mikismaos

go-secdump

Tool to remotely dump secrets from the Windows registry

POSTDump

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

medusa

Binary instrumentation framework based on FRIDA

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Telerecon

A reconnaissance framework for researching and investigating Telegram.

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

JustEvadeBro

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

InlineExecute-Assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

Egress-Assess

Egress-Assess is a tool used to test egress data detection capabilities

cme-6.0-release-backup

latest crackmapexec somehow pulled from the internet...

eyeballer

Convolutional neural network for analyzing pentest screenshots

wipeout-rewrite

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

zgrab2

Fast Go Application Scanner

at-ps

Adversary Tactics - PowerShell Training

VNCDecrypt

Decrypt passwords stored in VNC files

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

LinkedInDumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

jargon

DigDug

Blackout

kill anti-malware protected processes ( BYOVD) (Microsoft Won )

ADExplorerSnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

revsocks

Reverse SOCKS5 implementation in Go

WinPwn

Automation for internal Windows Penetrationtest / AD-Security