H*s*m

vulnerable-AD. Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

sam-the-admin. Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

PE-Linux. Linux Privilege Escalation Tool

CVE-2024-32002. CVE-2024-32002 RCE PoC

LightMe. HTTP Server serving obfuscated Powershell Scripts/Payloads

metateta. Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit

CVE-2018-6389. CVE-2018-6389 Exploit In WordPress DoS

android-usb-pwn. simple script to pwn android phone with physical access

redblock. RedBlock is an Nginx module designed for offensive security operations and red teaming. This module empowers security professionals to easily block all IPs associated with hosting and cloud infrastructure, as well as known sandbox environments.

remote-adb-scan. pure python remote adb scanner + nmap scan module

exchange-cves-scanner. Small tool to scan On-Premises Exchange servers, useful for analytical purposes and patch management

acunetix-python. Acunetix Python API

edge-hot-delivery. edge --> powerpoint --> remote-file --> shell

HVNC-POC. HVNC using virtual desktop

takeoverit. Simple And Fast Subdomain Take Over Checker

nmap-output-analyzer. xml nmap output analyzer using python

procinj-csharp. Process Injection techniques implemented in C#.

Egyptian-national-identity. Egyptian national identity Generator for testing purposes

1-to-0. Privilege Escalation From 1 to 0 (Workshop Slides)

github-repos-cve. Search CVE numbers in GitHub repos

HideImports. C++

cli-manager-mcp. A Model Context Protocol (MCP) server that provides tools for executing shell commands in the background and retrieving their results asynchronously. This server is designed for AI agents that need to run long-running or blocking commands without blocking the main thread.

injection. C++