Offensive Security

A PowerShell toolkit for penetration testing Microsoft Azure environments, providing discovery, configuration auditing, and post-exploitation capabilities.

A tool for analyzing and visualizing control relationships and privilege escalation paths within Active Directory environments using graph-based representations.

Pupy is an open-source, cross-platform C2 framework that provides remote access and control capabilities for compromised systems across Windows, Linux, OSX, and Android platforms.

A collection of tips and tricks for container and container orchestration hacking and security testing.

An Azure Function that validates and relays Cobalt Strike beacon traffic based on Malleable C2 profile authentication.

TikiTorch is a process injection tool that executes code within the address space of other processes using various injection techniques.

PwnAuth is an open-source tool for generating and managing authentication tokens across multiple protocols, designed for penetration testing and red team exercises.

A proof-of-concept tool that generates Excel BIFF8 files with embedded 4.0 macros programmatically without requiring Microsoft Excel installation.

A Mac OS X code injection library that enables copying code into target processes and remotely executing it through new thread creation.

RedELK is a SIEM tool designed for red teams to monitor and receive alerts about blue team detection activities during penetration testing engagements.

A comprehensive repository of open-source security tools organized by attack phases for red team operations, adversary simulation, and threat hunting purposes.

A collection of Python scripts for conducting penetration testing activities against Amazon Web Services (AWS) environments.

A Python utility that identifies and exploits domains vulnerable to AWS name server takeover attacks by detecting misconfigured DNS settings.

An automation framework that runs multiple open-source subdomain bruteforcing tools in parallel using Docker Compose and custom wordlists.

A framework for executing cloud attacker tactics, techniques, and procedures (TTPs) that can generate APIs, Sigma detection rules, and documentation from YAML-based definitions.

Python exploitation tool for gaining root access to Sixnet RTUs in SCADA networks by exploiting application-level vulnerabilities.

A proof-of-concept toolkit for fingerprinting and exploiting Amazon Web Services cloud infrastructures using the boto library.

A template-driven framework for creating custom evasion techniques to test Anti-Virus and EDR detection capabilities.

ezXSS is a testing framework that helps penetration testers and bug bounty hunters identify Cross Site Scripting vulnerabilities, especially blind XSS attacks.

Sysreptor provides a customizable security reporting solution for penetration testers and red teamers.

An educational workshop providing hands-on training materials, lab environments, and tools for learning local privilege escalation techniques on Windows and Linux systems.

Sysreptor offers a customizable reporting solution for penetration testers and red teamers to streamline their security assessments.

GraphSpy is a browser-based post-exploitation tool for Azure Active Directory and Office 365 environments that enables token management, reconnaissance, and interaction with Microsoft 365 services.

A planning framework document that guides red team exercise preparation with focus on blue team development and constructive learning outcomes.