Payloads for AI Red Teaming and beyond

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

List Of Ransomware Groups Official WebSites

Some scripts to abuse kerberos using Powershell

Pull out bits of URLs provided on stdin

Map tracking ransomware, by OCD World Watch team

WMI virus, because funny

Kill AV/EDR leveraging BYOVD attack

[CCS'24] An LLM-based, fully automated fuzzing tool for option combination testing.

Awesome Security lists for SOC/CERT/CTI

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (pa…

🔎 Open source distributed and RESTful search engine.

Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.

A simple and convenient way to view logs in the iOS app. Available as SwiftUI View.

Vehicle Logs Events And Properties Parser

Android Logs Events And Protobuf Parser

Returns Logs Events And Properties Parser

iOS Logs, Events, And Plist Parser

Windows Events Attack Samples

The Python Risk Identification Tool for generative AI (PyRIT) is an open source framework built to empower security professionals and engineers to proactively identify risks in generative AI systems.

the LLM vulnerability scanner

Real fucking shellcode encryptor & obfuscator tool

Make your GenAI Apps Safe & Secure 🚀 Test & harden your system prompt

Unified AppSync dynamic library for iOS 5 and above.

A rewrite of YARA in Rust.

syzkaller is an unsupervised coverage-guided kernel fuzzer

Every practical and proposed defense against prompt injection.

winPEAS, but for Active Directory