wizoutsugar

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Probable-Wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

osmedeus

A Workflow Engine for Offensive Security

pspy

Monitor linux processes without root permissions

mimipenguin

A tool to dump the login password from the current linux user

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

OSCP-Exam-Report-Template-Markdown

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

BeRoot

Privilege Escalation Project - Windows / Linux / Mac

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

nmap-bootstrap-xsl

A Nmap XSL implementation with Bootstrap.

Unix-Privilege-Escalation-Exploits-Pack

Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.

3snake

Tool for extracting information from newly spawned processes

redteam-plan

Issues to consider when planning a red team exercise.

nullinux

Internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB.

oscp

CatMyPhish

Search for categorized domain

redteam-notebook

Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.

OSCP-Cheat-Sheet

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

scavenger

scavenger : is a multi-threaded post-exploitation scanning tool for scavenging systems, finding most frequently used files and folders as well as "interesting" files containing sensitive information.

PayloadsAllTheThings

torshammer

Tor's hammer. Slow post DDOS tool written in python.

leprechaun

This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.

R3d-Buck3T

Penetration Testing, Vulnerability Assessment and Red Team Learning

passdb-frontend

Pivoting Frontend for Pre-Seeded Password Databases

bodhi

Bodhi - Client-side Vulnerability Playground

dockerevil

WorldFirst (Public) Docker API Exploit - My security researches involving Docker and Openshift

Egypt-Universities-CTF-2019

Writeups for the challenges