watchdog1337

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Windows-Exploit-Suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

GodPotato

maldev-for-dummies

A workshop about Malware Development

windows-privesc-check

Standalone Executable to Check for Simple Privilege Escalation Vectors on Windows Systems

VXUG-Papers

Research code & papers from members of vx-underground.

Win32_Offensive_Cheatsheet

Win32 and Kernel abusing techniques for pentesters

Frida-Labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

FullPowers

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

Moriarty

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

Uscrapper

Uscrapper Vanta: Dive deeper into the web with this powerful open-source tool. Extract valuable insights with ease and efficiency, from both surface and deep web sources. Empower your data mining and analysis with Vanta's advanced capabilities. Fast, reliable, and user-friendly, Uscrapper Vanta is the ultimate choice for researchers and analysts.

Chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

JS-Tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients, and a "mimic" feature that automatically generates custom payloads.

acheron

indirect syscalls for AV/EDR evasion in Go assembly

.NetConfigLoader

.net config loader

SharpEfsPotato

Local privilege escalation from SeImpersonatePrivilege using EfsRpc.

Awesome-macOS-Red-Teaming

List of Awesome macOS Red Teaming Resources.

haklistgen

Turns any junk text into a usable wordlist for brute-forcing.

BlockOpenHandle

Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote memory scanners

red-team-playground

Docker network containing many vulnerable targets for practicing Red Teaming concepts (initial access, priv esc, persistence, lateral, C2, evasion, etc).

vscode-nmap-peek

A VS Code extension to preview XML nmap output

Linux-Post-Exploitation

Tips, Tricks, and Scripts for Linux Post Exploitation

macdev

maldev but for mac