A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

(⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

Automatic SSTI detection tool with interactive interface

All cheetsheets with main information from HTB CBBH role path in one place.

⚓️ Easily test HTTP webhooks with this handy tool that displays requests instantly.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Certified Red Team Operator

Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!

Install and Run Python Applications in Isolated Environments

Download all the wallpapers in MKBHD's "Panels" app

Disconnected GPO Editor - A Group Policy Manager launcher to allow editing of domain GPOs from non-domain joined machines

A collection of tools that I use in CTF's or for assessments

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Obsidian

An OSINT tool to search for accounts by username and email in social networks.

A Fast (and safe) parser for the Windows XML Event Log (EVTX) format

Comfortably monitor your Internet traffic 🕵️‍♂️

Monitor changes in Active Directory with replication metadata

smbclient-ng, a fast and user friendly way to interact with SMB shares.

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Malware Configuration And Payload Extraction

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.

A large collection of system log datasets for AI-driven log analytics [ISSRE'23]

Learn Splunk by creating a lab instance in seconds. Includes Eventgen and Splunk's Machine Learning app!

Incident Response collection and processing scripts with automated reporting scripts

Python for AWAE (Advanced Web Attacks and Exploitation)

A curated list of CTF frameworks, libraries, resources and softwares

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Close-Circuit Telegram Vision revolutionizes location tracking with its open-source design and Telegram API integration. Offering precise tracking within 50-100 meters, users can monitor others in …

This script searches messages containing specified search terms in Telegram channels the user is a member of.