A collection of one-liners for bug bounty hunting.

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph.…

HackGPT Enterprise is a production-ready, cloud-native AI-powered penetration testing platform designed for enterprise security teams. It combines advanced AI, machine learning, microservices archi…

A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)

Create multiboot live Linux on a USB disk...

Repository with the scripts that I have used in my blogs on https://powershellisfun.com. If you like these, please sponsor this project using the Sponsor button below or buy me a coffee :) https://…

Just a repo of random Python scripts to get pentesters started with the Python language on engagements.

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

Permanently disable EDRs as local admin

CloudBurst is a red team framework for interacting with cloud providers to capture, compromise, and exfil data.

Materials for the workshop "Red Team Ops: Havoc 101"

Real-time face swap for PC streaming or video calls

Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

Evasive shellcode loader for bypassing event-based injection detection (PoC)

A tool for checking if MFA is enabled on multiple Microsoft Services

A GUI for the Chameleon Ultra written in Flutter for crossplatform

Situational Awareness commands implemented using Beacon Object Files

OSINT Tool for Finding Passwords of Compromised Email Addresses

Plugin template for x64dbg.

Tool for viewing and analyzing execution traces

PickleC2 is a post-exploitation and lateral movements framework

A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints

TeamServer and Client of Exploration Command and Control Framework