nocomp

warf

WARF is a Web Application Reconnaissance Framework that helps to gather information about the target.

ActiveDirectoryAttackTool

ADAT is a small tool used to assist CTF players and Penetration testers with easy commands to run against an Active Directory Domain Controller. This tool is is best utilized using a set of known credentials against the host.

FISSURE

The RF and reverse engineering framework for everyone

linux-wifi-ota-crash

Send arbitrary IEEE 802.11 frames with Espressif's ESP32

AORT

All in One Recon Tool for Bug Bounty

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

awesome-bugbounty-builder

Awesome Bug bounty builder Project

AWSome-Pentesting

My cheatsheet notes to pentest AWS infrastructure

cloudfox

Automating situational awareness for cloud penetration tests.

DLLirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

EyeglassBlurFilter

Automatically locate your eyeglass areas in video streams and apply Gaussian filters to blur it.

Freeze

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

Havoc

The Havoc Framework

HavocNotion

A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel.

JuicyPotatoNG

Another Windows Local Privilege Escalation from Service Account to System

ldapnomnom

Anonymously bruteforce Active Directory usernames from Domain Controllers by abusing LDAP Ping requests (cLDAP)

LMS.NetMap

LoggerPlusPlus-API-Filters

A Collection of Logger++ Filters for Hunting API Vulnerabilities

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

pe-bear

Portable Executable reversing tool with a friendly GUI

Portapack-Bruteforce-Payloads

all kind of payload for rf bruteforce using portapack

PowerHuntShares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

PyHmmm

RedEye-1

RedEye is a visual analytic tool supporting Red & Blue Team operations

rekono

Execute full pentesting processes combining multiple hacking tools automatically

RITM

Roast in the Middle

ShellcodeTemplate

An easily modifiable shellcode template for Windows x64/x86

Test-pwsh

testfordev

toxssin

An XSS exploitation command-line interface and payload generator.

VirusTotalC2

Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one