f0cker

T3MP3ST. autonomous red teaming platform; multi-agent offensive-security meta-harness

privacy-filter. OpenAI Privacy Filter

Verto_XR. VertoXR: Transform the extended reality experience

bloodyAD. BloodyAD is an Active Directory Privilege Escalation Framework

MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

Poc-Monitor. 🔍 Github CVE POC 信息监控推送 🚀

CrimsonEDR. Simulate the behavior of AV/EDR for malware development training.

Apollo. A .NET Framework 4.0 Windows Agent

crackq. CrackQ: A Python Hashcat cracking queue system

awesome-emails. ✉️ An awesome list of resources to build better emails.

purple-team-exercise-framework. Purple Team Exercise Framework

Autowasp. BurpSuite Extension: A one-stop pen testing checklist and logger tool

OffensiveRust. Rust Weaponization for Red Team Engagements.

CVE-2021-40444--CABless. Modified code so that we don´t need to rely on CAB archives

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

RemotePotato0. Windows Privilege Escalation from User to Domain Admin.

Rubeus. Trying to tame the three-headed dog.

Certify. Active Directory certificate abuse.

gef. GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

textual. The lean application framework for Python. Build sophisticated user interfaces with a simple Python API. Run your apps in the terminal and a web browser.

wg-securing-critical-projects. Helping allocate resources to secure the critical open source projects we all depend on.

forest-trust-tools. Proof-of-concept tools for my AD Forest trust research

DInvoke. Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

donut. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Covenant. Covenant is a collaborative .NET C2 framework for red teamers.

node-canvas. Node canvas is a Cairo backed Canvas implementation for NodeJS.

domainhunter. Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

Checklists. Red Teaming & Pentesting checklists for various engagements

pysaml2. Python implementation of SAML2

MSBuildAPICaller. MSBuild Without MSBuild.exe

pcfg_cracker. Probabilistic Context Free Grammar (PCFG) password guess generator

Password_Research_Tools. A collection of tools used for researching passwords

EXCELntDonut. Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

CovenantTasks. Source for tasks I have used with Covenant

PSBits. Simple (relatively) things allowing you to dig a bit deeper than usual.

rq. Simple job queues for Python

python-zeep. A Python SOAP client

ikeforce. Python

debit. Reverse-engineering tools for FPGA bitstreams, Altera and Xilinx

bil. Bitfile Interpretation Library for Xilinx Virtex FPGAs

fpgatools. public domain tools for FPGAs

hashcat. World's fastest and most advanced password recovery utility

fpga-hash-bruteforcer. MD5 bruteforcer for FPGA devices