pazwant Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

bhg

Code samples for No Starch Press Black Hat Go

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogunlab).

concourse

Concourse is a container-based continuous thing-doer written in Go and Elm.

cveautomatcher

Metasploit plugin to parse Metasploit DB for CVE numbers and match these with existing exploit and aux modules.

docker_oneliners

Collection of docker oneliners to save time when compiling/running projects for security research & development.

etherpad-lite

Etherpad: A modern really-real-time collaborative document editor.

garble

Obfuscate Go builds

log4j2_rce

log4j2 rce、poc

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

memory-security

Tools for securely clearing and validating iOS application memory

msspray

Password attacks and MFA validation against various endpoints in Azure and Office 365

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcode

Static Code Scanner

rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

scantron

A distributed nmap / masscan scanning framework complete with scan scheduling, engine pooling, subsequent scan port diff-ing, and an API client for automation workflows.

shadowrdp

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spoofcheck

Simple script that checks a domain for email protections

squid

Squid Web Proxy Cache

syswhispers

AV/EDR evasion via direct system calls.