The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

The Rogue Access Point Framework

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

List of Awesome Red Teaming Resources

Red Teaming Tactics and Techniques

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources

Linux/Windows post-exploitation framework made by linux user

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Red Team Cheatsheet in constant expansion.

A PowerShell script anti-virus evasion tool

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

Utilities for MITRE™ ATT&CK

Some notes and examples for cobalt strike's functionality

Leaked pentesting manuals given to Conti ransomware crooks

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.