Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Subdomain enumeration tool with analysis features for discovered domains

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

Crack iOS Restriction Passcodes with Python

An example reference design for a proposed BOF PE

Site source for linuxtoy.org.

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

Spartacus DLL/COM Hijacking Toolkit

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events…

Log4Shell scanner for Burp Suite

一款小程序安全评估工具

A robust tunelling solution written in golang

Control WS2812B RGB LEDs with an ESP8266 over WiFi!

希望你知道这意味着什么。

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

资产扫描工具

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

Stealing passwords every time they change

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

pGina fork: Open Source Windows Authentication

A tool for identifying misconfigured CloudFront domains

Scan for open S3 buckets and dump

video live streaming server in pure go

ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

MS17-010 Windows SMB RCE -- Full subnet scanner