spyr0-sec

gocheck

Because AV evasion should be easy.

proctools

Small toolkit for extracting information and dumping sensitive strings from Windows processes

ThievingFox

KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

red_team_attack_lab

Red Team Attack Lab for TTP testing & research

InsightEngineering

Hardcore Debugging

PurpleLab

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks, all accessible through a user-friendly web interface

caOptics

CA Optics - Azure AD Conditional Access Gap Analyzer

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

PkiExtension

nmap-formatter

A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

SOAPHound

SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Directory Web Services (ADWS) protocol.

kunai

Threat-hunting tool for Linux

msi-search

SimpleNTSyscallFuzzer

HEKATOMB

Hekatomb is a python script that connects to LDAP directory to retrieve all computers and users informations. Then it will download all DPAPI blob of all users from all computers and uses Domain backup keys to decrypt them.

EventLogCrasher

cloudfoxable

Create your own vulnerable by design AWS penetration testing playground

cve-maker

Tool to find CVEs and Exploits.

F31

Tool for hiding Kali Linux on the network

Invoke-DHCPCheckup

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

uac-bypass-oneliners

Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applications to elevate privileges.

LDAP-Monitoring-Watchdog

LDAP Watchdog: A real-time linux-compatible LDAP monitoring tool for detecting directory changes, providing visibility into additions, modifications, and deletions for administrators and security researchers.

DDSpoof

DDSpoof is a tool that enables DHCP DNS Dynamic Update attacks against Microsoft DHCP servers in AD environments.

dockerv

Vulnerability Environment Build with Dockerfile -> Docker Hub

kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

IceKube

ScrapedIn

A tool to scrape LinkedIn without API restrictions for data reconnaissance