qn0x

GOAD

game of active directory

Penetration-Testing-Tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Havoc

The Havoc Framework.

HardeningKitty

HardeningKitty - Checks and hardens your Windows configuration

EfsPotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

cve

Gather and update all available and newest CVEs with their PoC.

ProcessInjection

This program is designed to demonstrate various process injection techniques

EDRs

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

UltimateAppLockerByPassList

The goal of this repository is to document the most common techniques to bypass AppLocker.

Scrummage

A Holistic OSINT and Threat Hunting Platform

CVE-2021-40444

CVE-2021-40444 PoC

Starkiller

Starkiller is a Frontend for PowerShell Empire.

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

reverse-interview

Questions to ask the company during your interview

awesome-osint

:scream: A curated list of amazingly awesome OSINT

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

http2smugl

Cobalt-Wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

pwncat

Fancy reverse and bind shell handler

awesome-tmux

A list of awesome resources for tmux

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Zettlr

Your One-Stop Publication Workbench

Parsr

Transforms PDF, Documents and Images into Enriched Structured Data

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

optimus-manager

A Linux program to handle GPU switching on Optimus laptops.