Giuseppe Trotta

newtowner. Abuse trust-boundaries to bypass firewalls and network controls

CrossCheck. A tool to test cross-device authentication protocol security

sunlight. A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

justatemp. 📮 The free temporary email service powered by Cloudflare

legba. The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

SMShell. PoC for a SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers

RunasCs. RunasCs - Csharp and open version of windows builtin runas.exe

neferpitool. A tool that combines DNS and WHOIS to automatically monitor domain name changes.

Dirty-Vanity. A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

CS-Remote-OPs-BOF. Remote operations commands implemented using Beacon Object Files

WSuspicious. WSuspicious - A tool to abuse insecure WSUS connections for privilege escalations

DetectionLab. Automate the creation of a lab environment complete with security tooling and logging best practices

daedalOS. Desktop environment in the browser

npk. A mostly-serverless distributed hash cracking platform

captcha-killer-modified. captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

proxmark3. Iceman Fork - Proxmark3

EVTX-ETW-Resources. Event Tracing For Windows (ETW) Resources

security_guides. Collected and authored guides for personal and operational security.

Max. Maximizing BloodHound. Max is a good boy.

bluehatil22. Slides from out talk at BH IL 2022

gsocket. Connect like there is no firewall. Securely.

fakelogonscreen. Fake Windows logon screen to steal passwords

stratus-red-team. :cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

AmsiHooker. Hookers are cooler than patches.

ldd2bh. Convert ldapdomaindump to Bloodhound

yubikey-agent. yubikey-agent is a seamless ssh-agent for YubiKeys.

SimuLand. Understand adversary tradecraft and improve detection strategies

SSHPry2.0. SSHPry v2 - Spy & Control os SSH Connected client's TTY

RemotePotato0. Windows Privilege Escalation from User to Domain Admin.

CobaltStrikeScan. Scan files or process memory for CobaltStrike beacons and parse their configuration

SharPyShell. SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications

puppeteer-cluster. Puppeteer Pool, run a cluster of instances in parallel

juicy_2. juicypotato for win10 > 1803 & win server 2019

muraena. Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

Dendrobate. Managed code hooking template.

juicy-potato. A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

uroboros. A GNU/Linux monitoring and profiling tool focused on single processes.

geacon. Practice Go programming and implement CobaltStrike's Beacon in Go

necrobrowser. necromantic session control

macOS-Simple-KVM. Tools to set up a quick macOS VM in QEMU, accelerated by KVM.

untrusted-types. Svelte

StreamDivert. Redirecting (specific) TCP, UDP and ICMP traffic to another destination.

nccfsas. Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

AMSI.fail. C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

Awesome-CobaltStrike. List of Awesome CobaltStrike Resources

Piano-LED-Visualizer. Piano LED Visualizer: Connect an LED strip to your Raspberry Pi and create an immersive visual experience for your piano playing

KDU. Kernel Driver Utility

chromium-all-old-stable-versions. Collections of Chromium all old/history stable versions, releases. Support me via Bitcoin: bc1qqgkmph9cvygzxfpupv4jr4n0nfx3qumwg39j5w

browser-detection. JavaScript library for detecting browsers and platforms using features.

exploits. A handy collection of my public exploits, all in one place.

bitleaker. This tool can decrypt a BitLocker-locked partition with the TPM vulnerability

pwnagotchi. (⌐■_■) - Deep Reinforcement Learning instrumenting bettercap for WiFi pwning.

zerodrop. A stealth URL toolkit optimized for bypassing censorship filters and/or dropping malware

gitrob. Reconnaissance tool for GitHub organizations

zOS. z/OS - all things security

vulhub. Pre-Built Vulnerable Environments Based on Docker-Compose

The-Hackers-Hardware-Toolkit. The best hacker's gadgets for Red Team pentesters and security researchers.

website. bettercap official documentation and website contents

mkcert. A simple zero-config tool to make locally trusted development certificates with any names you'd like.

termshark. A terminal UI for tshark, inspired by Wireshark

chromedp. A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.

headless-cat-n-mouse. Is headless chrome currently detectable? Let's pit the detections and detection evasions against eachother.

chefbot. ChefBot is a social bot for Slack that helps you to rate dishes from http://lunch.team .

dockerfiles. Various Dockerfiles I use on the desktop and on servers.

