nocomp

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

Alcatraz

x64 binary obfuscator

PhoneSploit-Pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

WEF

Wi-Fi Exploitation Framework

5ghoul-5g-nr-attacks

BlueDucky

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

metabigor

OSINT tools and more but without API ke

RecycledInjector

Native Syscalls Shellcode Injector

TeamsPhisher

Send phishing messages and attachments to Microsoft Teams users

venv-run

Run commands using Python virtual environment

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

BITB-Phishing

Browser In The Browser (BITB) attack is a sophisticated phishing and hard to detect.

BlueSpy

PoC to record audio from a Bluetooth device

C2-Tracker

Live Feed of C2 servers, tools, and botnets

CloakQuest3r

Uncover the true IP address of websites safeguarded by Cloudflare

Cobalt-Strike-Profiles-for-EDR-Evasion

Cobalt Strike Profiles for EDR Evasion

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

GCR-Google-Calendar-RAT

Google Calendar RAT is a PoC of Command&Control over Google Calendar Events

havoc-bloodhound

A GUI wrapper inside of Havoc to interact with bloodhound CE

Kenyatta-Ransomware

This will encrypt 🤐 your files using AES-256-CTR, then RSA-4096😵‍💫to secure the exchange with the server, or can use the Tor SOCKS5 Proxy😎 -- Functionality is based on Cryptolocker😈 ransomware. Be cool😉

My-Hunting-Methodology-

My Private Bug Hunting Methodology

OSCP

OSTE-Meta-Scan

The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, OWASP ZAP, Nuclei, SkipFish, and Wapiti.

RflDllOb

Reflective DLL Injection - M++

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Telerecon

A reconnaissance framework for researching and investigating Telegram.

TheFatRat

fat rat

Web_Hacking

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.