TheFatRat

TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...

recon-skills

🛡️ Recon & Pentest Skill Pack 169 offensive security skills for recon and pentest. Field-validated techniques from 600+ company targets across 45+ sectors. Updated with browser fingerprint evasion, anti-bot bypass, hardcoded credential hunting, SCADA/ICS enumeration. 📖 Blog & research: hiago.sh —...

RedRoot

🔴 RedRoot Lite – Mark X Offensive Security Framework Lite Edition | CLI-Based “Less power. Same discipline.” RedRoot Lite is the restricted edition of RedRoot , designed to provide core red teaming functionality while keeping advanced modules locked. It uses the same architecture, same CLI style,...

ESP32-DIV

📖 Explore the ESP32-DIV Wiki Complete project story, in-depth tutorials, and all the features in Wiki! From Wi-Fi deauthentication attacks to Sub-GHz signal replay, the Wiki covers everything you need to get started. Click here to explore now! ⚡ Skip the IDE — flash directly from your browser at...

Damn-Vulnerable-Drone

Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...

CloudSec

Cloud Security Toolkit The Art of Cloud Exploitation Welcome to the Cloud Security Toolkit—a specialized resource designed for offensive security researchers, red teamers, and adversaries. This repository is dedicated to the systematic weaponization of vulnerabilities, advanced attack simulations...

pacu

Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...

kingfisher

Detect and Validate Secrets Anywhere. Map Access. Revoke Fast. Find leaked secrets. Validate what’s live. Map the blast radius. Revoke fast. Kingfisher is a blazingly fast, completely free and open source secret scanner built in Rust. It detects leaked secrets across your entire stack with hundre...

Thunderstorm

Thunderstorm You don't have 4,000 findings. You have six paths to your crown jewels. A CSPM hands you a flat, deduplicated, severity-sorted list of misconfigurations and leaves you to guess which ones matter. Thunderstorm reasons about reachability : it collects your cloud read-only, models it as...

PocketPentester

Pocket Pentester Offensive security toolkit for Android. Pure Rust + Tauri + Vue. 21 modules. Offline-first. No root required. Modules ◉ Recon | Tool| What it does ---|---|--- 01| port-scan| Async TCP port discovery with service hints 02| subdomain| 16 passive sources crt.sh, certspotter, c99, VT...

Claude-Red

claude-red Offensive security skills for Claude — drop-inSKILL.md files that turn Claude into a context-aware red team operator. Overview • Quickstart • Categories • Skill Index • Roadmap • Contributing Overview claude-red is a curated library of offensive security skills for the Claude Skills...

wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

h4cker

This repository is a comprehensive collection of cybersecurity references, scripts, tools, code, labs, and training resources. It is carefully curated and maintained by Omar Santos. Overview The repository serves as supplemental material for books, video courses, and live training created by Omar...

moneta

/ \ / | / \ / \ / \ / / \ \ / Y | \ /| | / | //| | / | / / / / / Moneta v1.0 | Forrest Orr | 2020 REQUIRED -m |region|referenced|ioc -p |PID OPTIONAL -v detail|debug|surface -d --option from-base|statistics --filter unsigned-module|clr-prvx|clr-heap|metadata-modules --address --region-size -m...

CyberStrike

English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt | हिन्दी The first open-source AI agent built for offensive security. Automated...

pwneye

pwneye is a focused and portable offensive security tool for working with IP cameras that expose ONVIF and RTSP services, aiming to give security researchers and hackers an easy way to handle discovery, authentication testing, metadata collection, stream validation, recording, and follow-up actio...

sgn

SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LFSR. This project is the reimplementation of the original Shikata ga nai in golang with...

freddy

Freddy the Serialisation Killer - Deserialization Bug Finder A Burp Suite extension to aid in detecting and exploiting serialisation libraries/APIs. This useful extension was originally developed by Nick Bloor @nickstadb for NCC Group and is mainly based on the work of Alvaro Muñoz and Oleksandr...

Nemesis

Overview Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis with humans and AI of files collected during offensive security assessments. Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to...

OSCP-Exam-Report-Template-Markdown

Offensive Security Exam Report Template in Markdown I created an Offensive Security Exam Report Template in Markdown so LaTeX, Microsoft Office Word, LibreOffice Writer are no longer needed during your Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA, OSDA, OSMR, OSTH, OSIR exam! Now y...