Beast code in Giters

r3nt0n's starred repositories

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Language:PHP8016 367 153

Arjun

HTTP parameter discovery suite.

Language:PythonAGPL-3.04931 88 141

Rubeus

Trying to tame the three-headed dog.

Language:C#NOASSERTION3880 84 75

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

Language:PythonNOASSERTION3664 231 142

Invoke-Obfuscation

PowerShell Obfuscator

Language:PowerShellApache-2.03555 139 53

Pwdb-Public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

MIT2990 140 10

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

2847 236 28

pe_to_shellcode

Converts PE into a shellcode

Language:C++BSD-2-Clause2243 55 39

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

2233 35 4

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Language:PowerShellGPL-3.01935 48 7

inceptor

Template-Driven AV/EDR Evasion Framework

Language:AssemblyNOASSERTION1515 35 48

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Language:PythonGPL-3.01236 29 75

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

Language:C1032 25 10

Tokenvator

A tool to elevate privilege with Windows Tokens

Language:C#1009 37 14

ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Language:GoMIT966 160

phishing-frenzy

Ruby on Rails Phishing Framework

Language:PHPGPL-3.0757 91 350

PowerShell-Obfuscation-Bible

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

MIT705 140

impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples

Language:PythonNOASSERTION697 20 9

rbndr

Simple DNS Rebinding Service

Language:CGPL-3.0600 16 10

php_filter_chain_generator

Language:Python583 10 2

awesome_windows_logical_bugs

collect for learning cases

Language:VBScript553 26 3

GC2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

Language:GoGPL-3.0490 15 11