All in One Checker AWS | Mailgun | Brevo | Redirection generator | Mailling tool |

Memory Obfuscation in Rust

Privilege Escalation Project - Windows / Linux / Mac

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

PoC Exploit for the NTLM reflection SMB flaw.

Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin rights required.

A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

this project implements a remote shellcode injection technique using asynchronous procedure calls (apcs) combined with rtl function gadgets for memory writing. the method leverages windows ntdll fu…

Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible

rga: ripgrep, but also search in PDFs, E-Books, Office documents, zip, tar.gz, etc.

the POC of package.json RCE

Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

FreeBasic NTSocket

a pure go implementation of 5mukx's NTSockets, with added functionality of shellcode injection

Adversary Emulation Framework

Tool for recovering the phone number tied to a Google account

🕵️‍♂️ All-in-one OSINT tool for analysing any website

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

Automating the MITM attack on WSUS

PE to shellcode

Null-AMSI is an AMSI and ETW bypass that takes advantage of .NET types (.NET Reflection) to bypassing AV/EDR.

IPSpinner works as a local proxy that redirects requests through external services.

Creates and sends fake meeting invite

GitHub Actions Pipeline Enumeration and Attack Tool

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

sturdy-chainsaw

MailFail identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extensions UI popup highlights any misconfigurations…