One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

File upload vulnerability scanner and exploitation tool.

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

Orange Cyberdefense mindmaps

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

Convert Cobalt Strike profiles to modrewrite scripts

Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)

Various scripts for different malware families