nu11zy

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

CVE-2023-28252

Caro-Kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

SharpLocker

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

ACLight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

awesome-copycats

Awesome WM themes

xmonad

The core of xmonad, a small but functional ICCCM-compliant tiling window manager

MaldevAcademyLdr.1

WTSImpersonator

WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"

dynamichttp

Complex and extendable http messages with dynamic modifications in client and server

Jamf-Attack-Toolkit

Suite of tools to facilitate attacks against the Jamf macOS management platform.

rufus

The Reliable USB Formatting Utility

dirhunt

Find web directories without bruteforce

OPSEC-Tradecraft

Collection of OPSEC Tradecraft and TTPs for Red Team Operations

offsec-tools

Compiled tools for internal assessments

OffSec-Reporting

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

inceptor

Template-Driven AV/EDR Evasion Framework

dirsearch

Web path scanner

reverse-shell

Reverse Shell as a Service

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

Revenant

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

GPOddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

mhydeath

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

CVE-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator