deepwather Goto Github PK

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

p0wny-shell

Single-file PHP shell

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

pentest-pivoting

A compact guide to network pivoting for penetration testings / CTF challenges.

pentest-tools

pentesting-android-and-ios-applications

Some Useful Tricks for Pentesting Android and IOS Applications

plexdash

A system performance dashboard for plex-servers -- linux only!

plexrequests.net

Want a Movie or TV Show on Plex? Use Plex Requests!

plexshare

Web Application standalone that provide management of local users, many PlexServer and it's libraries.

plexwatchweb-2.0

This is my development of the original plexWatchWeb from "https://github.com/ecleese/plexWatchWeb".

powershell-backdoor-generator

Reverse backdoor written in PowerShell and obfuscated with Python. It generates payloads for popular hacking devices like Flipper Zero and Hak5 USB Rubber Ducky, and changes its signature after every build to help avoid AV.

powershell-reverse-shell-generator

Obfuscated, FUD Simple PowerShell Reverse Shell One-Liner

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

real-time-voice-cloning

Clone a voice in 5 seconds to generate arbitrary speech in real-time

reaper

「💀」Proof of concept on BYOVD attack

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

simpleedr

Simple EDR that injects a DLL into a process to place a hook on specific Windows API

snapdrop

A Progressive Web App for local file sharing

socialpwned

SocialPwned is an OSINT tool that allows to get the emails, from a target, published in social networks such as Instagram, Linkedin and Twitter to find possible credentials leaks in PwnDB or Dehashed and obtain Google account information via GHunt.

supernova

Real fucking shellcode encryption tool

systemd-backdoor

A simple script to automate systemd backdoor

terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

threat-modeling-tricks

Tips for performing Threat Modeling and implementing it in your Pentest | Pentest report template with threat modeling approach.

tpotce

🍯 T-Pot - The All In One Honeypot Platform 🐝

uacme

Defeating Windows User Account Control

vmango

Your own personal IaaS cloud

webshell

Webshell && Backdoor Collection

windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

windowsprivilegeescalation

Collection of Windows Privilege Escalation (Analyse/PoC/Exp...)