Latest CVEs with their Proof of Concept exploits.

Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI

LD_PRELOAD library to bypass TLS certificate verification for debugging and testing

NetFlow v9 collector for ntopng

HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…

Test for buffer bloat on a local network

A Workflow Engine for Offensive Security

improving...

Enhance Your Active Directory Password Spraying with User Intelligence

Autoswagger by Intruder - detect API auth weaknesses

OSINT tool to crawl a site and extract useful recon info.

Run Windows apps such as Microsoft Office/Adobe in Linux (Ubuntu/Fedora) and GNOME/KDE as if they were a part of the native OS, including Nautilus integration. Hard fork of https://github.com/Fmst…

Open Adversary Exposure Validation Platform

Header Exploitation HTTP

Cybersecurity AI (CAI), an open Bug Bounty-ready Artificial Intelligence

Curated real Indonesian passwords for penetration testing & security audits.

.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation

Tools and Techniques for Red Team / Penetration Testing

Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.

The official gpt4free repository | various collection of powerful language models | o3 and deepseek r1, gpt-4.5

Automatically create an operation log of your shell! Supports Linux (Bash/Zsh) and Windows (PowerShell/CMD).

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native executables.

Weaponized EvilnoVNC: Scalable and semi-automated MFA-Phishing

A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

A command-line utility designed to help you discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't inte…

All-in-One Toolkit for BruteForce Attacks

List of some AD tools I frequently use