insideus Goto Github PK

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

esc

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

fakelogonscreen

Fake Windows logon screen to steal passwords

fasttcpscan

Escáner que permite detectar de forma rápida y precisa los puertos TCP que una máquina tiene abiertos.

fullproxy

Bind and reverse connection based, SOCKS5 and HTTP portable proxy

gost

GO Simple Tunnel - a simple tunnel written in golang

helpcolor

Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type

hollow

EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

hunt

iaito

This project has been moved to:

inlinewhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

installerfiletakeover

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

inveigh

Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

invoke-dllclone

Koppeling x Metatwin x LazySign

jadx

Dex to Java decompiler

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jshaw87-cheatsheets

Penetration Testing/Security Cheatsheets

krbrelayx

Kerberos unconstrained delegation abuse toolkit

labs

Vulnerability Labs for security analysis

lazysign

Create fake certs for binaries using windows binaries and the power of bat files

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

liveoverflow_youtube

Material for the YouTube series

lnkup

Generates malicious LNK file payloads for data exfiltration

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

my_dirty_scripts

My Dirty Scriptss ..!!!!! Pentest , OSINT , Python ,, Trainings

nativepayload_cbt

NativePayload_CallBackTechniques C# Codes (Code Execution via Callback Functions Technique, without CreateThread Native API)

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket