Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

Implant framework

The all-in-one Red Team extension for Web Pentester 🛠

A collection of more than a 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my real-world engagements.

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

👋 Stealthy data exfiltration via IPv6 covert channel

A collection of useful links for Pentesters

Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.

A small .NET compression utility

Hacking arsenal. This script download the latest tools, wordlists, releases and install common hacking tools

Open-Source Collection of Social Engineering Pretexts

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Data EXfiltration TestER

Interactive Windows Reverse Shell Server/Client

Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets

Small and highly portable detection tests.

Python script for pulling chat history for Slack channels using a stolen API token.

HTTP Server serving obfuscated Powershell Scripts/Payloads

Shell script for finding sensitive information in private bitbucket repositories.

SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique

Kibana app for RedELK

A personal website to help the community

Python Script to help/automate the WiFi hacking exercises.

A cookbook for pentesters and red teams.

Personal redteam pentest repo with passwords/wordlists/users and notes on how to pentest a network, focused on web hacking and an internal network.