Bypassing UAC with SSPI Datagram Contexts

Covenant is a collaborative .NET C2 framework for red teamers.

A PowerShell armoury for security guys and girls

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Inject JS and C# into Windows apps, call COM and WinRT APIs

Netty project - an event-driven asynchronous network application framework

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Discovering Facebook Graph Search - keywords and

@PornBotHunter publish a detected Twitter porn bot every hour. Made with ❤️by @fs0c131y

@PornBotHunter publish a detected Twitter porn bot every hour. Made with ❤️by @fs0c131y

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

List of Awesome Red Teaming Resources

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

🔥 A curated list of awesome web-app firewall (WAF) stuff.

Scrape the Twitter Frontend API without authentication.

Get download links from pan.baidu.com and you don't need to be afraid of getting your account banned

The new bridge between Burp Suite and Frida!

A collection of useful scripts for penetration testers

Wiki-like CTF write-ups repository, maintained by the community. 2017

RottenPotato local privilege escalation from service account to SYSTEM

PowerShell Runspace Post Exploitation Toolkit