islazy. A Go library containing a set of opinionated packages, objects, helpers and functions implemented with the KISS principle in mind.

fetch-some-proxies. Simple Python script for fetching "some" (usable) proxies

shellz. shellz is a small utility to manage your ssh, telnet, kubernetes, winrm, web or any custom shell in a single place.

puppeteer. JavaScript API for Chrome and Firefox

GoRAT. GoRAT is a (WiP/PoC) RAT in go that uses Google Drive/Sheet APIs

whatstrapp. The fastest tool for analyzing and dumping WhatsApp accounts (in ~15s).

gitignore. A collection of useful .gitignore templates

ExchangeRelayX. An NTLM relay tool to the EWS endpoint for on-premise exchange servers. Provides an OWA for hackers.

mitmproxy. An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

CatMyPhish. Search for categorized domain

typofinder. A finder of domain typos showing country of IP address

caplets. caplets and proxy modules.

pi-hole. A black hole for Internet advertisements

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

token-priv. Token Privilege Research

Red-Baron. Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

DomainFrontingLists. A list of Domain Frontable Domains by CDN

bettercap. The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

arc. A manager for your secrets.

awesome-go. A curated list of awesome Go frameworks, libraries and software

Misc-PowerShell. Misc. PowerShell scripts

JStillery. Advanced JavaScript Deobfuscation via Partial Evaluation

PowerMemory. Exploit the credentials present in files and memory

gandi-api. Go library for the gandi.net API

fresh. Build and (re)start go web apps after saving/creating/deleting source files.

PowerDNS. PowerDNS: Powershell DNS Delivery

demiguise. HTA encryption tool for RedTeams

ds_store_exp. A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

wtfjs. 🤪 A list of funny and tricky JavaScript examples

HTTPLeaks. HTTPLeaks - All possible ways, a website can leak HTTP requests

WMImplant. This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

poodle-PoC. :poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

awesome-industrial-control-system-security. A curated list of resources related to Industrial Control System (ICS) security.

CrackMapExec. A swiss army knife for pentesting networks

rtfm. A database of common, interesting or useful commands, in one handy referable form

xray. XRay is a tool for recon, mapping and OSINT gathering from public networks.

NetRipper. NetRipper - Smart traffic sniffing for penetration testers

mastg. The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.

Responder. Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

filterbypass. Browser's XSS Filter Bypass Cheat Sheet

tamperchrome. Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).

research.

tplmap. Server-Side Template Injection and Code Injection Detection and Exploitation Tool

keymaker-alpha. C++

js-vuln-db. A collection of JavaScript engine CVEs with PoCs

openvpn-install. OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora

ohmyzsh. 🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python, etc), 140+ themes to spice up your morning, and an auto-update tool that makes it easy to keep up with the latest updates from the community.

webshell. This is a webshell open source project

Pentest-Bookmarks. Database of websites for penetration testing

ssh-audit. SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

android-security-awesome. A collection of android security related resources

bettercap. DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

MobileApp-Pentest-Cheatsheet. The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

YubiKey-Guide. Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.

macOS-Security-and-Privacy-Guide. Community guide to securing and improving privacy on macOS.

write-ups-2016. Wiki-like CTF write-ups repository, maintained by the community. 2016

linpostexp. Linux post exploitation enumeration and exploit checking tools

public-pentesting-reports. A list of public penetration test reports published by several consulting firms and academic security groups.

maltrail. Malicious traffic detection system

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

xvwa. XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

burp-hash. Java

write-ups-2015. Wiki-like CTF write-ups repository, maintained by the community. 2015

XSSChallengeWiki. Welcome to the XSS Challenge Wiki!

beef. The Browser Exploitation Framework Project

rips. RIPS - A static source code analyser for vulnerabilities in PHP scripts

You-Dont-Know-JS. A book series (2 published editions) on the JS language.

awesome. 😎 Awesome lists about all kinds of interesting topics

CryptoTerminology.

data_hacking. Data Hacking Project

H5SC. HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

wafw00f. WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

php-ref. A better alternative to print_r / var_dump

DOMPurify. DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

WhatWeb. Next generation web scanner

sqlmap. Automatic SQL injection and database takeover tool

wpspider. Wordpress.org svn repositories spider

sqli-labs. SQLI labs to test error based, Blind boolean based, Time based.

SQLol. A configurable SQL injection test-bed