boh

RedCsharp. Collection of C# projects. Useful for pentesting and redteaming.

RedBlueNotes. Personal notes from Red teamer for Blue/Red/Purple.

terraform-phishing. Build a phishing server (Gophish) together with SMTP-redirector (Postfix) automatically in Digital Ocean with terraform and ansible..

notes. Personal notes for pentest, dfir and various offense/defense fun.

pentest_compilation. Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

Aggressor-Scripts. Aggressor scripts for Cobalt Strike

AD-security-workshop. Resources for our Active Directory security workshops

35c3ctf. 35C3 Junior CTF pwnables

31-days-of-API-Security-Tips. This challenge is Inon Shkedy's 31 days API Security Tips.

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

windows-security. Resources About Windows Security. 1100+ Open Source Tools. 3300+ Blog Post and Videos.

routeros. RouterOS Bug Hunt Materials Presented at Derbycon 2018

adversarial-threat-modelling. Supporting material for my presentation "Adversarial Threat Modelling — A Practical Approach to Purple Teaming in the Enterprise"

RedFile. A flask wsgi application that serves files with intelligence, good for serving conditional RedTeam payloads

byor. Build-Your-Own Ransomware: Python demo implementation (vibe coded)

WebShell. Webshell && Backdoor Collection

spoofing-office-macro. :fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

Advanced-SQL-Injection-Cheatsheet. A cheat sheet that contains advanced queries for SQL Injection of all types.

Empire. Empire is a PowerShell and Python 3.x post-exploitation framework.

ThreatCheck. Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

malware-gems. A not so awesome list of malware gems for aspiring malware analysts

allinfosecnews_sources. A list of online news & info sources in the InfoSec/Cybersecurity space

deobfuscation-research. some paper/project/script about deobfuscation

ADAPE-Script. Active Directory Assessment and Privilege Escalation Script

SprayingToolkit. Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient.

afl-training. Exercises to learn how to fuzz with American Fuzzy Lop