📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

UAC is a Live Response collection script for Incident Response that makes use of native binaries and tools to automate the collection of AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD…

MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.

A recursive internet scanner for hackers.

Simple (relatively) things allowing you to dig a bit deeper than usual.

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

A pandoc LaTeX template to convert markdown files to PDF or LaTeX.

Just some things that have some cool uses

fabric is an open-source framework for augmenting humans with AI.

Some usefull Scripts and Executables for Pentest & Forensics

The Definitive Guide To Process Cloning on Windows

Bypass the Event Trace Windows(ETW) and unhook ntdll.

Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

A memory-based evasion technique which makes shellcode invisible from process start to end.

simple sudoless X11 keylogger

A workshop about Malware Development

x64 ring0 rootkit with process hiding, privilege escalation, and capabilities for protecting and unprotecting processes

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

Rust Weaponization for Red Team Engagements.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Tips on how to write exploit scripts (faster!)

Various ways to execute shellcode

Simple undetectable shellcode and code injector launcher example. Inspired by RTO malware development course.

Command and Control Framework written in C#.

A collection of awesome security hardening guides, tools and other resources