wizoutsugar

sliver

Adversary Emulation Framework

testssl.sh

Testing TLS/SSL encryption anywhere on any port

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

caldera

Automated Adversary Emulation Platform

RedELK

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

pi-pwnbox-rogueap

Homemade Pwnbox :rocket: / Rogue AP :satellite: based on Raspberry Pi — WiFi Hacking Cheatsheets + MindMap :bulb:

A-Red-Teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

breaking-and-pwning-apps-and-servers-aws-azure-training

Course content, lab setup instructions and documentation of our very popular Breaking and Pwning Apps and Servers on AWS and Azure hands on training!

BypassAV

Cobalt Strike插件，用于快速生成免杀的可执行文件

JuicyPotatoNG

Another Windows Local Privilege Escalation from Service Account to System

blueteam_homelabs

Great List of Resources to Build an Enterprise Grade Home Lab

spoofcheck

Simple script that checks a domain for email protections

Damn-Vulnerable-Bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

Apollo

A .NET Framework 4.0 Windows Agent

Invoke-UserSimulator

Simulates common user behaviour on local and remote Windows hosts.

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

HellShell

transform your payload into ipv4/ipv6/mac arrays

domain_audit

Audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

lazyweb

LazyWeb is a demonstration web application designed to showcase common server-side application vulnerabilities. Each vulnerability is categorized with its respective difficulty rating to provide a comprehensive learning experience for developers and security enthusiasts.

ADImporter

Credit to Helge Klein - https://helgeklein.com/blog/2015/02/creating-realistic-test-user-accounts-active-directory/

buffer-overflow

CobaltStrikeWindowsDefenderBypass

Windows Defender Bypass for Cobalt Strike v4.0 Powershell Payload

Lazyxss

LazyXSS is a tool that can help you scan for reflected XSS, LFI without any effort.

UPenn-CyberSecurity-Red-vs-Blue-Team-Metasploit-Kibana-Capstone

sec642_wiki

Template for writing labs in Markdown with emphasis on print and electronic access, style

wtf

The personal information dashboard for your terminal

Vulnerable-OAuth-2.0-Applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.