proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained p…

Extract credentials from lsass remotely

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Reverse SOCKS5 implementation in Go

The SpecterOps project management and reporting engine

Official git repo for iodine dns tunnel

Useful scripts and tools to test a stack based buffer overflow.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

Portable Executable reversing tool with a friendly GUI

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Fast web fuzzer written in Go

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Hunt down social media accounts by username across social networks

Cobalt Strike Shellcode Generator

Deserialization payload generator for a variety of .NET formatters

CeWL is a Custom Word List Generator

Offensive Powershell obfuscator

A brief list of all the red teaming scenarios that can be easily used to validate your current company infrastructure. Scenarios are company agnostic but technology specific giving you complete aut…

🎯 Command Injection Payload List

A tool to abuse Exchange services

Python GUI based tool to easily convert powershell scripts to exe files utilizing C#.

Collection of flipperzero scripts and resources

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

Scripted Local Linux Enumeration & Privilege Escalation Checks