mhaskar

hashcat

World's fastest and most advanced password recovery utility

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Rubeus

Trying to tame the three-headed dog.

SigThief

Stealing Signatures and Making One Invalid Signature at a Time

EDRSandblast

Backstab

A tool to kill antimalware protected processes

OffensiveCSharp

Collection of Offensive C# Tooling

HiddenDesktop

HVNC for Cobalt Strike

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

procyon

Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.

awspx

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

EvilnoVNC

Ready to go Phishing Platform

Inline-Execute-PE

Execute unmanaged Windows executables in CobaltStrike Beacons

DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

GetMail

利用NTLM Hash读取Exchange邮件

MacDirtyCowDemo

Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

APCLdr

Payload Loader With Evasion Features

ETWHash

C# POC to extract NetNTLMv1/v2 hashes from ETW provider

apache2_BackdoorMod

A backdoor module for Apache2

Find-Hardcoded

You can find hardcoded Api-Key,Secret,Token Etc..

ServerlessRedirector

Serverless Redirector in various cloud vendor for red team

SharpZippo

List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly

RedWardenLite

A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.

thorn

🌹 Thorn is an open-source, data privacy vault to store and manage PII in a fully compliant manner.

CVE-2022-36804-PoC-Exploit

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)

venlock

Detect and block introduction of unapproved 3rd party libraries. Typically used in a CI.