Stars
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…
A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.
crawls the website and finds broken social media links that can be hijacked
damn-exploitable-android-app-apk
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
Tools and Techniques for Red Team / Penetration Testing
Web Security Checklist (Bug Bounty & Pentesting)
Red Team Cheatsheet in constant expansion.
Extracting Clear Text Passwords from mstsc.exe using API Hooking.
Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
Red Teaming Tactics and Techniques
List of Awesome Red Teaming Resources
Active Directory pentesting mind map
chvancooten / BadBlood
Forked from davidprowe/BadBloodBadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…
A workshop about Malware Development
An automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular architecture easily extensible with new techniques
A PowerShell tool that takes strong inspiration from CrackMapExec / NetExec
An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.