Helper script for spawning a minimal Ubuntu 16.04 container ready for building kernel exploits (~4.x)

A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

A fast TCP/UDP tunnel over HTTP

A little tool to play with Windows security

A silly PAM module to allow authentication as any user with a single password.

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Deploy Linux hacking stuff and randomly misconfigured Windows Active Directory

A RunAs clone with the ability to specify the password as an argument.

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository…

Adversary Emulation Framework

New generation of wmiexec.py

ConPtyShell - Fully Interactive Reverse Shell for Windows

A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…

A fast TCP/UDP tunnel over HTTP

Fast web fuzzer written in Go