The pattern matching swiss knife

AV Evasion Techniques

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

Covenant is a collaborative .NET C2 framework for red teamers.

Starkiller is a Frontend for PowerShell Empire.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

This is a webshell open source project

Attack and defend active directory using modern post exploitation adversary tradecraft activity

rsatool can be used to calculate RSA and RSA-CRT parameters

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data

Directory Services Internals (DSInternals) PowerShell Module and Framework

🎯 Command Injection Payload List

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Tool to audit and attack LAPS environments

PowerSploit - A PowerShell Post-Exploitation Framework

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Self-Installing Windows OVA. Automate and distribute Windows as an OVA.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Various *nix tools built as statically-linked binaries

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

firepwd.py, an open source tool to decrypt Mozilla protected passwords

Credentials recovery project

Abusing impersonation privileges through the "Printer Bug"

Effing package management! Build packages for multiple platforms (deb, rpm, etc) with great ease and sanity.

Fortran Package Manager (fpm)