muurk

ssti-tools

tplmap

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

tkgpio

A Python library to simulate electronic devices connected to the GPIO on a Raspberry Pi, using TkInter.

blupi

Software emulation of the Target BluEye emergency services alert system

RFMap

RFMap - Radio Frequency Mapper

jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

PasteHunter

Scanning pastebin with yara rules

Azure-Sentinel-Notebooks

Interactive Azure Sentinel Notebooks provides security insights and actions to investigate anomalies and hunt for malicious behaviors.

tfsec

Tfsec is now part of Trivy

DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

SunBurst_DGA_Decode

SunBurst DGA Decode Script

OffensiveCSharp

Collection of Offensive C# Tooling

kbd-audio

🎤⌨️ Acoustic keyboard eavesdropping

Salsa-tools

Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

SecurityTips

WADComs.github.io

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

PersistentJXA

Collection of macOS persistence methods and miscellaneous tools in JXA

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

covermyass

Post-exploitation tool to cover your tracks on a compromised machine (beta)

SecGen

Create randomly insecure VMs

red_team_tool_countermeasures

ionic-framework

A powerful cross-platform UI toolkit for building native-quality iOS, Android, and Progressive Web Apps with HTML, CSS, and JavaScript.

lens

Lens - The way the world runs Kubernetes

passcore

A self-service password management tool for Active Directory

Front-End-Checklist

🗂 The perfect Front-End Checklist for modern websites and meticulous developers

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Subrake

🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).