A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Some files for bruteforcing certain things.

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys

Venom - A Multi-hop Proxy for Penetration Testers

Covenant is a collaborative .NET C2 framework for red teamers.

Generic Signature Format for SIEM Systems

Lockphish is a tool for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode[No longer works on latest devices]

A secure and fast proxy for protect your network traffic

Proofs-of-concept

CrackMapExec v5.1.0 compiled for Windows

Take a list of domains and probe for working HTTP and HTTPS servers

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient

The ultimate WinRM shell for hacking/pentesting

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A Python based ingestor for BloodHound

A collection of open source and commercial tools that aid in red team operations.

A tool to make socks connections through HTTP agents

Bloodhound for Blue and Purple Teams

Fetch all the URLs that the Wayback Machine knows about for a domain

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.