zpaav

angr

A powerful and user-friendly binary analysis platform!

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

Havoc

The Havoc Framework

trivy

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

Amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

Gearswap-sel-headtatt

Cloned from Selindrile's original Gearswap Github

GOAD

game of active directory

Home-Grown-Red-Team

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

MirdainGearswap

FFXI Gearswap Lua for the impaired

Mythic

A collaborative, multi-platform, red teaming framework

posh-dsc-windows-hardening

Windows OS Hardening with PowerShell DSC

sliver

Implant framework

sysmon-config-swift

Sysmon configuration file template with default high-quality event tracing

ThreatPursuit-VM

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as well as threat hunters to get up and running quickly.

TInjA

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

BestEdrOfTheMarket

Little AV/EDR bypassing lab for training & learning purposes

CRTP-cheatsheet

Cheatsheet for the commands learned in Attack and Defense Active Directory Lab

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Fermion

Fermion, an electron wrapper for Frida & Monaco.

GAP-Burp-Extension

Burp Extension to find potential endpoints. parameters, and generate a custom target wordlist

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

PacketSpy

PacketSpy

PenetrationTesting_Notes-

My Notes about Penetration Testing

rustdesk

Yet another remote desktop software

velociraptor

Digging Deeper....