ssti-payloads

🎯 Server Side Template Injection Payloads

sstimap

Automatic SSTI detection tool with interactive interface

st2-057

St2-057 Poc Example

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

starfighters

A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.

start-adenum

Tool that automates Active Directory enumeration

static-binaries

Various *nix tools built as statically-linked binaries

statistically-likely-usernames

Wordlists for creating statistically likely username lists for use in password attacks and security testing

steganography

:see_no_evil: Steganography: Hiding an image inside another

stego-toolkit

Collection of steganography tools - helps with CTF challenges

stegoveritas

Yet another Stego Tool

stompy

Timestomp Tool to flatten MAC times with a specific timestamp

stopdefender

Stop Windows Defender programmatically

storm-breaker

Tool social engineering [Access Webcam & Microphone & Os Password Grabber & Location Finder] With Ngrok

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

struts-pwn

An exploit for Apache Struts CVE-2017-5638

struts-pwn_cve-2017-9805

An exploit for Apache Struts CVE-2017-9805

struts-pwn_cve-2018-11776

An exploit for Apache Struts CVE-2018-11776

su-bruteforce

subrake

A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.

sudo_killer

A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

suid3num

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

superman

🤖 Kill The Protected Process 🤖

swaks

Swaks - Swiss Army Knife for SMTP

swap_digger

swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

swordphish-awareness

Swordphish Phishing Awareness Tool

sys-calls

An example of using Syscalls in C# to get a meterpreter shell.

systemnightmare

Gives you instant SYSTEM command prompt on all supported and legacy versions of Windows

systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability