govolution Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

aptnotes

Various public documents, whitepapers and articles about APT campaigns

avepentestmag

avepoc

some pocs for antivirus evasion

avet

AntiVirus Evasion Tool

avetosx

awesome-sec-talks

A collected list of awesome security talks

awesome-web-security

🐶 A curated list of Web Security materials and resources.

basic-file-crypter

Process Hollowing techniques as used in many file Crypters (C/C++)

betterdefaultpasslist

bfg

binpoc

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

hands-on-bug-hunting-for-penetration-testers

Hands-On Bug Bounty for Penetration Testers, published by Packt

honeypotwordlist

inception

Provides In-memory compilation and reflective loading of C# apps for AV evasion.

malice

VirusTotal Wanna Be - Now with 100% more Hipster

moreshellcode

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

pocorgtfo

a mirror of the "International Journal of PoC||GTFO"

pptx2txt.sh

command line bash shell script to convert PowerPoint pptx format to text on Mac, Linux or Unix

randomrepo

Repo for random stuff

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

scadapass

SCADA StrangeLove Default/Hardcoded Passwords List

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcodeexec

Script to execute in memory a sequence of opcodes

slea