sgn

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LFSR. This project is the reimplementation of the original Shikata ga nai in golang with...

tricorne

Tricorne A Fedora Remix for offensive security. "My treasure? If you want it, I'll let you have it. Seek it out! I left everything at that place!" Gol D. Roger The short version Kali owns Debian. BlackArch owns Arch. Parrot owns the "security-focused desktop" niche. No one owns RPM-world offensiv...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

morf

MORF Mobile Reconnaissance Framework A powerful offensive security toolkit for mobile application analysis Find Secrets. Protect Apps. Stay Secure. 📋 Table of Contents 💡 Overview 🚀 Quick Start 🔍 Key Features 🏗️ Architecture 📋 Common Use Cases 📦 Installation Prerequisites Method 1: Docker...

RedTeaming-Tactics-and-Techniques

description: - These are notes about all things focusing on, but not limited to, red teaming and offensive security. What is ired.team notes? This is publicly accessible personal red teaming notes at https://ired.team and https://github.com/mantvydasb/RedTeam-Tactics-and-Techniques about my...

xpfarm

XPFarm An open-source AI-augmented offensive security platform that wraps well-known security tools behind a unified web UI — with distributed scanning, AI-generated reports, a smart scan planner, an interactive attack graph, and a community Plugin SDK. Also check out ObsidianBox Modern on Google...

awesome-shodan-queries

Awesome Shodan Search Queries Over time, I've collected an assortment of interesting, funny, and depressing search queries to plug into Shodan, the literal internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild. Most...

phishery

phishery Phishery is a Simple SSL Enabled HTTP server with the primary purpose of phishing credentials via Basic Authentication. Phishery also provides the ability easily to inject the URL into a .docx Word document. The power of phishery is best demonstrated by setting a Word document's template...

firmware

🦈 Bruce Bruce is a versatile ESP32 firmware packed with offensive-security tools, built to make Red Team operations fast and portable. It also supports M5Stack, LILYGO , RockBase IoT and Elecrow products, and works great with the Cardputer, Sticks, M5Cores, T-Decks and T-Embeds. ⚡ Get Our Officia...

Pentest-Everything

⚔️ 渗透测试一切 重要 请将此页面加入书签，因为其他页面链接可能会随着时间变化或移动。此页面将始终保持不变。 关于本书 本书是我针对各种进攻性安全主题和平台整理的笔记和文章合集。本书通常大多数日子都会更新，并将在可预见的未来持续更新。如果本书在任何时候停止开发，我会在此页面留下警告。 本书主要为在 Gitbook 上阅读而开发。如果你希望 fork 本书，请在 GitHub 上进行。 GitBook URL: https://viperone.gitbook.io/pentest-everything/ GitHub URL:...

nishang

Nishang Nishangは、攻撃的セキュリティ、ペネトレーションテスト、レッドチーム活動においてPowerShellを活用するためのフレームワークであり、スクリプトとペイロードのコレクションです。Nishangはペネトレーションテストの全フェーズで有用です。 作成者: Nikhil Mittal Altered Security - 実践的なレッドチームおよびエンタープライズセキュリティトレーニング！ の創設者 使用方法 現在のPowerShellセッションにすべてのスクリプトをインポートします（PowerShell v3以降）。 root@kitploit: PS...

Binary Exploits

Exploit Database のバイナリエクスプロイト バイナリエクスプロイトは /bin-sploits/ ディレクトリにあります。 これは The Exploit Database の公式リポジトリであり、Offensive Security がスポンサーを務める プロジェクト です。 私たちのリポジトリは以下のとおりです: エクスプロイト & シェルコード: https://gitlab.com/exploit-database/exploitdb バイナリエクスプロイト:...

taser

Taser TASER Testing and Security Resource is an abstraction library used to simplify the process of creating offensive security tooling. The various protocols and classes help streamline development of custom tooling during engagements. The examples directory contains a number of scripts...

V3n0M-Scanner

Venom Offensive Security Framework for Vulnerability Scanning & Pentesting Warning : Version 4.3.3 now requires PROXIES/VPN...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

Sn1per

Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per — The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace — whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...

HackVault

HackVault This is a container repository for my defensive/offensive hacks. Go check the Wiki section for more information! Ideally, it'd be continually updated with new interesting stuff over time!...

phantomrecon

PhantomRecon PhantomRecon 是一个基于 CLI 的模块化、代理驱动的红队自动化工具，旨在演示由 AI（通过 Agent Development Kit - ADK 使用 Google Gemini）驱动的自主进攻性安全工作流。 快速开始（CLI） 运行交互式控制台（metasploit 风格）： root@kitploit: python -m phantomrecon 一次性非交互式运行： root@kitploit: python -m phantomrecon --target example.com --auto \ --nmap-timeout 30...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

Exegol

Exegol is a comprehensive cybersecurity environment designed by offensive security experts, for fellow hackers, with its community. It solves the common pain points of traditional security distributions by providing a modular and reliable toolkit that's made for the field. Want to know more about...