Orbit Scanning Software

Ready to go Phishing Platform

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Modlishka. Reverse Proxy.

Improves vulnerability prioritization by enhancing CVSS scores with exploit intelligence. Combines data from CISA KEV, EPSS, Metasploit, and other sources to create actionable severity ratings that…

A python module for working with ATT&CK

A little tool to play with Windows security

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The swiss army knife of LSASS dumping

LSASS memory dumper using direct system calls and API unhooking.

Useful C2 techniques and cheatsheets learned from engagements

Situational Awareness commands implemented using Beacon Object Files

Six Degrees of Domain Admin

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

PurpleLab is an efficient and readily deployable lab solution, providing a swift setup for cybersecurity professionals to test detection rules, simulate logs, and undertake various security tasks,…

Gospider - Fast web spider written in Go

Sunshine fork - The easiest way to stream with the native resolution of your client device

Dark theme for vimium chrome extension.

A highly customizable macOS status bar replacement

A tiling window manager for macOS based on binary space partitioning

Hacking WPA/WPA2 Wi-Fi Using Flipper Zero with Developer Board

WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.

Cortex: a Powerful Observable Analysis and Active Response Engine

TheHive: a Scalable, Open Source and Free Security Incident Response Platform

ThePhish: an automated phishing email analysis tool

Proactive, Open source API security → API discovery, API Security Posture, Testing in CI/CD, Test Library with 1000+ Tests, Add custom tests, Sensitive data exposure

Kestrel Hunting Lab for Black Hat USA 2024