s3m73x

envizon

network visualization & vulnerability management/reporting

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

spoonmap

awesome-cve-poc

✍️ A curated list of CVE PoCs.

breach-parse

A tool for parsing breached passwords

build_a_phish

Ansible playbook to deploy a phishing engagement

Creds

Some usefull Scripts and Executables for Pentest & Forensics

CVE-2021-26855

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

DefenderCheck

Identifies the bytes that Microsoft Defender flags on.

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

emba

emba - Embedded Analyzer

exploits

hashcat-utils

Small utilities that are useful in advanced password cracking

hcxdumptool

Small tool to capture packets from wlan devices.

kismon

A GUI client for kismet

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

mdk4

MDK4

Nessus2Word

pen_300_osep_prep

Preparation guide for Offensive Security's PEN-300 course and OSEP certification exam

Penetration-Testing-Tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

PowerSharpPack

ps4jb750-755

ssh-mitm

ssh mitm server for security audits supporting public key authentication, session hijacking and file manipulation

traitor

Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins :arrow_up: :skull_and_crossbones:

wifite2

Rewrite of the popular wireless network auditor, "wifite"

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.