A fast, simple, recursive content discovery tool written in Rust.

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

snippets for power users

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

A collection of android security related resources

✨ Magical shell history

The official gpt4free repository | various collection of powerful language models

BloodyAD is an Active Directory Privilege Escalation Framework

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository…

Simple (relatively) things allowing you to dig a bit deeper than usual.

C# based evtx parser with lots of extras

Integrate Magisk root and Google Apps into WSA (Windows Subsystem for Android)

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

DLL sideloading/proxying with Nim!

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

My experiments in weaponizing Nim (https://nim-lang.org/)

A swiss army knife for pentesting networks

A small reverse shell for Linux & Windows

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller