Collection of Cyber Threat Intelligence sources from the deep and dark web

A curated list of resources related to IPTV

A script that helps you understand why your E-Mail ended up in Spam

Grep Bugs with Git

A Burp Suite extension to add a custom header (e.g. JWT)

Six Degrees of Domain Admin

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.

Attack and defend active directory using modern post exploitation adversary tradecraft activity

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.

A little tool to play with Windows security

Helped during my OSCP lab days.

A super small jsp webshell with file upload capabilities.

PyIris is a modular remote access trojan toolkit written in python targeting Windows and Linux systems.

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

A tool that checks and downloads scripts that will aid with privilege escalation on a Windows system.

Collection of things made during my OSCP journey

Windows Exploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

PowerSploit - A PowerShell Post-Exploitation Framework

windows-kernel-exploits Windows平台提权漏洞集合

JAWS - Just Another Windows (Enum) Script

ASYRV es una aplicación escrita en PHP/MySQL, con Servicios Web mal desarrollados(SOAP/REST/XML), esperando ayudar a los entusiastas de la seguridad informática a comprender esta tecnología tan uti…

Zero-Day Code Injection and Persistence Technique

Fuzzbunch deployment for Debian - Intructions: Readme.md