AutoTTP

AutoTTP Automated Tactics Techniques & Procedures. Re-running complex sequences manually for regression tests, product evaluations, generate data for researchers & so on can be tedious. I toyed with the idea of making it easier to script Empire or any frameworks/products/toolkits that provide API...

RogueAssemblyHunter

. . \ / \ | | | .. | // \ / | | / \ / / \ \ / // // \ / | | | // | /\ / / | \ \ \ /| Y Y \ \ \ | | || // /|/ | / || / // | / // / / / / / / / / / | \ / | / \ | / \ / \ Y / | / | \ | \ /| | / | /|/|| /| | / / / Rogue Assembly Hunter Rogue Assembly Hunter is a utility for discovering 'interesting'...

DynamicDotNet

DynamicDotNet Una colección de varios y diversos fragmentos de código que aprovechan las técnicas dinámicas de .NET Propósito Mostrar herramientas ofensivas y defensivas y POCs que aprovechan la carga dinámica de .NET, la preparación staging, el arranque bootstrapping, los tipos, los objetos, las...

PowerShell-Suite

PowerShell-Suite Hay grandes herramientas y recursos en línea para realizar casi cualquier tarea en PowerShell; sin embargo, a veces es necesario crear un script de utilidad para un propósito específico o para salvar una brecha ontológica. Esta es una colección de utilidades de PowerShell que arm...

redcell

AI agents that run a penetration test end to end and write the report. !WARNING REDCELL is provided for education, research, and legal, authorized security testing only. Use it only to test systems you own or have explicit written permission to test, and only within an agreed scope. Unauthorized...

Ofensive-security

This repository contains my Offensive Cyber Security / Penetrati...

CVE-s

It is an offensive tool for web exploitation. This repository ap...

vulhub

This repository is an offensive tool for vulnerability research and exploitation, specifically targeting various web applications and services. It contains a collection of exploits and tools for identifying and exploiting vulnerabilities in software and systems. The primary vulnerability targeted...

Dumping LSASS in memory undetected using MirrorDump

Introduction As I am sure some of you are aware from the occasional ramblings and screenshots on twitter, I am a big fan of .NET based offensive tooling. Not because it’s trendy or cool, but because of the development speed and ease of testing and debugging in comparison to C/C++. A month or so a...

Exploit for Improper Encoding or Escaping of Output in F5 Nginx

This repository is an offensive tool for a vulnerability environment. It is a collection of Docker Compose files for various vulnerabilities, allowing users to easily set up and test vulnerable environments. The repository includes files for vulnerabilities such as CVE-2016-9086, CVE-2017-1000353...