Ethical hacking tools and resources for penetration testing and red team operations.
Explore 274 curated tools and resources
Using Apache mod_rewrite as a redirector to filter C2 traffic for Cobalt Strike servers.
Charlotte is an undetected C++ shellcode launcher for executing shellcode with stealth.
Rip web accessible (distributed) version control systems: SVN, GIT, Mercurial/hg, bzr, ...
A fuzzing framework for Android that creates corrupt media files to identify potential vulnerabilities
A set of YARA rules for identifying files containing sensitive information
A YARA interactive debugger for the YARA language written in Rust, providing features like function calls, constant evaluation, and string matching.
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
Comprehensive host-survey tool for security checks in C#.
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
A C#-based Command and Control Framework for remote access and control of compromised systems.
A Python script for creating a cohesive and up-to-date penetration testing framework.
High-performant, coroutines-driven, and fully customisable Low & Slow load generator for real-world pentesting with undetectability through Tor.
A week-long series of articles and talks on evading Microsoft Advanced Threat Analytics (ATA) detection
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.