schumact's Stars
danvk/aoc2020
Advent of Code 2020 (in Rust)
mkaring/ConfuserEx
An open-source, free protector for .NET applications
h4wkst3r/InvisibilityCloak
Proof-of-concept obfuscation toolkit for C# post-exploitation tools
trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
guervild/uru
pwn1sher/frostbyte
FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads
michenriksen/gitrob
Reconnaissance tool for GitHub organizations
haccer/subjack
Subdomain Takeover tool written in Go
jpillora/conncrypt
Symmetrically encrypt your Go net.Conns
Binject/backdoorfactory
A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.
golang/sys
[mirror] Go packages for low-level interaction with the operating system
C-Sto/BananaPhone
It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!)
liamg/traitor
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
otya128/web-bml
Data broadcasting browser for Japanese TV
Group3r/Group3r
Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.
wumb0/rust_bof
Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.
hfiref0x/UACME
Defeating Windows User Account Control
lapce/lapce
Lightning-fast and Powerful Code Editor written in Rust
0xsha/CloudBrute
Awesome cloud enumerator
OWASP/owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
twitchtv/twirp
A simple RPC framework with protobuf service definitions
hartator/wayback-machine-downloader
Download an entire website from the Wayback Machine.
wavestone-cdt/EDRSandblast
norrismw/CVE-2020-9047
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
JustasMasiulis/inline_syscall
Inline syscalls made easy for windows on clang
jthuraisamy/SysWhispers
AV/EDR evasion via direct system calls.
awgh/ldap-get
Utility to safely fetch Java class files being served by LDAP servers. Includes deobfuscator for common Log4J URL obfuscation techniques.
projectdiscovery/interactsh
An OOB interaction gathering server and client library
Ne0nd0g/go-clr
A PoC package for hosting the CLR and executing .NET from Go