The Havoc Framework

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

BloodyAD is an Active Directory Privilege Escalation Framework

Tool for Active Directory Certificate Services enumeration and abuse

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

UNIX-like reverse engineering framework and command-line toolset

This project is aimed at freely providing technical guides on various hacking topics.

A collection of awesome penetration testing resources, tools and other shiny things

Deserialization payload generator for a variety of .NET formatters

Sticky notes for pentesting, bug bounty, CTF.

PowerSploit - A PowerShell Post-Exploitation Framework

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Compiled Binaries for Ghostpack

Trying to tame the three-headed dog.

Avalonia-based .NET Decompiler (port of ILSpy)

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Single-file PHP shell

Scripted Local Linux Enumeration & Privilege Escalation Checks

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository …

Linux privilege escalation auditing tool

Various *nix tools built as statically-linked binaries

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking Tool

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.