Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

In-depth attack surface mapping and asset discovery

DNS Enumeration Script

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Create Customized Software using Natural Language Idea (through LLM-powered Multi-Agent Collaboration)

CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.

CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator.

Fetch all the URLs that the Wayback Machine knows about for a domain

game of active directory

The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

A CIA tradecraft technique to asynchronously detect when a process is created using WMI.

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Active Directory certificate abuse.

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

The Network Execution Tool

A modern tool for Windows kernel exploration and tracing with a focus on security

Find and verify credentials

Impacket is a collection of Python classes for working with network protocols.

A curated list of tools for incident response

Find domains and subdomains related to a given domain

🖥 📊 🕹 🛠 A curated list of command line apps

Trying to tame the three-headed dog.