psrecon

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

ptunnel-ng

Tunnel TCP connections through ICMP.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

pwn_jenkins

Notes about attacking Jenkins servers

pwnat

The only tool and technique to punch holes through firewalls/NATs where both clients and server can be behind separate NATs without any 3rd party involvement. Pwnat uses a newly developed technique, exploiting a property of NAT translation tables, with no 3rd party, port forwarding, DMZ, router administrative requirements, STUN/TURN/UPnP/ICE, or spoofing required.

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

pwnyform

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

pymultitor

PyMultitor - Python Multi Threaded Tor Proxy

pyrdp

RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

pyrebox

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

pyshodan

Python 3 script for interacting with Shodan API

python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

pywsus

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

qrljacking

QRLJacking or Quick Response Code Login Jacking is a simple-but-nasty attack vector affecting all the applications that relays on “Login with QR code” feature as a secure way to login into accounts which aims for hijacking users session by attackers.

quasar

Remote Administration Tool for Windows

rai

Rapid Attack Infrastructure (RAI)

raindance

Reconnaissance tool for Microsoft Office 365

rattler

Automated DLL Enumerator

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

rbcd_permissions

Add SD for controlled computer object to a target object for RBCD using LDAP

rcevil.net

rdpassspray

Python3 tool to perform password spraying using RDP

rdpspray

Tool for password spraying RDP

rdpthief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

red-baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redelk

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.