tr3x85 Goto Github PK

ariacloud

A Docker container for remote penetration testing.

atomic-red-team

Small and highly portable detection tests.

attack-navigator

Web app that provides basic navigation and annotation of ATT&CK matrices

attack-website

MITRE ATT&CK Website

awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

awesome-honeypots

an awesome list of honeypot resources

awesome-mainframe-hacking

badblood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

blueborne-scanner

Bluetooth scanner for local devices that may be vulnerable to Blueborne exploit

cheatsheets

Cheat sheets for various projects.

credsleaker

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it via an HTTP request.

cve-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2020-1206-poc

CVE-2020-1206 Uninitialized Kernel Memory Read POC

dnstwist

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

exploits

fakelogonscreen

Fake Windows logon screen to steal passwords

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

forensicstools

ghostwriter

The SpecterOps project management and reporting engine

gxpn

The lab materials needed to run my GXPN Gold Paper

invoke-dosfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

lockphish

Lockphish is a tool for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

luckystrike

A PowerShell based utility for the creation of malicious Office macro documents.

macos-kernel-exploit

macOS Kernel Exploit for CVE-????-???? (currently a 0day. I'll add the CVE# once it is published). Credit for the bug goes to @LinusHenze :).

magiskhidepropsconf

MagiskHidePropsConf

mainframe_hacking

Consolidated resources for mainframe hacking

malwaretrainingsets

Free Malware Training Datasets for Machine Learning

mitm6

pwning IPv4 via IPv6

modlishka

Modlishka. Reverse Proxy. Phishing NG.