phra

nodebuster

DirBuster for Node.js

seh-exploits

bof-helper

Python Helper Utilities for SEH Overwrite Based Exploits

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Wordpresscan

WPScan rewritten in Python + some WPSeku ideas

Awesome-Asset-Discovery

List of Awesome Asset Discovery Resources

metasploit2020-five-of-hearts

Metasploit CTF 2020 - Five of Hearts Writeup - RISC-V Buffer Overflow with NX and Canary

radare2

UNIX-like reverse engineering framework and command-line toolset

endlessh

SSH tarpit that slowly sends an endless banner

base64-to-uint8array

Convert a base64 string to a Uint8Array in Node and the browser

powershellveryless

Constrained Language Mode + AMSI bypass all in one

quickzip-4.60-win10-wow64

https://iwantmore.pizza/posts/quickzip-seh-win10-wow64.html

SharpHound

The BloodHound C# Ingestor

AmsiScanBufferBypass

and-sub-encoder

x86 ASCII AND-SUB Encoder

benchmark-node-json-parse

What is the fastest method to parse JSON files?

ci-attack

Empire

Empire is a PowerShell and Python post-exploitation agent.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

libra

Libra’s mission is to enable a simple global currency and financial infrastructure that empowers billions of people.

metasploit-payloads

Unified repository for different Metasploit Framework payloads

mettle

This is an implementation of a native-code Meterpreter, designed for portability, embeddability, and low resource utilization.

mona

Corelan Repository for mona.py

NetNTLMtoSilverTicket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

node-xml-encryption

W3C XML Encryption implementation for node.js (http://www.w3.org/TR/xmlenc-core/)

npm-expansions

Send us a pull request by editing expansions.txt

pattern

Python implementation of Metasploit's pattern_create/pattern_offset.

rex

Rex provides a variety of classes useful for security testing and exploit development.

rex-powershell

Rex library for dealing with Powershell Scripts

wavy

use ~ in require and import calls