PT-ToolKit

PT-ToolKit Exploits, Powershell Scripts, Executables that are useful during Penetration-Testing or Red Team engagement Most of the Tools and Script are aimed to Active-Directory environment and windows platfform Table of Contents Exploits PowerShell-Scripts Windows-Binary Exploits: Some exploits...

gdb-static

GDB/GDBServer static Description Public repository of static GDB and GDBServer. Links https://github.com/hugsy/gef https://github.com/hugsy/gef-extras...

LOLBAS

Living Off The Land Binaries and Scripts and now also Libraries All the different files can be found behind a fancy frontend here: https://lolbas-project.github.io thanks @ConsciousHacker for this bit of eyecandy and the team over at https://gtfobins.github.io/. This repo serves as a place where ...

jfrog-CVE-2022-24675

CVE-2022-24675 tools Usage instructions cve202224675.sh rootfolder Will recursively walk the specified folder and report Golang binaries which use pem.Decode function, or are stripped in which case function name will be missed and the check will not be effective...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

evilgrade

Faraday Security Research -- | ISR-evilgrade | www.faradaysec.com | -- .:: BRIEF OVERVIEW ::. Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration...

ida-pro-mcp

IDA Pro MCP !IMPORTANT I recommend using theOfficial Hex-Rays IDA MCP Server instead! See the announcement blog post for more information. Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt...

Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...

Main_MiSTer

MainMiSTer Main Binary and Wiki Repo This repo serves as the home for the MiSTer Main binaries and the Wiki. For the purposes of getting google to crawl the wiki, here's a link to the not for humans crawlable wiki If you're a human looking for the wiki, that's here To compile this application, re...

CVE-2025-7775

CVE-2025-7775 Version detection PowerShell There's also a cool file hash based method: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py You can also potentially use the client binaries to enumerate the version not sure if you need auth... not looked at...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

e9patch

E9Patch - A Powerful Static Binary Rewriter E9Patch is a powerful static binary rewriting tool for x8664 Linux ELF binaries. E9Patch is: Scalable : E9Patch can reliably rewrite large/complex binaries including web browsers 100MB in size. Compatible : The rewritten binary is a drop-in replacement ...

cloudlist

Features • Installation • Usage • Configuration • Running cloudlist • Supported providers • Library • Join Discord Cloudlist is a multi-cloud tool for getting Assets from Cloud Providers. This is intended to be used by the blue team to augment Attack Surface Management efforts by maintaining a...

gping

gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...

CVE-2024-21111

These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

UnconfuserEx

UnConfuserEx A tool for deobfuscating C binaries protected with ConfuserEx2. This was originally a private project that I decided to make public after it had no real use to me anymore. The removal of protections was focused on one specific binary I was reversing and they seemed to be using a...

ghostrings

Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...