This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Mobile Device Management server

Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins ⬆️ ☠️

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Generate Professional Phishing Emails Fast And Easy

🤖 Autonomous robot for all your electronic needs

Open-Source Collection of Social Engineering Pretexts

A collection of all the data i could extract from 1 billion leaked credentials from internet.

A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

Venom - A Multi-hop Proxy for Penetration Testers Written in Go

linikatz is a tool to attack AD on UNIX

A collection of useful Serverless functions I use when pentesting

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs

A list of Domain Frontable Domains by CDN

🤓 Build your own (insert technology here)

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

💉 DLL/Shellcode injection techniques

💻 Elevate, UAC bypass, persistence, privilege escalation, dll hijack techniques

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

PowerShell Runspace Post Exploitation Toolkit

Payload Generation Framework

An Information Security Reference That Doesn't Suck

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

Windows / Linux Local Privilege Escalation Workshop