WunderSys: an Achaean ServerSide Curing System

Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.

The Havoc Framework

A lightweight text editor written in Lua

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

Network Pivoting Toolkit

👨‍✈️ A suite of packet capture and analysis tools for FFXI targeting Windower v4, Ashita v3, and Ashita v4.

Nmap's XML result parse and NVD's CPE correlation to search CVE.

A tiny FPS for js13k

Templates to deploy a serverless Minecraft Server on demand in AWS

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Repository for threat hunting and detection queries, etc. for Defender for Endpoint and Microsoft Sentinel in KQL(Kusto Query Language).

Windows batch script that finds misconfiguration issues which can lead to privilege escalation.

The open-source, cross-platform API client for GraphQL, REST, WebSockets and gRPC.

PowerShell Ransomware Simulator with C2 Server

Python3 o365 User Enumeration Tool

Labtainers: A Docker-based cyber lab framework

🖥️ P2P Remote Desktop - Portable, No Configuration or Installation Needed.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

A swiss army knife for pentesting networks

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

DeimosC2 is a Golang command and control framework for post-exploitation.

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

🤖 The Modern Port Scanner 🤖

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, …

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

All Algorithms implemented in Python