unclenull Goto Github PK

pyshell

Multiplatform Python WebShell

rawcopy

Commandline low level file extractor for NTFS

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

rpcdump

rpcview

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

s3cxsser

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

samesame

Command line tool to generate crafty homograph strings.

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

seltzer

A Burp Suite extension for headless, unattended scanning.

sharpshooter

Payload Generation Framework

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

shellcodeexec

Script to execute in memory a sequence of opcodes

shootback

a reverse TCP tunnel let you access target behind NAT or firewall

sliver

Adversary Emulation Framework

socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

spike

:mega: A fast reverse proxy written in PHP that helps to expose local services to the internet

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

strong-frida

make frida strong, bypass frida detection.

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sysinternals-source

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.

telemetrysourcerer

Enumerate and disable common callbacks of telemetry used by AV/EDR.

the-hacker-tools

This project is aimed at freely providing technical guides on various hacking tools.

tokenplayer

Manipulating and Abusing Windows Access Tokens.

tokenuniverse

An advanced tool for working with access tokens and Windows security policy.