Monitor linux processes without root permissions

Automatically brute force all services running on a target.

Defeating Windows User Account Control

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Windows Exploit Suggester - Next Generation

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

OSWE, OSEP, OSED

Some Service DCOM Object and SeImpersonatePrivilege abuse.

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

IDA plugin which queries OpenAI's davinci-003 language model to speed up reverse-engineering

📙 Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

Orange Cyberdefense mindmaps

Arsenal is just a quick inventory and launcher for hacking programs

Compiled Binaries for Ghostpack (.NET v4.0)

Privilege Escalation Enumeration Script for Windows

Determine whether your compute is truly vulnerable to a specific vulnerability by accounting for all factors which affect *actual* exploitability (runtime execution, configuration, permissions, exi…

Adversary Emulation Framework

This is a webshell open source project

exploit for CVE-2022-2588

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

game of active directory

Linux privilege escalation auditing tool

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash