adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

androidmalware

Some of the latest malware

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cve-2021-1675

Impacket implementation of CVE-2021-1675

cve-2021-1676

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

cve-2022-21907

Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907

double

double-submits-cookie-and-synchronizer-token-pattern

flutter-lanka-clear-sdk

free-certifications

A curated list of free courses & certifications.

ghost-in-the-logs

Evade sysmon and windows event logging

hayagriva

bgp.he.net subnet scraper

linux-exploit-suggester

Linux privilege escalation auditing tool

offsec

owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

printnightmare

ransomware-samples

Warning! This repository contains samples of ransomware.

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

rce-finder

A tool to find good RCE

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

rsatool

rsatool can be used to calculate RSA and RSA-CRT parameters

sliit_ctf

Community maintained ctf framework

sn1per

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

symfony-exploits

Exploits targeting Symfony

thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

wordlists-useful

some useful wordlists

wrathfuldiety

zerologon

zerologon script to exploit CVE-2020-1472 CVSS 10/10