Stars
A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators.
Hardware - dingoPDM is an open source, affordable automotive PDM (Power Distribution Module). Pre-assembled and tested units are available or the design can be used to build a DIY version.
Capture incoming TGTs in pure PowerShell to avoid using Rubeus
Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian
A modern GoPhish fork with improved tracking accuracy and smarter detection.
A security auditor for Tailscale configurations. Scans your tailnet for misconfigurations, overly permissive access controls, and security best practice violations.
iNTERCEPT, a free and open-source platform that unites the best signal intelligence tools into a single, accessible interface.
Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephemeral access into restricted environments using Tailscale’s …
lgandx / Responder
Forked from SpiderLabs/ResponderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…
A MCP implementation of Frida that seeks to emulate Cheat Engine functionally to allow for seamless Game Hacking by AI agents
Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑…
Use Cloudflare to create HTTP pass-through proxies for unique IP rotation, similar to fireprox
IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare
Location of some Active Directory lab scripts I have created and find useful
Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...
Open Source Vulnerability Management Platform
Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.
Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking
A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky assignments, and potential misconfigurations.
A simple HTTP server for delivering and exfiltrating files/data during, for example, CTFs.
A toolkit to attack Office365