oldkingcone

slopShell

the only php webshell you need.

BYOSI

Evade EDR's the simple way, by not touching any of the API's they hook.

SpyGlass

SpyGlass, the all in one tool for a kickass api.

Albert

The Albert, the smart recon tool.

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

Dumped-Database

Dumped-Database

LogPoison-LFItoRCE

this is a sort of handler that helps with log poison attacks.

random_py_scripts

effective lamp! i love lamp, some custom python scripts ive cooked up. some are malicious, some are not.

SPAMEVERYTHING

found a webhook in some malware somewhere? lets go ahead and spam it.

Wordpress-Backdoors

Wordpress capable PHP backdoors

boyfriendlist

submit pr to join the boyfriend list

brut3k1t

:artificial_satellite: brut3k1t is a security-oriented research framework for conducting bruteforce attacks against a multitude of protocols and services

C0wb0y

a suite of twitter heuristics to determine characteristics of users.

gef

GEF - GDB Enhanced Features for exploit devs & reversers

jesse

An advanced crypto trading bot written in Python

Leaked-Documents

Leaked-Documents

LearningGo

just learning go, how to do web based requests in go, and other network based requests.

literate-spoon

Java version of Auto_Dorker

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

Mobile-Security-Framework-MobSF

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

Nuages

A modular C2 framework

Octopus

Open source pre-operation C2 server based on python and powershell

Okayun

here it is

oldkingcone

Profil3r

OSINT tool that allows you to find a person's accounts and emails + breached emails 🕵️

RedWarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

sliver

Adversary Emulation Framework

Striker

Striker is an offensive information and vulnerability scanner.

Web-Client-Security-Camera

Web Client Security Camera

webshells

Various webshells. We accept pull requests for additions to this collection.