Automation for internal Windows Penetrationtest / AD-Security

Direct Memory Access (DMA) Attack Software

Starkiller is a Frontend for PowerShell Empire.

OWASP ASST (Automated Software Security Toolkit) | A Novel Open Source Web Security Scanner.

Generate diagrams from textual description

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

Find domains and subdomains related to a given domain

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

A collection of awesome one-liner scripts especially for bug bounty tips.

An HTTP toolkit for security research.

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Malicious Macro Generator

Single-file PHP shell

CLI Frontend for PowerShell Empire.

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

🌯 Give me a web shell, I'll give you a terminal.

🕵️‍♂️ Offensive Google framework.

Tenzir is the data pipeline engine for security teams.

The Shadow Attack Framework

Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

🐧 Abuse of Google Colab for cracking hashes.

Cut and paste your surroundings using AR

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

Anonymized, secure, and free Terraform cost estimation based on Terraform plan (0.12+) or Terraform state (any version)

The Python programming language

Information gathering framework for phone numbers