mokeneto

PermCutter

Spec and Sample code for Identifying and Reducing Permission Explosion

saas-attacks

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

FuncoPop

Tools for attacking Azure Function Apps

Chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

RandomTSScripts

Collection of random RedTeam scripts.

HUNT

Conferences

Conference presentation slides

wstunnel

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available

noir

Attack surface detector that identifies endpoints by static analysis

fuzz.txt

Potentially dangerous files

PentestGPT

A GPT-empowered penetration testing tool

ssm-as-rat

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

forticrack

Decrypt encrypted Fortienet FortiOS firmware images

Cartographer

Code Coverage Exploration Plugin for Ghidra

FallingSkies-CVE-2023-35885

Cloudpanel 0-day Exploit

CVE-2023-35078-Exploit-POC

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC

ReServ

A set of simple servers (currently HTTP/HTTPS and DNS) which allow configurable and scriptable responses to network requests.

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

wsrepl

WebSocket REPL for pentesters

bw-dump

A proof-of-concept for (CVE-2023-38840) that extracts plaintext master passwords from a locked Bitwarden vault.

AzureAD-Attack-Defense

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

selefra

The open-source policy-as-code software that provides analysis for Multi-Cloud and SaaS environments, you can get insight with natural language (powered by OpenAI).

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

JNAerator

JNAerator: native bindings generator for JNA / BridJ / Node.js

jna

Java Native Access

DDexec

A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.

hiphp

The BackDoor of HIPHP gives you the power to control websites based on PHP using HTTP/HTTPS protocol. By sending files, tokens and commands through port 80's POST/GET method, users can access a range of activities such as downloading and editing files. It also allows for connecting to Tor networks with password protection for extra security.

CloudBrute

Awesome cloud enumerator

ScheduleRunner

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation