A penetration testing playbook that's suitable for CTF challenges, bug bounty hunting and red team assessments.

DRILL (Distributable Remote Integrated Lightweight Link) is a powerful and stealthy Command and Control (C2) framework designed for seamless operation across various environments.

The Python Risk Identification Tool for generative AI (PyRIT) is an open access automation framework to empower security professionals and machine learning engineers to proactively find risks in their generative AI systems.

Compiled tools for internal assessments

🐢 Open-Source Evaluation & Testing for ML & LLM systems

Public repository for the techniques and tools shown on rtt.secdu.de

Tool to resolve RPC endpoints to their respective UUIDs.

A command-line utility designed to help you discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

Nimbo-C2 is yet another (simple and lightweight) C2 framework

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

A Bug Bounty Platform that allows hunters to issue commands over a geo-distributed cluster. The ideal user is someone who is attempting to scan multiple bug bounty programs simultaneously, on a recurring basis.

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

该工具用于导出正在运行中的微信进程的 key 并自动解密所有微信数据库文件以及导出 key 后数据库文件离线解密。

Quickly create a list of dorks based on variables entered.

Attack Surface Management & Red Team Simulation Platform 互联网攻击面管理&红队模拟平台

Welcome to the Tools and Scanners repository! This collection features cybersecurity tools for red and blue team activities, including custom-made tools and scanners to enhance your security posture.

Tools and Techniques for Red Team / Penetration Testing

EyeSpy is a PowerShell tool for finding IP Cameras and spraying credentials at the underlying RTSP streams if present.

Personal InfoSec Blog

Manipulate Email:Pass combo, All in one tool.