phra

PEzor

Open-Source Shellcode & PE Packer

rustbuster

A Comprehensive Web Fuzzer and Content Discovery Tool

x0rro

A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2

crosser

A Reflected / Stored / DOM XSS Scanner based on Headless Chrome Node API via Puppeteer

await-to-ts

http://blog.grossman.io/how-to-write-async-await-without-try-catch-blocks-in-javascript/

http-check

HTTP Header Analysis Vulnerability Tool

inspector-exploiter

Execute commands via Node.js debug port and inspector protocol

zero-width-fingerprint-detection-extension

A browser extension to detect when zero-width characters are used to fingerprint cut/copied/pasted text.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

console-caller

Do you want to easily find out which line of your code is printing that thing? This is the right module for you!

phra.github.io

AggressorScripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

obfuscator

ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,swift-llvm-clang 5.0(waiting support swift obfuscator)

detection-rules

Rules for the Detection Engine in Elastic Security

gef

GEF - GDB Enhanced Features for exploit devs & reversers

graphql-apollo-react-chat

mingw-pe-resources-example

Based on https://bigcode.wordpress.com/2016/12/21/mingw-windows-icon-resource-example/

Awesome-Profile-README-templates

A collection of awesome readme templates to display on your profile

CS-BOFs

Collection of CobaltStrike beacon object files

mimikatz

A little tool to play with Windows security

Recon-AD

Recon-AD, an AD recon tool based on ADSI and reflective DLL’s

SharpChromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

SharpMove

.NET Project for performing Authenticated Remote Execution

SharpRDP

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

UACME

Defeating Windows User Account Control

dumb-obfuscator

Tutorial on how to write the dumbest obfuscator I could think of.

metasploit-framework

Metasploit Framework

notevil

Evalulate javascript like the built-in javascript eval() method but safely.

phra

postwoman

👽 A free, fast and beautiful API request builder (web alternative to Postman) https://postwoman.io