CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Ap…

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log ag…

Runs exploits, fast.

Network analysis tool for Attack Defence CTF

HackThis!!

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

A .NET malware loader, using API-Hashing to evade static analysis

SharpShell makes it easy to create Windows Shell Extensions using the .NET Framework.

📤 An SMTP library for Go clients and servers

A light-weight first-stage C2 implant written in Nim (and Rust).

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

Sandman is a NTP based backdoor for hardened networks.

Red Team tools, infrastructure, and hardware weaponized

🔑 Hash type identifier (CLI & lib)

A mostly-serverless distributed hash cracking platform

Cobalt Strike BOF with Zig!

Arsenal is just a quick inventory and launcher for hacking programs

The Leading Security Assessment Framework for Android.

An open source project management tool with Kanban boards

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspber…

SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.

A shellcode function to encrypt a running process image when sleeping.