Lists (15)
Stars
Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs
Depix is a PoC for a technique to recover plaintext from pixelized screenshots.
Tool to enumerate privileged Scheduled Tasks on Remote Systems
An advanced AI-driven vulnerability scanner and penetration testing tool that integrates multiple AI providers (OpenAI, Grok, OLLAMA, Claude) with comprehensive security testing modules for automat…
Dump processes over WMI with MSFT_MTProcess
Linux Process Injection via Seccomp Notifier
Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective
A Claude Code plugin that automatically captures everything Claude does during your coding sessions, compresses it with AI (using Claude's agent-sdk), and injects relevant context back into future …
Flangvik / LdapRelayScan
Forked from zyn3rgy/LdapRelayScanCheck for LDAP protections regarding the relay of NTLM authentication
Check for LDAP protections regarding the relay of NTLM authentication
🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence
Dumping App Bound Protected Credentials & Cookies Without Privileges.
A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust
a BOF implementation of various registry persistence methods
An Ansible collection that installs a SCOM deployment with optional configurations.
ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
The best tool for finding one gadget RCE in libc.so.6
Bruteforce Keepass databases (KDBX 4.x format)
High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.
Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by surgically patching SeCiCallbacks via native subsystem. Inclu…
Using Chromium-based browsers as a proxy for C2 traffic.