MsfMania

MsfMania MsfMania is an advanced Python-based payload obfuscation framework designed to evade EDR/AV detection on Windows systems. It generates highly polymorphic executables through dynamic code generation, multi-layer encryption RC4, and binary metadata spoofing. ⚠️ Educational Purpose Only -...

ThreatIngestor

ThreatIngestor Utilities Scripts to improve ThreatIngestor usage and help with minimizing errors. All scripts contain the following optional argument to allow for higher verbosity in stdout: python3 scripts/ -v A quick list of all available scripts: Script| Example| Description ---|---|---...

rbcd-attack

Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...

xcavator

xcavator A network data locater using credentials obtained during penetration tests. Xcavator is a tool that scans a range of IP addresses for services that host files FTP, FTPS and SMB at the moment and for given credentials it will try to download everything it can and scan within the files for...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

WAF-A-MoLE

WAF-A-MoLE A guided mutation-based fuzzer for ML-based Web Application Firewalls, inspired by AFL and based on the FuzzingBook by Andreas Zeller et al. Given an input SQL injection query, it tries to produce a semantic invariant query that is able to bypass the target WAF. You can use this tool f...

p4wned

P4WNED CVE-2026-6043 Perforce Helix Core security research tools and nuclei templates. Research article: https://morganrobertson.net/p4wned/ Please read the above for complete details. Authorised targets only. Use on your own servers or with explicit written permission. Intended audience: Perforc...

rpi-hunter

rpi-hunter Automate discovering and dropping payloads on LAN Raspberry Pi's via ssh Or, the honest title: Automating sshpass for command delivery. Rpi-hunter is useful when there are multiple Raspberry Pi's on your LAN with default or known credentials, in order to automate sending...

zBang

zBang is a special risk assessment tool that detects potential privileged account threats in the scanned network. Organizations and red teamers can utilize zBang to identify potential attack vectors and improve the security posture of the network. The results can be analyzed with the graphic...

CDK

CDK - Zero Dependency Container Penetration Toolkit English | 简体中文 Legal Disclaimer Usage of CDK for attacking targets without prior mutual consent is illegal. CDK is for security testing purposes only. Overview CDK is an open-sourced container penetration toolkit, designed for offering stable...

cryptomator

Supporting Cryptomator Cryptomator is provided free of charge as an open-source project despite the high development effort and is therefore dependent on donations. If you are also interested in further development, we offer you the opportunity to support us: One-time or recurring donation via...

vPrioritizer

Overview | How it works | Quickstart | Roadmap | Contact Me Overview As indicated by sources like vulndb & cve, on a daily basis, approximately 50 new vulnerabilities become known to industry and it’s safe to assume that count is going to increase furthermore. It’s a huge number of vulnerabilitie...

amt_auth_bypass_poc

Intel AMT authentication bypass example This is a Proof-of-Concept code that demonstrates the exploitation of the CVE-2017-5689 vulnerability. It is essentialy a mitmproxy script that simply blanks an Authorization header "response" field. Example usage: mitmdump -p 8080 -dd --no-http2 -s...

Rusty-Playground

Rusty-Playground 🦀 A collection of Rust programs showcasing some offensive-securtiy and evasions techniques Tool| Description| References ---|---|--- ClipboardMon| Monitors the clipboard for changes and logs clipboard content or copies files depending on detected changes.| - DumpMDEConfig|...

openrisk

openrisk openrisk is an experimental tool which reads nuclei output text, markdown, and JSON and generates a risk score for the host using OpenAI's GPT-4o model. It is intended, for now, to work against a single target at a time. NOTE : This is an experimental program released by the...

van-gonography

Hide any type of files inside a image of your choice Table of Contents Features How it works Installation Usage License Contributing File to hide| Cover image| Cover with file hidden ---|---|--- | | This is the file that we want to hide inside the image| This is the image that we want to hide the...

capa

Website | Download | Web Interface capa detects capabilities in executable files. You run it against a PE, ELF, .NET module, shellcode file, or a sandbox report and it tells you what it thinks the program can do. For example, it might suggest that the file is a backdoor, is capable of installing...

pstf2

pstf^2 Passive Security Tools Fingerprinting Framework Have you ever wanted a simple, easy and stealth bypass for multiple classes of security products? pstf^2 pronounced pstf-square is an implementation of an HTTP server capable of passive browser fingerprinting - and it might just be the thing...

BurpParamFlagger

BurpParamFlagger A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI. Note: I believe that Burp Pro is required to use this extension, since it adds onto the scanner functionality, which isn't included in the...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...