X0CBAN

A GUI for testing and creating Evil toast notifications.

A fast, open-source HTTP proxy and web security testing Framework

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

PowerMeta searches for publicly available files hosted on various websites for a particular domain

PSAmsi is a tool for auditing and defeating AMSI signatures.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

Living of land artifacts - simple Linux enumeration script

Scripts featured in the book How to Hack Like a Legend

Password cracking rules and masks for hashcat that I generated from cracked passwords.

Impacket is a collection of Python classes for working with network protocols.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if the account is locked, or if the account is disabled.

OpenBullet reinvented

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Generate an obfuscated DLL that will disable AMSI & ETW

Active Directory and Internal Pentest Cheatsheets

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🐶 A curated list of Web Security materials and resources.