An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Red Teaming Tactics and Techniques

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

OSWE, OSEP, OSED, OSEE

OSCP Cheat Sheet

A high performance offensive security tool for reconnaissance and vulnerability scanning

A curated list of awesome OSCP resources

Automated NoSQL database enumeration and web application exploitation tool.

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Get Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.

Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 28 protocols.

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

:new: The Multi-Tool Web Vulnerability Scanner.

RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust

:no_entry: offsec batteries included

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown

Username tools for penetration testing

A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

C2/post-exploitation framework

A Huge Learning Resources with Labs For Offensive Security Players

Leaked pentesting manuals given to Conti ransomware crooks