A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec

JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

Certified Red Team Operator

A tool to visualize data flow through OSI layers.

Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282

OSCP Cheat Sheet

Just another Powerview alternative

Penetration Testing For - Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting, etc...

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

A cat(1) clone with wings.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization,…

Classic Windows 95, 98, Me, 2000, XP, Vista taskbar for modern versions of Windows

Automatized tool to bypass 403 and 401 HTTP status.

Restore a truncated mp4/mov. Improved version of ponchio/untrunc

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

A collection of links related to VMware escape exploits

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

Credentials recovery project

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

This repo is aim to compile all Flare-On challenge's binaries. Update: 2014 -2022.

Chrome Logs Events and Protobuf Parser

Returns Logs Events And Properties Parser

Extract and Visualize Data from URLs using Unfurl

TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!

Automates volatility3 for windows with these plugins: info, pslist, pstree, netscan, netstat, cmdline and immediately output all those to a txt and tsv for easier data handling/manipulation with Au…

A cross-platform, customizable science fiction terminal emulator with advanced monitoring & touchscreen support.