Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK,…

Active Directory information dumper via LDAP

The context API to search, scrape, and interact with the web at scale. 🔥

Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

shellcode transformation tool for YARA evasion

MDBList Curated Movie List

A tool to help pentesters quickly identify privileged principals and second-order privilege escalation opportunities in unfamiliar AWS accounts.

RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create advanced phishing & payload infras

A default credential scanner.

PoC that downloads an executable from a public SSL certificate

AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.

A mostly-serverless distributed hash cracking platform

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

Curated list of projects, articles and more related to Offensive Security and Red Teaming. Completely written in Rust.

Creating a repository with all public Beacon Object Files (BoFs)

AIOStreams consolidates multiple Stremio addons and debrid/usenet services - including its own suite of built-in addons and a native Usenet streaming engine - into a single, highly customisable sup…

A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery

Shellcode loader generator with multiples features

Simple & Powerful PowerShell Script Obfuscator

PoC for using MS Windows printers for persistence / command and control via Internet Printing

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educati…

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.

An ADCS honeypot to catch attackers in your internal network.

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

An Office365 User Attack Tool

Spray365 makes spraying Microsoft accounts (Office 365 / Azure AD) easy through its customizable two-step password spraying approach. The built-in execution plan features options that attempt to by…