Docker container for running CobaltStrike 4.7 and above

🖥️ Session manager for tmux, build on libtmux.

The recursive internet scanner for hackers. 🧡

Zero shot vulnerability discovery using LLMs

Themida unpacker

The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.

Wordlists for creating statistically likely username lists for use in password attacks and security testing

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

The Hunt for Malicious Strings

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Active Directory information dumper via LDAP

Scan for misconfigured S3 buckets across S3-compatible APIs!

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

This tool is used to map out the network data flow to help penetration testers identify potentially valuable targets.

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Tools for Kerberos PKINIT and relaying to AD CS

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

A permutation generation tool written in golang

DLL and PowerShell script to assist with finding DLL hijacks

Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Data processing with ML, LLM and Vision LLM

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

Technical documentation, tips, guidelines and FAQ on SRT protocol

A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM