OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent & VSCode Agent (And other Open Sourced) System Prompts, Tools & AI Models.

✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

Attempt at Obfuscated version of SharpCollection

A C# utility for interacting with SCCM

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

My experiments in weaponizing Nim (https://nim-lang.org/)

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Execute Remote Assembly with args passing and with AMSI and ETW patching

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

Active Directory certificate abuse.

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

Subdomain Takeover tool written in Go

Metasploit Framework

A method of bypassing EDR's active projection DLL's by preventing entry point exection

Documentation of Cortex

C# Data Collector for the BloodHound Project, Version 3

DTcms开源框架