wizoutsugar

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

wtf

The personal information dashboard for your terminal

HellShell

transform your payload into ipv4/ipv6/mac arrays

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

spoofcheck

Simple script that checks a domain for email protections

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

Lazyxss

LazyXSS is a tool that can help you scan for reflected XSS, LFI without any effort.

JuicyPotatoNG

Another Windows Local Privilege Escalation from Service Account to System

domain_audit

Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

sliver

Adversary Emulation Framework

Vulnerable-OAuth-2.0-Applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

sec642_wiki

Template for writing labs in Markdown with emphasis on print and electronic access, style

UPenn-CyberSecurity-Red-vs-Blue-Team-Metasploit-Kibana-Capstone

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

blueteam_homelabs

Great List of Resources to Build an Enterprise Grade Home Lab

testssl.sh

Testing TLS/SSL encryption anywhere on any port

lazyweb

This web application is a demonstration of common server-side application flaws. Each of the vulnerabilities has its own difficulty rating.

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

buffer-overflow

Invoke-UserSimulator

Simulates common user behaviour on local and remote Windows hosts.

ADImporter

Credit to Helge Klein - https://helgeklein.com/blog/2015/02/creating-realistic-test-user-accounts-active-directory/

Damn-Vulnerable-Bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

Apollo

A .NET Framework 4.0 Windows Agent

caldera

Automated Adversary Emulation Platform

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

pi-pwnbox-rogueap

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

BypassAV

Cobalt Strike插件，用于快速生成免杀的可执行文件

CobaltStrikeWindowsDefenderBypass

Windows Defender Bypass for Cobalt Strike v4.0 Powershell Payload