GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

A list of public penetration test reports published by several consulting firms and academic security groups.

Automate the creation of a lab environment complete with security tooling and logging best practices

Windows Events Attack Samples

Malware samples, analysis exercises and other interesting resources.

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.

The Damn Vulnerable Router Firmware Project

E-Mail Header Analyzer

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

Awesome list of keywords and artifacts for Threat Hunting sessions

Reverse Engineering Resources

Automated rogue access point setup tool.

python-pentesting-tool

Basic C2 Server

Totally Insecure Web Application Project (TIWAP)

The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders understand how LOLBin binaries are used by threat actors during…

Phising 2FA Gmail

CarbonBlack EDR detection rules and response actions