k0rsec Goto Github PK

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

awesome-red-teaming

List of Awesome Red Teaming Resources

backdoorfactory

A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.

build-your-own-x

🤓 Build your own (insert technology here)

caldera

The CALDERA automated adversary emulation system

cobaltstrike-toolkit

Some useful scripts for CobaltStrike

crypton

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Hashing Algorithms along with example challenges from CTFs

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

cyris

CyRIS: Cyber Range Instantiation System

domainfrontinglists

A list of Domain Frontable Domains by CDN

ember

infosec_reference

An Information Security Reference That Doesn't Suck

injectors

💉 DLL/Shellcode injection techniques

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

k0rsec.github.io

linikatz

linikatz is a tool to attack AD on UNIX

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

malleable-c2-randomizer

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

micromdm

Mobile Device Management server

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

phishmailer

Generate Professional Phishing Emails Fast And Easy

pretext-project.github.io

Open-Source Collection of Social Engineering Pretexts

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

psattack

A portable console aimed at making pentesting with PowerShell a little easier.

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

redteam-plan

Issues to consider when planning a red team exercise.

rta

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

serverless_toolkit

A collection of useful Serverless functions I use when pentesting