MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

A GPT-empowered penetration testing tool

Create tar/zip archives that try to exploit zipslip vulnerability.

Digging Deeper....

secator - the pentester's swiss knife

Deploy undetectable reverse shells and perform stealthy process injection with EchoStrike – a Go-based tool for ethical hacking and Red Team operations.

Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allo…

Creates shortcuts to virtually every special location or action built into Windows

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments…

PDF dropper Red Team Scenairos

Monitor changes in Active Directory with replication metadata

Information gathering framework for phone numbers

PowerShell for every system!

This repository contains the mobile Proof of Concept (POC) tester for CTF challenges. The POC tester is a web application that allows users to test their POCs against a vulnerable Android applicati…

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

Build cross-platform desktop apps with JavaScript, HTML, and CSS

A complete solution to package and build a ready for distribution Electron app with “auto update” support out of the box

A powerful obfuscator for JavaScript and Node.js

A PHP client library for sending and managing SMS messages via the Android SMS Gateway API.

A tool to listen to Oauth Callbacks and pass auth token to other tools

Realtime application framework (Node.JS server)

A light-weight module that brings the Fetch API to Node.js

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

A little tool to play with Windows security

spymax free download

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)