tool used to change your IP every second your want

C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps

Uncover the true IP address of websites safeguarded by Cloudflare

A collection of sources of documentation, as well as field best practices, to build/run a SOC

Fuzz 401/403/404 pages for bypasses

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

Kippo - SSH Honeypot

BlueHound - pinpoint the security issues that actually matter

Threat Pursuit Virtual Machine (VM): A fully customizable, open-sourced Windows-based distribution focused on threat intelligence analysis and hunting designed for intel and malware analysts as wel…

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

🍯 T-Pot - The All In One Honeypot Platform 🐝

Labs for Practical Malware Analysis & Triage

Collection of malware source code for a variety of platforms in an array of different programming languages.

Little script for generating revshells

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

Trying to tame the three-headed dog.

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

A list of public penetration test reports published by several consulting firms and academic security groups.

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Impacket is a collection of Python classes for working with network protocols.

The next gen ls command

tmux source code

🌸 A command-line fuzzy finder