Trending repositories for topic offensive-security
Practical resources for offensive CI/CD security research.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]
Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
A high performance offensive security tool for reconnaissance and vulnerability scanning
Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among conn...
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Some Rust program I wrote while learning Malware Development
Practical resources for offensive CI/CD security research.
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Some Rust program I wrote while learning Malware Development
This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]
Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool
/root/.ssh/authorized_keys evil file watchdog with ebpf tracepoint hook.
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
Practical resources for offensive CI/CD security research.
Practical resources for offensive CI/CD security research.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
Unorthodox and stealthy way to inject a DLL into the explorer using icons
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among conn...
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]
Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
Automated NoSQL database enumeration and web application exploitation tool.
Practical resources for offensive CI/CD security research.
Unorthodox and stealthy way to inject a DLL into the explorer using icons
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Some Rust program I wrote while learning Malware Development
A solution to create obfuscated reverse shells for PowerShell.
My OSWE Pre-preperation (i.e. before acutally buying the course) phase plan and notes!
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
Tool set for Information security professionals and all others
This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]
Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool
Practical resources for offensive CI/CD security research.
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Unorthodox and stealthy way to inject a DLL into the explorer using icons
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Some Rust program I wrote while learning Malware Development
Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among conn...
The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cl...
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Practical resources for offensive CI/CD security research.
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Unorthodox and stealthy way to inject a DLL into the explorer using icons
Some Rust program I wrote while learning Malware Development
Practical resources for offensive CI/CD security research.
The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cl...
Weaponizing the Linux Kernel (Hide Files/PID, SSH backdoors, SSL Sniffer, ...) by poking around eBPF/XDP
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
This repository stores various roadmap(Mindmaps) for bug bounty Hunter, pentester, offensive(red team), defensive(blue team) and security Professional people
A solution to create obfuscated reverse shells for PowerShell.
Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking Tool
Adversary Simulators High-Fidelity Intelligence and Reporting Toolkit
My OSWE Pre-preperation (i.e. before acutally buying the course) phase plan and notes!
yara detection rules for hunting with the threathunting-keywords project
My useful files for penetration tests, security assessments, bug bounty and other security related stuff
Tool set for Information security professionals and all others
CTF challenges designed and implemented in machine learning applications
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
"Try Harder" is a cybersecurity retro game designed to simulate 100 real-world scenarios that will help you prepare for the Offensive Security Certified Professional (OSCP) exam, all while offering an...
A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically (e.g. payloads).
This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.
The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cl...
Some Rust program I wrote while learning Malware Development
yara detection rules for hunting with the threathunting-keywords project
Practical resources for offensive CI/CD security research.
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more
A nostalgic journey back to the era of retro RPGs with a cyber twist in the theme of Die Hard
A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among conn...
Applied offensive security with Rust - https://kerkour.com/black-hat-rust
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
Automated NoSQL database enumeration and web application exploitation tool.
Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool
Awesome list of keywords and artifacts for Threat Hunting sessions
Automated DLL Sideloading Tool With EDR Evasion Capabilities
A high performance offensive security tool for reconnaissance and vulnerability scanning
Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.
"Try Harder" is a cybersecurity retro game designed to simulate 100 real-world scenarios that will help you prepare for the Offensive Security Certified Professional (OSCP) exam, all while offering an...
This lightweight C# demo application showcases interactive remote shell access via named pipes and the SMB protocol.
Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking Tool
A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically (e.g. payloads).
This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
Awesome list of keywords and artifacts for Threat Hunting sessions
w4af: web advanced application attack and audit framework, the open source web vulnerability scanner.
Unorthodox and stealthy way to inject a DLL into the explorer using icons
is a tool to find as much information as possible on Instagram accounts, such as username, full username, post target, account type, number of followers, number of followings and so on.
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
CTF challenges designed and implemented in machine learning applications
A nostalgic journey back to the era of retro RPGs with a cyber twist in the theme of Die Hard