Portable file server with accelerated resumable uploads, dedup, WebDAV, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file, no deps

AI Red Teaming playground labs to run AI Red Teaming trainings including infrastructure.

Adversary Emulation Framework

Tool to audit and attack LAPS environments

GoCrack is a management frontend for password cracking tools written in Go

Playground (and dump) of stuff I make or modify for the Flipper Zero

Windows Object Explorer 64-bit

Go assembly and source viewer

Windows Exploit Suggester - Next Generation

Docker container that has all the CLI tooling for binary exploitation (thanks to @LiveOverflow)

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

Reverse proxies cheatsheet

Extract credentials from lsass remotely

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

DEPRECATED - A prototype SSH configuration and policy scanner (Blog: https://mozilla.github.io/ssh_scan/)

Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process

A collection of Red Team focused tools, scripts, and notes

The x86 processor fuzzer

Identifies the bytes that Microsoft Defender flags on.

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Ap…

Tomcat-Ajp协议文件读取漏洞

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

c++ fully undetected shellcode launcher ;)

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A tool for parsing breached passwords