surewould

reaper

💀 Don't fear the Reaper 👻

zotsite

Export Zotero to a stand-alone web site

PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

ntlmquic

POC tools for exploring SMB over QUIC protocol

NXEnhanced

Adds "quality-of-life" features to NextDNS website for a more practical usability

C3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

BloodhoundAD-Queries

django-DefectDojo

DevSecOps, ASPM, Vulnerability Management. All on one platform.

Seth

Perform a MitM attack and extract clear text credentials from RDP connections

PowerHub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

amber

Reflective PE packer.

pypykatz_agent_dn

Pypykatz agent implemented in .NET

pypykatz_server

Pypykatz server

mimikatz

A little tool to play with Windows security

weevely3

Weaponized web shell

SharPyShell

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

hershell

Multiplatform reverse shell generator

vulnreport

Open-source pentesting management and automation platform by Salesforce Product Security

BloodHound

Six Degrees of Domain Admin

respounder

Respounder detects presence of responder in the network.

timesketch

Collaborative forensic timeline analysis

htcrawl

Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript

ee-outliers

Open-source framework to detect outliers in Elasticsearch events

impacket

Impacket is a collection of Python classes for working with network protocols.

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

hugo

The world’s fastest framework for building websites.

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

quic-go

A QUIC implementation in pure Go