sec-tools-repo Goto Github PK

drozer

The Leading Security Assessment Framework for Android.

dumpert

LSASS memory dumper using direct system calls and API unhooking.

edrs

egressbuster

Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evilrdp

fakelogonscreen

Fake Windows logon screen to steal passwords

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

free-certifications

A curated list of free courses & certifications.

gamingserviceeop

ghostpackwindows

Compiled binaries for [GhostPack](https://github.com/GhostPack) authored by [@harmj0y](https://twitter.com/harmj0y)

go-donut

Donut Injector ported to pure Go. For use with https://github.com/TheWover/donut

gopher

C# tool to discover low hanging fruits

graphrunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

graphspy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hardhatc2

A C# Command & Control framework

impacket

Impacket is a collection of Python classes for working with network protocols.

inline-execute-pe

Execute unmanaged Windows executables in CobaltStrike Beacons

invoke-adenum

Automate Active Directory Enumeration using PowerView

invoke-edrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services, the registry and running drivers for the presence of known defensive products such as AV's, EDR's and logging tools.

invoke-evasion

PowerShell Obfuscation and Data Science

kaliconfig

Kali configuration optimized for red teaming/pentesting/CTFs

koh

The Token Stealer

legion

Automatic Enumeration Tool based in Open Source tools

lofl

Living Off the Foreign Land setup scripts

malwareworld

System based on +500 blacklists and 5 external intelligences to detect internet potencially malicious hosts

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

microburst

A collection of scripts for assessing Microsoft Azure security

mimikatz

A little tool to play with Windows security