zshell

Hatch

Hatch is a brute force tool that is used to brute force most websites

HackBrowserData

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

AdvPhishing

This is Advance Phishing Tool ! OTP PHISHING

awesome-android-security

A curated list of Android Security materials and resources For Pentesters and Bug Hunters

Chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

CobaltStrikeScan

Scan files or process memory for CobaltStrike beacons and parse their configuration

CVE-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

CVE-2020-1473

Test tool for CVE-2020-1472

data

APTnotes data

dnSpy

.NET debugger and assembly editor

enum4linux-ng

A next generation version of enum4linux (a Windows/Samba enumeration tool) with additional features like JSON/YAML export. Aimed for security professionals and CTF players.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

GRAT2

We developed GRAT2 Command & Control (C2) project for learning purpose.

HTTP-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

ksubdomain

无状态子域名爆破工具

MFASweep

A tool for checking if MFA is enabled on multiple Microsoft Services

NamedPipePTH

Pass the Hash to a named pipe for token Impersonation

opencve

CVE Alerting Platform

paradoxiaRAT

ParadoxiaRat : Native Windows Remote access Tool.

Pesidious

Malware Mutation Using Reinforcement Learning and Generative Adversarial Networks

PowerShell-Red-Team

Collection of PowerShell functions a Red Teamer may use to collect data from a machine

red_team_tool_countermeasures

SharpMapExec

SharpSecDump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

Some-Tools

Some Pentest Tools. Install and keep up to date some pentesting tools. I used this to pass my OSCP exam.

trident

automated password spraying tool

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulmap

Vulmap - Web漏洞扫描和验证工具，可对Web容器、Web服务器、Web中间件以及CMS等Web程序进行漏洞扫描，并且具备漏洞利用功能。 相关测试人员可以使用vulmap检测目标是否存在特定漏洞，并且可以使用漏洞利用功能验证漏洞是否真实存在。CVE-2020-14882, CVE-2020-2555, CVE-2020-2883, S2-061, CVE-2020-13942, CVE-2020-17530

Watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

weevely3

Weaponized web shell