sancur Goto Github PK

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

etwmonitor

Windows notifier tool that detects suspicious connections by monitoring ETW event logs

evilgophish

evilginx2 + gophish

evilsocket

about me

exegol

Fully featured and community-driven hacking environment

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

flare-vm

foca

Tool to find metadata and hidden information in the documents.

ghunt

🕵️‍♂️ Offensive Google framework.

gophish

Open-Source Phishing Toolkit

group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

havoc

The Havoc Framework

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

impacket

Impacket is a collection of Python classes for working with network protocols.

inceptor

Template-Driven AV/EDR Evasion Framework

ired.team

Red Teaming Tactics and Techniques

itwasalladream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

joomscan

OWASP Joomla Vulnerability Scanner Project

linkfinder

A python script that finds endpoints in JavaScript files

linux_cheatsheet

LInux cheat sheet

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lpic1book

LPIC1 Study Guide

maigret

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

messingupwithblueteam

mimikatz

A little tool to play with Windows security

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management