An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

Identify email addresses or domains names that belong to colleges or universities. Help automate the process of approving or rejecting academic discounts.

HTTP file upload scanner for Burp Proxy

A Win7 RDP exploit

Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. It will automatically generate a userlist from the domain which excludes accounts t…

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

cve-2019-0604 SharePoint RCE exploit

A collection of open source and commercial tools that aid in red team operations.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Collection of Cyber Threat Intelligence sources from the deep and dark web

Python script that acts like the original sudo binary to fool users into entering their passwords

Issues to consider when planning a red team exercise.

Automagically reverse-engineer REST APIs via capturing traffic

Credentials recovery project

Rewrite of the popular wireless network auditor, "wifite"

transform your payload.exe into one fake word doc (.ppt)

Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team].

Social Media OSINT collection containing - tools, techniques & tradecraft.

Linux post exploitation framework written in bash designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace.

Scripts to help with different ffuf tasks and workflows

CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞

bash script for Subdomain Enumeration

Active Directory and Internal Pentest Cheatsheets

Directory transversal to remote code execution

🏔 Love Freedom - ❌ Block Mass Surveillance

Detection Ideas & Rules repository.

ISO 27001 Toolkit by QZ