CrackerJack / Hashcat Web Interface / Context Information Security

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

FlowAnalyzer is a tool to help in testing and analyzing OAuth 2.0 Flows, including OpenID Connect (OIDC).

Simple Workspace Attack Tool (SWAT) is a tool for simulating malicious behavior against Google Workspace in reference to the MITRE ATT&CK framework.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

A Kernel based root solution for Android

Instrument any LLM to do actual stuff.

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

A Red Team Activity Hub

PACK (Password Analysis and Cracking Kit) (Python 3 fork + bug fixes)

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

Tuoni

Enumerate Microsoft Entra ID (Azure AD) fast

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

Unsecure time-based secret exploitation and Sandwich attack implementation Resources

Impacket is a collection of Python classes for working with network protocols.

Retrieve LAPS passwords from a domain. The tools is inspired in pyLAPS.

A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims at aiding with initial access during red teams and phishing …

smbclient-ng, a fast and user friendly way to interact with SMB shares.

A tool for quickly evaluating IAM permissions in AWS.

Persistent remote applications for X11; screen sharing for X11, MacOS and MSWindows.

A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies

Wireshark RDP resources

This repo contains some Amsi Bypass methods i found on different Blog Posts.

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers

Kubernetes focused container assessment and context discovery tool for penetration testing

Peirates - Kubernetes Penetration Testing tool