A self-hosted Fuzzing-As-A-Service platform

Change up a binary's embedded resources with this little creature.

Starkiller is a Frontend for PowerShell Empire.

iOS/macOS/Linux Remote Administration Tool

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it i…

SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.

This PowerShell script will determine if your connection to external servers over HTTPS is being decrypted by an intercepting proxy such as the internet proxies commonly found in corporate environm…

Automate AV evasion by calling AMSI

Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.

Cobalt Strike kit for Lateral Movement

The Old BloodHound C# Ingestor (Deprecated)

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

Weaponized web shell

DOM XSS scanner for Single Page Applications

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Malicious Macro Generator

DKMC - Dont kill my cat - Malicious payload evasion tool

Hardening and Auditing Tool For Docker Hosts & Containers

Docker auditing and enumeration script.

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Simple Bash IOC Scanner

Convolutional neural network for analyzing pentest screenshots

A collection of ZSH frameworks, plugins, themes and tutorials.

A passive subdomain finder