OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.

Red Team Toolkit is an Open-Source Django Offensive Web-App which is keeping the useful offensive tools used in the red-teaming together.

WiFi Penetration Testing Guide

Discover new target domains using Content Security Policy

A Burp extension helps identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violations, while also converting HTTP requests to JavaScript for enhanced XSS exploitation.

Python tool for phishing

one-stop resource for all things offensive security.

「💀」Proof of concept on BYOVD attack

The Most Advanced Client-Side Prototype Pollution Scanner

SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. It filters URLs to identify those with parameters susceptible to SQL injection formats and then performs injection attacks. These attacks include pattern matching, error analysis, and timing attacks.

Red Team tools weaponized

Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python.

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedicated to improving their skills in malware development, malware research, offensive security, security defenses and measures.

fsociety is a penetration toolkit inspired from MR. ROBOT

Python tools for networking

Posts about different topics

C2 and Post Exploitation Code

Our repo for crushing through RTO course & labs.