wizoutsugar

CobaltStrike

CobaltStrike相关内容

Ninja

Open source C2 server created for stealth red team operations

DeimosC2

DeimosC2 is a Golang command and control framework for post-exploitation.

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

Shellcode-Via-HTA

How To Execute Shellcode via HTA

morphHTA

morphHTA - Morphing Cobalt Strike's evil.HTA

HUNT

CRLF-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

Bug-Bounty-Scripts

The scripts I write to help me on my bug bounty hunting

Wies

Wies is a bash script that automates the recon steps for bug bounty.

kali-bounty

Kali image used for bug bounty

SubEnum

bash script for Subdomain Enumeration

asnrecon

ASN reconnaissance script

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

CWFF

Create your Custom Wordlist For Fuzzing

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Empire-GUI

Empire client application

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

joplin-infosec-templates

pentesting-dockerfiles

Pentesting/Bugbounty Dockerfiles.

Wordlists

Various Payload wordlists

ligolo

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

Redcloud

Automated Red Team Infrastructure deployement using Docker

houndsploit

An advanced graphical search engine for Exploit-DB

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

CVE-2019-12840_POC

PoC for Webmin Package Update Authenticated Remote Command Execution

server-status_PWN

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

LKWA

Lesser Known Web Attack Lab

SILENTTRINITY

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR