Red Kite, the Extensible Attack Surface Management tool.

🦄🔒 Awesome list of secrets in environment variables 🖥️

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

A CLI tool for leveraging IDP signing keys to impersonate users and groups

Event forwarder for CrowdStrike Falcon

A repository of resources about public speaking, specifically in the context of software development and IT conferences.

Aggressor Script to Execute Assemblies from Github

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

A tool for checking if MFA is enabled on multiple Microsoft Services

Beacon Object File (BOF) Creation Helper

A rapid API for the Project Sonar dataset

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

Enumerate and test Logitech wireless input devices for vulnerabilities with a nRF52840 radio dongle.

Identifies the bytes that Microsoft Defender flags on.

Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Injection attacks.

Azure Red Team tool for graphing Azure and Azure Active Directory objects

Module to provide PowerShell functions that abstract Win32 API functions

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity

Personal research and publication on malware families

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Unsorted, raw, ugly & probably poorly usable tools for reversing, exploit and pentest

(DEPRECATED) A simple anti-anti debug library for Windows

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Linux/OSX/FreeBSD resource monitor

HTTP parameter discovery suite.

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…