t3chnocat

Arcane

Arcane - A secure remote desktop application for Windows with the particularity of having a server entirely written in PowerShell and a cross-platform client (Python/QT6).

PANIX

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

RemoveNATfromWSL

Bridge your WSL instance onto to your network

secator

secator - the pentester's swiss knife

cve-2024-6387-poc

a signal handler race condition in OpenSSH's server (sshd)

BlueToolkit

BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability research, penetration testing and bluetooth hacking. We also collected and classified Bluetooth vulnerabilities in an "Awesome Bluetooth Security" way

bad-bpf

A collection of eBPF programs demonstrating bad behavior, presented at DEF CON 29

okta-terrify

Okta Verify and Okta FastPass Abuse Tool

avred

Analyse your malware to surgically obfuscate it

my-payloads

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

hellMaker

Generate FUD backdoors

TrollUAC

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

bypass-paywalls-chrome

Bypass Paywalls web browser extension for Chrome and Firefox.

darkdump

Ahmia.fi Interface for Deep Web Parsing

burnt-sushi

Spotify AdBlocker for Windows

403jump

HTTP 403 bypass tool

OFGB

GUI Tool To Removes Ads From Various Places Around Windows 11

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ASPJinjaObfuscator

Heavily obfuscated ASP web shell generation tool.

Nimperiments

Various one-off pentesting projects written in Nim. Updates happen on a whim.

book_summaries

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

SharpConflux

drozer

The Leading Security Assessment Framework for Android.

BlueDucky

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

BlueSpy

PoC to record audio from a Bluetooth device