Cloud-native SIEM for intelligent security analytics for your entire enterprise.

Vulnerable NodeJS Web Application

Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powered by a Neo4j database.

Rust Weaponization for Red Team Engagements.

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Mi…

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

An incredibly fast proxy checker & IP rotator with ease.

EXOCET - AV-evading, undetectable, payload delivery tool

A Red Team tool for exfiltrating sensitive data from Jira tickets.

Peirates - Kubernetes Penetration Testing tool

[MAMIP] Monitor AWS Managed IAM Policies Changes

Security Remediation Guides

OSWE, OSEP, OSED

This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

A big list of Android Hackerone disclosed reports and other resources.

ConPtyShell - Fully Interactive Reverse Shell for Windows

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Signature base for my scanner tools

A curated list for Awesome Kubernetes Security resources

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

GUI SQL Injection scannig tool