0xsauby's Stars
1N3/Sn1per
Attack Surface Management Platform
mandiant/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
michenriksen/aquatone
A Tool for Domain Flyovers
Ne0nd0g/merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
RoganDawes/P4wnP1
P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.
outflanknl/RedELK
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
Marten4n6/EvilOSX
An evil RAT (Remote Administration Tool) for macOS / OS X.
byt3bl33d3r/SILENTTRINITY
An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR
peewpw/Invoke-PSImage
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
FabioBaroni/awesome-exploit-development
A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
mandatoryprogrammer/xsshunter
The XSS Hunter service - a portable version of XSSHunter.com
csujedihy/proximac
An open-source alternative to proxifier
GhostPack/SharpUp
SharpUp is a C# port of various PowerUp functionality.
GhostPack/SafetyKatz
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader
xillwillx/skiptracer
OSINT python webscaping framework
Greenwolf/Spray
A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)
M00nRise/ProcessHider
Post-exploitation tool for hiding processes from monitoring applications
nyxgeek/lyncsmash
locate and attack Lync/Skype for Business
ramen0x3f/AggressorScripts
felixweyne/ProcessSpawnControl
Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.
giMini/mimiDbg
PowerShell oneliner to retrieve wdigest passwords from the memory
Mr-Un1k0d3r/RedTeamScripts
Repo with various Red Team scripts
KINGSABRI/godofwar
GodOfWar - Malicious Java WAR builder with built-in payloads
vysecurity/checkO365
checkO365 is a tool to check if a target domain is using O365
NotMedic/rdp-tunnel
Pre-compiled tools to tunnel TCP over RDP Connections
unixrox/prebellico
Passive internal reconnaissance tool
pry0cc/CredCatch
Find plaintext credentials from emails in bulk from password dumps, and generate emails on the fly.
KINGSABRI/chkdfront
Check Domain Fronting (chkdfront) - It checks if your domain fronting is working
alejcas/pyo365
A simple python library to interact with Microsoft Graph and Office 365 API
ChristianPapathanasiou/teensypwn
Teensy 3.1 USB HID reverse shell for Mac