Stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Never stop coding. Free MIT AI gateway: one endpoint, 339 providers (90+ free), 1200+ models — Kimi, Claude, GPT, Gemini, GLM, DeepSeek, MiniMax. Works with Claude Code, Codex, Cursor, OpenCode, Cl…
A 2.78-trillion-parameter Kimi K3 running inference on a single CPU in 8.24 GB of RAM. Portable C99: no BLAS, no framework, no GPU.
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code…
Practitioner checklists for securing web applications, fintech, and health platforms with AI integration covering prompt injection, STRIDE, OWASP LLM Top 10, MITRE ATLAS, and compliance.
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …
Windows 10/11 Guide. Including Windows Security tools, Encryption, Nextcloud, Graphics, Gaming, Virtualization, Windows Subsystem for Linux (WSL 2), Software Apps, and Resources.
Bonobo Git Server for Windows is a web application you can install on your IIS and easily manage and connect to your git repositories. Go to homepage for release and more info.
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Directory Services Internals (DSInternals) PowerShell Module and Framework
Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…
Investigate malicious Windows logon by visualizing and analyzing Windows event log
Remote process injection trojan using Native Api stubs (dynamically resolved) and encrypted shellcode, undetected by Windows Defender
A practical guide covering Windows Server AD, Azure AD, administration tools, replication, sites, and security implications. Screenshots are numbered in order. More sections will be added.
Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
AzureGoat : A Damn Vulnerable Azure Infrastructure
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Ultimate Burp Suite Exam and PortSwigger Labs Guide.
A macOS enumeration tool inspired by harmjoy's Windows-based Seatbelt enumeration tool. Author: Cedric Owens