x86-64 assembler embedded in Python

SMBMap is a handy SMB enumeration tool

A Deep Learning Approach for Password Guessing (https://arxiv.org/abs/1709.00440)

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat…

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

DNS Exfiltration tool for stealthily sending files over DNS requests.

Remote Desktop Protocol in Twisted Python

ODAT: Oracle Database Attacking Tool

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

Scripts to replace the distribution behind Windows Subsystem for Linux with any other Linux distribution published on Docker Hub.

The SpecterOps project management and reporting engine

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

OSINT Tool: Generate username lists for companies on LinkedIn

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Pop shells like a master.

rsatool can be used to calculate RSA and RSA-CRT parameters

A pure-python fully automated and unattended fuzzing framework.

Perform a MitM attack and extract clear text credentials from RDP connections

Software to identify the different types of hashes -

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

The iOS Security Testing Framework

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Hack Night is an open weekly training session run by the OSIRIS lab.

Vulnerability Labs for security analysis

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Python library for Windows Remote Management (WinRM)