Creating a hardened "Blue Forest" with Server 2016/2019 Domain Controllers

A new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login pages like Microsoft and the use with Evilginx.

Rules shared by the community from 100 Days of YARA 2024

My Private Bug Hunting Methodology

Script designed to identify CanaryTokens within Microsoft Office documents and Acrobat Reader PDF (docx, xlsx, pptx, pdf).

Windows Local Privilege Escalation Cookbook

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint List and exfiltrate files using Google Drive or…

Galah: An LLM-powered web honeypot.

Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in Windows environments.

[IJCAI 2024] Imperio is an LLM-powered backdoor attack. It allows the adversary to issue language-guided instructions to control the victim model's prediction for arbitrary targets.

IDA plugin which queries uses language models to speed up reverse-engineering

The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer.

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Clean accounts over permissions in GCP infra at scale

Web Path Finder

New ways of breaking app-integrated LLMs

𓃌 - Exploit faster with simplicity and ease using Axer

MS Graph Commands and Tools for Blue Teamers

A curated list of GPT agents for cybersecurity

A tool that leverages ChatGPT through the OpenAI API to generate review questions based on input text.

Burp extension used to snip any header from all the requests.

Social Engineering Browser Update Attack.

Golang weaponization for red teamers.

Different methods to get current username without using whoami

A browser extension for Penetration Testing

Robust Speech Recognition via Large-Scale Weak Supervision

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike and Linear

Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites