Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

App to AntiSplit (merge) split APKs (APKS/XAPK/APKM) to regular .APK file on Android

An open-source, free protector for .NET applications

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,10.x,11.x,12.x,13.x,14.x,swift-llvm-clang 5.0,swift-llvm-clang 5.5

GUI for apktool, signapk, zipalign and baksmali utilities.

Updated ConfuserEX, an open-source, free obfuscator for .NET applications

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

LPE exploit for CVE-2023-21768

List of awesome penetration testing resources, tools and other shiny things

Login hunter of default credentials for administrative web interfaces leveraging NNdefaccts dataset.

A reverse proxy that provides authentication with OpenShift via OAuth and Kubernetes service accounts

MS17-010

Collection of things made during my OSCP journey

Script for orchestrating mana rogue WiFi Access Points.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

forked from frohoff/ysoserial and added my own payloads.

This is a android spy app, android remote administration tool, android RAT which uploads user data such as contacts, messages, call log, send message(s), photos, videos, open a browser link etc.

OSCP Cheatsheets

A natural evolution of Burp Suite's Repeater tool

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

MS17-010

ICSSPLOIT (Industrial Control System Exploitation Framework)，a exploitation framework based on Python

Small snippets of code we often find useful

A little tool to play with Windows security

Preparation for OSWE