patuuh

symboliclink-testing-tools

dns-exfilnspector

Automagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

CVE-2024-21345

Proof-of-Concept for CVE-2024-21345

EDRSandblast

Shhmon

Neutering Sysmon via driver unload

VX-API

Collection of various malicious functionality to aid in malware development

LsassSilentProcessExit

Command line interface to dump LSASS memory to disk via SilentProcessExit

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

burpsuite-project-file-parser

A Burp Suite Extension for parsing Project Files from the CLI.

XSS-Bypass-Filters

red-team-scripts

A collection of red teaming and adversary emulation related tools, scripts, techniques, notes, etc

wordlists

Some random wordlists

Spartacus

Spartacus DLL/COM Hijacking Toolkit

GrabAccess

Bookit / Windows Login Password and Bitlocker Bypass Tool

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

wafer

QRFuzz

QRFuzz, a fuzzing toolkit to test malicious QR Codes in mobile applications

tracker-radar

Data set of top third party web domains with rich metadata about them

shortscan

An IIS short filename enumeration tool

ios-reloader

The iOS Reloader is a weaponizing tool for jailbroken iOS devices. It facilitates the installation of a collection of tools on iOS devices (iPhone/iPad) that are essential for penetration testing purposes.

CVE-2023-28121

WooCommerce Payments: Unauthorized Admin Access Exploit

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

HBSQLI

Automated Tool for Testing Header Based Blind SQL Injection

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.