axiom

WARNING : Axiom Classic is now in maintenance mode. We encourage you to transition to the new Ax Framework. In the coming months, we will introduce essential quality-of-life updates to Axiom Classic before 2025. Long live Axiom! We are lucky enough to be sponsored by the awesome SecurityTrails!...

eaphammer

بواسطة Gabriel Ryan s0lst1c3 الإصدار الحالي: v1.14.1 يدعم Python 3.9+. نظرة عامة EAPHammer هي مجموعة أدوات لتنفيذ هجمات التوأم الشرير المستهدفة ضد شبكات WPA2-Enterprise. تم تصميمها للاستخدام في تقييمات الشبكات اللاسلكية الشاملة ومشاركات الفرق الحمراء. ونتيجة لذلك، يتم التركيز على توفير واجهة سهلة...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

blindsight

blindsight "Não existe isso de sobrevivência do mais forte. Sobrevivência do mais adequado, talvez. Não importa se uma solução é ótima. Tudo o que importa é se ela é melhor que a alternativa." -- Peter Watts, Blindsight 2006 Ferramenta de red team para despejar a memória do LSASS, ignorando...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

skewrun

Skewrun skewrun é um kit de ferramentas de descoberta de tempo do Active Directory para red teams. Ele resolve dinamicamente o horário do Controlador de Domínio via protocolos de rede CLDAP, SMB, NTP, Kerberos, NTLM e executa comandos via libfaketime LDPRELOAD, enganando o binário executado para...

chisel-ng

| | | | /| ' | / |/ \ | | ' \ / | | | | | | \ / || | | | | | || | ||/ || | | || , | |/ root@kitploit: chisel-ng Eine Rust-Implementierung von chisel für Penetrationstests und Red-Team-Operationen. Stellt reverse Tunnels über SSH-over-WebSocket-over-TLS her, sodass Operatoren durch kompromittierte...

Preferred-Network-List-Sniffer

Sniffer della Lista di Reti Preferite - PNLS Sniffer della Lista di Reti Preferite PNLS è uno strumento di auditing Wi-Fi per Red Team con una semplice interfaccia web, in grado di intercettare gli SSID1 dalla lista delle reti preferite PNL2 del dispositivo. Ciò è realizzato sniffando le Probe...

baboossh

.. image:: https://raw.githubusercontent.com/cybiere/baboossh/master/logo.png Spreading SSH reso facile per i red team di fretta. BabooSSH ti permette, da una semplice connessione SSH a un host compromesso, di raccogliere rapidamente informazioni su altri endpoint SSH per pivotare e comprometterl...

trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

OpenMalleableC2

OpenMalleableC2 Implementazione Open Source di Malleable C2 di Cobalt Strike OpenMalleableC2 è una libreria agnostica rispetto ai framework che implementa il formato dei profili Malleable C2 di Cobalt Strike per le trasformazioni HTTP. Consente a ricercatori di sicurezza e red team di implementar...

git-fsmonitor

Dies ist ein dokumentiertes bekanntes Problem, aber ich habe es während meiner Recherche entdeckt und es ist ziemlich nützlich für RT/PT. Zusammenfassung: Der FSMonitor-Helper wird von git bei jedem Befehl wie git status, git diff usw. ausgeführt, daher wird git blind jeden Pfad starten, den wir...

CloudSec

Cloud-Sicherheits-Toolkit Die Kunst der Cloud-Exploitation Willkommen beim Cloud-Sicherheits-Toolkit – einer spezialisierten Ressource für offensive Sicherheitsforscher, Red Teams und Gegner. Dieses Repository widmet sich der systematischen Waffenfähigmachung von Schwachstellen, fortgeschrittenen...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, praktisch Ein Capture-the-Flag , aufbauend auf dem OWASP Kubernetes Top 10 — 2025. Du wurdest angeheuert, um NimbusMart zu red-teamen, ein fiktives E-Commerce-Unternehmen, dessen Cluster schneller wuchs als seine Sicherheit. Zehn Herausforderungen, eine pro...

Pentest-Collaboration-Framework

Pentest Collaboration Framework Pentest Collaboration Framework - an opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing! Explore the docs » ‼️ Important Links...

pinecone

Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. This tool is designed for...

pinecone

Pinecone è uno strumento di audit per reti WLAN, adatto per l'uso in red team. È estensibile tramite moduli ed è progettato per essere eseguito su sistemi operativi basati su Debian. Pinecone è particolarmente indicato per l'uso con un Raspberry Pi, come box portatile per audit wireless. Questo...

Blind-Trust-CVE-2024-21413-Research

BLIND TRUST - Framework per Campagne di Phishing con Moniker Link Uno strumento di ricerca per la sicurezza progettato per simulare campagne di phishing mirate utilizzando la vulnerabilità CVE-2024-21413 Moniker Link. Pensato per operazioni di red team autorizzate, penetration testing e formazion...

magnet

Magnet Traccia i segnali, rileva le minacce. Sommario Magnet è un toolkit di telemetria e simulazione per Purple-team. Scopo: generatore modulare, cross-platform alla fine di telemetria e attività malevola. Perché questo nome? Perché attrae analisti SOC e regole di rilevamento! 😜 Come caso d'uso...