julian911015 Goto Github PK

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

http-revshell

Powershell reverse shell using HTTP/S protocol with AMSI bypass and Proxy Aware

l3mon

L3MON - Remote Android Managment Suite

live-forensicator

Powershell Script to aid Incidence Response and Live Forensics

lockphish

Lockphish it's the first tool (07/04/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link.

log4j-scanner-exploit

Script en bash que permite identificar la vulnerabilidad Log4j CVE-2021-44228 de forma remota.

multipotato

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

pen-andro

Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

powerlessshell

Run PowerShell command without invoking powershell.exe

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

prowler

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 200 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

psransom

PowerShell Ransomware Simulator with C2 Server

purplesharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

quadrainspect

QuadraInspect is an Android framework that integrates AndroPass, APKUtil, and MobFS, providing a powerful tool for analyzing the security of Android applications.

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

sharpcookiemonster

Extracts cookies from Chrome.

terminatorz

TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications.

tokenplayer

Manipulating and Abusing Windows Access Tokens.

villain

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team.