The SpecterOps project management and reporting engine

The Network Execution Tool

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

Chromepass - Hacking Chrome Saved Passwords

Module Stomping, No New Thread, HellsGate syscaller, UUID Dropper for x64 Windows 10!

Deserialization payload generator for a variety of .NET formatters

Payload Generation Framework

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Custom pentesting tools

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Windows Exploit Suggester - Next Generation

PowerSploit - A PowerShell Post-Exploitation Framework

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

OSINT Framework

Covenant is a collaborative .NET C2 framework for red teamers.

World's fastest and most advanced password recovery utility

windows-kernel-exploits Windows平台提权漏洞集合

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

A swiss army knife for pentesting networks

Multi-Cloud Security Auditing Tool

A little tool to play with Windows security

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts.

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Web application fuzzer