mhackampari

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Ninja

Open source C2 server created for stealth red team operations

GreatSCT

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

racepwn

Race Condition framework

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

LKWA

Lesser Known Web Attack Lab

dnsprobe

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

default-http-login-hunter

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

awesome-thesis

A curated list of practical tips and tricks to help you achieve an awesome CS master thesis [WIP] - contributions are welcome

HUNT

Phantom-Evasion

Python antivirus evasion tool

avet

AntiVirus Evasion Tool

WinPwnage

UAC bypass, Elevate, Persistence methods

AVSignSeek

Tool written in python3 to determine where the AV signature is located in a binary/payload

Inception

Provides In-memory compilation and reflective loading of C# apps for AV evasion.

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

byob

An open-source post-exploitation framework for students, researchers and developers.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

tactical-exploitation

Modern tactical exploitation toolkit.

SharpShooter

Payload Generation Framework

WMI_Backdoor

A PoC WMI backdoor presented at Black Hat 2015

PowerShellArsenal

A PowerShell Module Dedicated to Reverse Engineering

CeWL

CeWL is a Custom Word List Generator

datasketch

MinHash, LSH, LSH Forest, Weighted MinHash, HyperLogLog, HyperLogLog++, LSH Ensemble and HNSW

simhash

A Python Implementation of Simhash Algorithm

mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

driller

Driller: augmenting AFL with symbolic execution!

antivmdetection

Script to create templates to use with VirtualBox to make vm detection harder