ohxeighty

SharpKatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

ReflectiveDLLInjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

FACT_core

Firmware Analysis and Comparison Tool

search.0t.rocks

ShakeFinder

A low-cost, high-sensitivity vibration sensor

DSInternals

Directory Services Internals (DSInternals) PowerShell Module and Framework

Perfusion

Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)

vidgear

A High-performance cross-platform Video Processing Python framework powerpacked with unique trailblazing features :fire:

insightface

State-of-the-art 2D and 3D Face Analysis Project

Wav2Lip

This repository contains the codes of "A Lip Sync Expert Is All You Need for Speech to Lip Generation In the Wild", published at ACM Multimedia 2020. For HD commercial model, please try out Sync Labs

bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

awesome-iot-security-resource

awesome iot exploit resource

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

WitnessMe

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

Awesome-RedTeam-Cheatsheet

Red Team Cheatsheet in constant expansion.

Insecure-Firebase-Exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

streamlit

Streamlit — A faster way to build and share data apps.

bbot

A recursive internet scanner for hackers.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

SharpC2

Command and Control Framework written in C#

AH2021Workshop

Malware development for red teaming workshop

maldev-for-dummies

A workshop about Malware Development

Jumperless

A jumperless breadboard

nightmare

espScope

opensource esp32 wireless oscilloscope