robintate

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

caldera

An automated adversary emulation system

covertutils

A framework for Backdoor development!

dirsearch

Web path scanner

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

dostackbufferoverflowgood

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

Ebowla

Framework for Making Environmental Keyed Payloads

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gauntlt

a ruggedization framework that embodies the principle "be mean to your code"

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

koadic

Koadic C3 COM Command & Control - JScript RAT

Misc-Pentest-Tools

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

PowerShell

PowerShell for every system!

PRET

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

purple-team-attack-automation

Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

shhgit

Ah shhgit! Find GitHub secrets in real time

Sickle

Shellcode development tool

SILENTTRINITY

An asynchronous post-exploitation agent powered by Python, IronPython, C# and .NET's DLR

Sophos-Central-SIEM-Integration

Simple integration script for 3rd party systems such as SIEMs. Offers command line, file or syslog output in CEF, JSON or key-value pair formats.

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

sslthis

A quick tool to enumerate SSL information and quality of ciphers. Inspired be OneTwoPunch from SuperKojiMan

UserEnum

Domain user enumeration tool

VulnerableDotNetHTTPRemoting

Example Vulnerable .NET HTTP Remoting

VulnWhisperer

Create actionable data from your Vulnerability Scans

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.