voodooraptor's Stars
BishopFox/sliver
Adversary Emulation Framework
SecWiki/windows-kernel-exploits
windows-kernel-exploits Windows平台提权漏洞集合
yarrick/iodine
Official git repo for iodine dns tunnel
ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
BC-SECURITY/Empire
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
Veil-Framework/Veil
Veil 3.1.X (Check version info in Veil at runtime)
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
its-a-feature/Mythic
A collaborative, multi-platform, red teaming framework
bats3c/shad0w
A post exploitation framework designed to operate covertly on heavily monitored environments
slimm609/checksec.sh
Checksec.sh
sashs/Ropper
Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.
p3nt4/PowerShdll
Run PowerShell with rundll32. Bypass software restrictions.
GhostManager/Ghostwriter
The SpecterOps project management and reporting engine
threatexpress/red-team-scripts
A collection of Red Team focused tools, scripts, and notes
61106960/adPEAS
Powershell tool to automate Active Directory enumeration.
c3c/ADExplorerSnapshot.py
ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.
PwnDexter/SharpEDRChecker
Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.
skahwah/SQLRecon
A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
dievus/Oh365UserFinder
Python3 o365 User Enumeration Tool
v4d1/SpoofThatMail
Bash script to check if a domain or list of domains can be spoofed based in DMARC records
outflanknl/InlineWhispers
Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)
WiredPulse/PoSh-R2
PowerShell - Rapid Response... For the incident responder in you!
cepxeo/dll4shell
Shellcode launcher for AV bypass
dievus/msdorkdump
Google Dork File Finder
jfmaes/AmsiHooker
Hookers are cooler than patches.
XMCyber/XMGoat
dievus/msdnsscan
MayorSec DNS Enumeration Tool
ZarvisD/Azure-AD
Azure pentesting reference for Altered Security Lab
yua-mikanana/aes_dinvoke
a repository that contains the program.cs source file that has D/Invoke bare minimum implementation and AES encryption for shellcode execution
WiredPulse/BlueSpectrum
An IOC framework written in PowerShell