rewardone

awesome-zsh-plugins

A collection of ZSH frameworks, plugins, themes and tutorials.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

weevely3

Weaponized web shell

updog

Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.

onefuzz

A self-hosted Fuzzing-As-A-Service platform

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

EggShell

iOS/macOS/Linux Remote Administration Tool

DKMC

DKMC - Dont kill my cat - Malicious payload evasion tool

intrigue-core

Discover Your Attack Surface!

Starkiller

Starkiller is a Frontend for PowerShell Empire.

trevorc2

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

eyeballer

Convolutional neural network for analyzing pentest screenshots

SharpRDP

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

MaliciousMacroGenerator

Malicious Macro Generator

Fenrir

Simple Bash IOC Scanner

MoveKit

Cobalt Strike kit for Lateral Movement

SharpHound2

The Old BloodHound C# Ingestor (Deprecated)

domdig

DOM XSS scanner for Single Page Applications

abaddon

SharpCompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

SharpGen

SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

SharpSploitConsole

SharpShell

SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

AMSI_Handler

Automate AV evasion by calling AMSI

Detect-SSLmitm

This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environments. It does this by comparing the SSL intermediate certificate being used for your connection to the true/known SSL certificate for the server.

batten

Hardening and Auditing Tool For Docker Hosts & Containers

changeling

Change up a binary's embedded resources with this little creature.

Blowhole

Docker auditing and enumeration script.