Auto-complete/auto-suggestion for django-taggit (django-taggit + selectize.js)

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Attack Surface Management Platform

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Active Directory information dumper via LDAP

Monitor linux processes without root permissions

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Reverse shell generator written in Python 3.

Utility to enumerate users, groups and computers from a Windows domain through LDAP queries

Fast web fuzzer written in Go

Weaponized web shell

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

In-depth attack surface mapping and asset discovery

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Linux enumeration tool for pentesting and CTFs with verbosity levels

Writeups for HacktheBox 'boot2root' machines

SMBMap is a handy SMB enumeration tool

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Six Degrees of Domain Admin

C# Data Collector for the BloodHound Project, Version 3

Web path scanner

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A tool to perform Kerberos pre-auth bruteforcing

An LDAP based Active Directory user and group enumeration tool

Impacket is a collection of Python classes for working with network protocols.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

World's fastest and most advanced password recovery utility