GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

Poc script for ProxyShell exploit chain in Exchange Server

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

ProxyLogon Pre-Auth SSRF To Arbitrary File Write

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

Phishlets for Evilginx2 (MITM proxy Framework)

js免杀shellcode，绕过杀毒添加自启

Simple script that checks a domain for email protections

Run several volatility plugins at the same time

UAC bypass, Elevate, Persistence and Execution methods

Volatility plugin for extracts configuration data of known malware

Exposing phishing kits, creators and malicious actors.

Find open databases with Shodan

OSINT tool to find breached emails and databases

Phishing catcher using Certstream

A curated list of awesome Hacking tutorials, tools and resources

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Reverse Shell as a Service

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

An evil RAT (Remote Administration Tool) for macOS / OS X.

List of Awesome Red Teaming Resources

Email OSINT and password breach hunting. Use h8mail to find passwords through different breach and reconnaissance services, or the infamous Breached Compilation torrent

VB.net Remote Administrator Tool (RAT)

Passwords Recovery Tool

windows-kernel-exploits Windows平台提权漏洞集合

CACTUSTORCH: Payload Generation for Adversary Simulations

CPU Miner monero