arphanetx Goto Github PK

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

msimpersonate

msImpersonate - User account impersonation written in pure Python3

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

offensive_tools

osce-complete-guide

OSWE, OSEP, OSED

oscp-reporting

Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP Exam and Lab Reporting / Note-Taking Tool

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

pegasus_spyware

decompiled pegasus_spyware

pentestgpt

A GPT-empowered penetration testing tool

pezor

Open-Source Shellcode & PE Packer

printnightmare

psransom

PowerShell Ransomware Simulator with C2 Server

pxethief

PXEThief is a set of tooling that can extract passwords from the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager

ransim

Ransomware simulation script written in PowerShell. The same script and key is used for decryption.

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

retoolkit

Reverse Engineer's Toolkit

reverserdp_rce

sadcloud

A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scmkit

Source Code Management Attack Toolkit

sigma

Generic Signature Format for SIEM Systems

sigploit-ss7

skyrat

Remote Access Trojan I wrote, but didn't finish. Although, you could use this as is without many issues.

subseven

SubSeven Legacy Official Source Code Repository

terragoat

TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into production cloud environments.

test

test

tortugatoolkit

Collection of some of my own tools with other great open source tools out there packaged into a powershell module

updated-carbanak-source-with-plugins

https://twitter.com/itsreallynick/status/1120410950430089224

verizon_data_leak

Verizon Media Data Leak - PII & PHI - Verizon Claims No Server Issue

web-login-site

A basic Node.js website with an authenticated section. This is to test web app security scanner logins.