ongyuann,github

365-stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

365inspect

A PowerShell script that automates the security assessment of Microsoft Office 365 environments.

abuseazureapipermissions

Abuse Azure API permissions for red teaming

Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

admin2sys

Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

amass

In-depth Attack Surface Mapping and Asset Discovery

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

android-task-hijacking

Simple exploit POC for https://promon.co/security-news/strandhogg/ which can steal username and password from targeted android package process

androset

Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite.

apachelogreader

reads apache logs and returns some cool output (actually just txt and csv)

apklab

Android Reverse-Engineering Workbench for VS Code

aptnotes

Various public documents, whitepapers and articles about APT campaigns

arcane

Arcane - A secure remote desktop application for Windows with the particularity of having a server entirely written in PowerShell and a cross-platform client (Python/QT6).