onSec-fr

go-ftw

Web Application Firewall Testing Framework - Go version

waf-comparison-project

Testing datasets and tools to compare WAF efficacy

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Invoke-RunAsWithCert

A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.

EvilGithubIssue

I will update it soon for now. Abuse Github issue comment attachment to use GitHub as a stealthy C2

NetExec

The Network Execution Tool

RToolZ

A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.

pentestkit

OWASP PTK - application security browser extension.

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

caldera

Automated Adversary Emulation Platform

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

Free-Certifications

A curated list of free courses & certifications.

myph

shellcode loader for your evasion needs

tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

FullBypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to DM if you find some bugs :)

psgetsystem

getsystem via parent process using ps1 & embeded c#

SharpHound

C# Data Collector for BloodHound

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

PowerSharpPack

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

ExeToPosh

Extract PowerShell scripts from an Executable

Snaffler

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

smbmap

SMBMap is a handy SMB enumeration tool

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

WMIHACKER

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

SharpWeb

.NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.