offensive Toolkit

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

semantra

Multi-tool for semantic search

roop-unleashed

Evolved Fork of roop with Web Server and lots of additions

xca

X Certificate and Key management

WLED

Control WS2812B and many more types of digital RGB LEDs with an ESP32 over WiFi.

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

ja4

JA4+ is a suite of network fingerprinting standards

msg-extractor

Extracts emails and attachments saved in Microsoft Outlook's .msg files

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

BounceBack

↕️🤫 Stealth redirector for your red team operation security

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

evilrdp

lsa-whisperer

Tools for interacting with authentication packages using their individual message protocols

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW

silentbridge

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

doods2

API for detecting objects in images and video streams using Tensorflow

RWX_MEMEORY_HUNT_AND_INJECTION_DV

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

github-gitea-mirror

Simple Python Script To Mirror Repository From Github To Gitea

MDE_Enum

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

IndicatorOfCanary

Canary Detection

CVE-2024-3400

CVE-2024-3400 Palo Alto OS Command Injection

Monocle

Tooling backed by an LLM for performing natural language searches against compiled target binaries. Search for encryption logic, password strings, vulnerabilities, etc.

IronSharpPack

IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then reflective load the C# project.

CloudInject

CVE-2023-34362

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE

AutomatedBadLab

InfoSec focused Custom Roles for AutomatedLab

cloud-hacking-labs

A not-curated list of cloud hacking labs