Authenticator generates 2-Step Verification codes in your browser.

Python Fire is a library for automatically generating command line interfaces (CLIs) from absolutely any Python object.

Official electron build of draw.io

draw.io is a JavaScript, client-side editor for general diagramming.

pandas on AWS - Easy integration with Athena, Glue, Redshift, Timestream, Neptune, OpenSearch, QuickSight, Chime, CloudWatchLogs, DynamoDB, EMR, SecretManager, PostgreSQL, MySQL, SQLServer and S3 (…

Red Teaming Tactics and Techniques

Penetration tests guide based on OWASP including test cases, resources and examples.

This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaknesses you will be verse enough to provide the correct coun…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Kvasir: Penetration Test Data Management

The goal of this repository is to document the most common techniques to bypass AppLocker.

Windows post-exploitation tools, resources, techniques and commands to use during post-exploitation phase of penetration test. Contributions are appreciated. Enjoy!

Post Exploitation Collection

Small and highly portable detection tests based on MITRE's ATT&CK.

Mimikatz implementation in pure Python

Robber is open source tool for finding executables prone to DLL hijacking

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

Ephemera and other documentation associated with the 1337list project.

My musings with PowerShell

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support

Pop shells like a master.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Privilege Escalation Project - Windows / Linux / Mac

A curated list of resources for learning about application security

A powerful and extensible wireless drop box

Custom wordlist generator

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

A curated list of cryptography papers, articles, tutorials and howtos.

Framework for Testing WAFs (FTW!)

Issues to consider when planning a red team exercise.