axisit Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

azerothcore-wotlk

Complete Open Source and Modular solution for MMO

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

dettect

Detect Tactics, Techniques & Combat Threats

evilgophish

evilginx3 + gophish

givingstorm

Infection vector that bypasses AV, IDS, and IPS. (For now...)

gophish

Open-Source Phishing Toolkit

helk

The Hunting ELK

openorchid

Collection of GoPhish templates available for legitimate usage.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentmenu

A bash script for recon and DOS attacks

phishingtemplates

This is a collection of phishing templates and a landing page to be used with goPhish

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

scanners-box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretsdump.py

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

silverdump

A wrapping script to query the default password list maintained by cirn.net... << Thank them.

sliver

Adversary Emulation Framework

winrpcfunctions