A container analysis and exploitation tool for pentesters and engineers.
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
🌒 Shell command obfuscation to avoid detection systems
An iOS backup extraction tool written in Golang
SQLMap wrapper that lets you use Interact.sh as a DNS server for exfiltrating data with zero configuration
GraphSpecter is a tool to audit GraphQL API
A Simple Tool to gather information from any website, domain, sub-domain, DNS, links by enumeration with simple commands.
A multiple reverse shell sessions/clients manager via terminal written in go
An undetectable GO implemented reverse shell
A PoC exploit for CVE-2017-9841 - PHPUnit Remote Code Execution(RCE)
Custom tooling, reconnaissance automation, and utility scripts engineered for offensive security operations. Focused on custom development, speed, and efficiency during engagements, not recycled scripts. For educational/authorized use only.🎯
The malicious IdP you were looking for. A weaponized Single Sign-On (SSO) Identity Provider (IdP) for security testing of OIDC and SAML 2.0 Service Providers, also supporting SCIM protocol.
Project Wycheproof tests crypto libraries against known attacks.
A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.
Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.
Windows security research toolkit for LPE, persistence, COM hijacking, and attack surface enumeration.
A BloodHound collector written in Go that discovers Linux and SSH attack paths. Outputs OpenGraph JSON and integrates with existing SharpHound and AzureHound data.
To associate your repository with the exploitation topic, visit your repo's landing page and select "manage topics."