A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.

Windows NT Syscall tables

Title is self explaining, well theres few methods we can do to read locked file and play with it...

WMI Explorer

Tunnel (TUN) interface for SOCKS and HTTP proxies

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Rust for malware Development is a repository for advanced Red Team techniques and offensive malwares & Ransomwares, focused on Rust 🦀

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

LLVM based, compile-time obfuscator plugin.

This repository consists of extensions, that hacktron uses to execute specific workflows in CLI.

Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

Windows Object Explorer 64-bit

NeuroSploitv2 is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large langua…

AppLocker-Based EDR Neutralization

Integrate LLM models directly into Ghidra for automated code rewrite and analysis.

Windows Session Hijacking via COM

A C# utility for interacting with SCOM

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Tools and Techniques for Red Team / Penetration Testing

Security Auditor Utility for GraphQL APIs

Windows User-Mode Shellcode Development Framework (WUMSDF)

🔄 A simple tool to backup and sync your git repositories

侦查守卫(observer_ward)Web应用和服务指纹识别工具

Scan for sensitive information easily and effectively.

Testing TLS/SSL encryption anywhere on any port

The Network Execution Tool

NocoBase is the most extensible AI-powered no-code/low-code platform for building business applications and enterprise solutions.

Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation

A simple, lightweight PowerShell script to remove pre-installed apps, disable telemetry, as well as perform various other changes to customize, declutter and improve your Windows experience. Win11D…