SharpSploit is a .NET post-exploitation library written in C#

A PoC Java Stager which can download, compile, and execute a Java file in memory.

GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.

advanced network reconnaissance toolkit

Information Gathering tool for a Website or IP address

The most complete Phishing Tool, with 32 templates +1 customizable

X11 trick to inject commands on root terminal.

Polymorph is a real-time network packet manipulation framework with support for almost all existing protocols

A framework based on the Fiddler web debugger to study Exploit Kits, malvertising and malicious traffic in general.

An evil RAT (Remote Administration Tool) for macOS / OS X.

Brutal SSH: SSH Login brute force, scan for vulnerable version and 0 day exploit (under development)

Memoro: A Detailed Heap Profiler

A collection of open source and commercial tools that aid in red team operations.

A Penetration Testing Framework created for Hackers / Pentester / Bug Hunter

ROPGenerator is a tool that helps you building ROP exploits by finding and chaining gadgets together

Exploiting misconfigured firebase databases

Find web directories without bruteforce

Nano is a family of PHP web shells which are code golfed for stealth.

Hashcat wrapper to help automate the cracking process

Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017)

Like nmap for mapping wifi networks you're not connected to, plus device tracking

Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs. 😎

GlobaLeaks - The Open-Source Whistleblowing Software

Python script for trying default passwords for some TP-Link Hotspots

WhatsApp Forensic Tool

Centralize Management of Intrusion Detection System like Suricata Bro Ossec ...