Security Research from the Microsoft Security Response Center (MSRC)

PowerShell for every system!

Remote Recon and Collection

Stealing Signatures and Making One Invalid Signature at a Time

A payload stager using PowerShell

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

FUSE driver to read/write Windows' BitLocker-ed volumes under Linux / Mac OSX

Dirty COW

Not PowerShell

SSH server auditing (banner, key exchange, encryption, mac, compression, compatbility, etc)

A practical guide to securing OS X

PowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier"

DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking

Vulnerability Compliance Report Tool used to parse Nessus files into html reports created by SynerComm, Inc.

The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modu…

Knock Subdomain Scan

A post-exploitation powershell tool for extracting juicy info from memory.

hacklib - pentesting, port scanning, and logging in anywhere with Python

Security Documentation Builder

Information Security Reference That Doesn't Suck

Password cracking rules for Hashcat based on statistics and industry patterns

A collection of awesome penetration testing resources, tools and other shiny things

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

Bash script that tests if a system is Winshock (MS14-066) vulnerable

An adaptive, intelligent XSS fuzzer that learns how the response is reflected and carefully crafts an XSS payload to match