Adversary Emulation Framework

DeimosC2 is a Golang command and control framework for post-exploitation.

Primary Block Lists

Preview GitHub README.md files locally before committing them.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

The source code v3.0 of https://requestbin.net (now is v4.0)

File formats dissections and more...

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/

KeyStore Explorer is a free GUI replacement for the Java command-line utilities keytool and jarsigner.

Simple, fast, safe, compiled language for developing maintainable software. Compiles itself in <1s with zero library dependencies. Supports automatic C => V translation. https://vlang.io

Sysmon configuration file template with default high-quality event tracing

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Custom Metasploit post module to executing a .NET Assembly from Meterpreter session

Nit language

An open-source, free protector for .NET applications

Custom Query list for the Bloodhound GUI based off my cheatsheet

build-once run-anywhere c library

WinRemoteEnum is a module-based collection of operations achievable by a low-privileged domain user.

Check your regex for ReDoS vulnerability.

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

VBA Obfuscation Tools combined with an MS office document generator

PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.

Active Directory Integrated DNS dumping by any authenticated user

Kerberos relaying and unconstrained delegation abuse toolkit

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.