Mimikatz implementation in pure Python

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Interesting APT Report Collection And Some Special IOCs

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Ralph is the CMDB / Asset Management system for data center and back office hardware.

Zero shot vulnerability discovery using LLMs

Powerful framework for rogue access point attack.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

A Python based ingestor for BloodHound

Tools & Interesting Things for RedTeam Ops

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

List of awesome open source hardware tools, generators, and reusable designs

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

Extract credentials from lsass remotely

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Inofficial Qualcomm Firehose / Sahara / Streaming / Diag Tools :)

Notes about attacking Jenkins servers

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

SMBMap is a handy SMB enumeration tool

BloodyAD is an Active Directory Privilege Escalation Framework

Reverse proxies cheatsheet

A curated list of resources related to Industrial Control System (ICS) security.

This project aims to compare and evaluate the telemetry of various EDR products.