wizoutsugar

oscp

torshammer

Tor's hammer. Slow post DDOS tool written in python.

osmedeus

A Workflow Engine for Offensive Security

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

CatMyPhish

Search for categorized domain

Egypt-Universities-CTF-2019

Writeups for the challenges

passdb-frontend

Pivoting Frontend for Pre-Seeded Password Databases

OSCP-Cheat-Sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Unix-Privilege-Escalation-Exploits-Pack

Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.

bodhi

Bodhi - Client-side Vulnerability Playground

redteam-plan

Issues to consider when planning a red team exercise.

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

nmap-bootstrap-xsl

A Nmap XSL implementation with Bootstrap.

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

3snake

Tool for extracting information from newly spawned processes

mimipenguin

A tool to dump the login password from the current linux user

dockerevil

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

BeRoot

Privilege Escalation Project - Windows / Linux / Mac

scavenger

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.

leprechaun

This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.

nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

pspy

Monitor linux processes without root permissions

PayloadsAllTheThings

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

R3d-Buck3T

Penetration Testing, Vulnerability Assessment and Red Team Learning

redteam-notebook

Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.