shifty0g

CertCheck. SSL/TLS Certificate Checker - A Python script to validate SSL/TLS certificates for common misconfigurations and output the results in JSON format.

search-plugins. Search plugins for qBittorrent search feature

trading-skills. 17 triggers × 44 algorithms × 3 AI experts — live crypto trading signals for Claude Code, Codex, Cursor & 30+ agents. Free during beta.

NetExec. The Network Execution Tool

gopacket. A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single dependency-free binary.

Firefox-Security-Toolkit. A tool that transforms Firefox browsers into a penetration testing suite

vmware-cis-vsphere8-audit. VMware vSphere 8 CIS benchmark auditing and compliance validation tools

WindowsSecurityAudit. A comprehensive Windows security auditing and threat detection toolkit. Features 58 production-ready PowerShell functions organized into 14 modules for enterprise-grade security assessment, compliance validation, and incident response.

audit_scripts. Scripts to gather system configuration information for offline/remote auditing

Wordlist-Hub. Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utilized by bug hunters, penetration testers, and security enthusiasts during their reconnaissance and vulnerability assessment processes.

AD_Miner. AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover security weaknesses

tmuxai. AI-Powered, Non-Intrusive Terminal Assistant

Ai-Terminal-X. 🔥AI-Terminal-X is an AI-powered Linux terminal assistant🔥 that converts natural language commands into executable terminal commands using Google’s Gemini AI. It enhances productivity with safe execution checks, command suggestions, and real-time feedback.

sysinfo-win. better windows sysinfo for the hacker ;)

hacktricks-cloud. CSS

unstract. LLM-Driven Extraction of Unstructured Data — Built for API Deployments & ETL Pipeline Workflows

Gf-Patterns. GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

textgen-extensions.

knowsmore. KnowsMore is a swiss army knife tool for pentesting Microsoft Active Directory (NTLM Hashes, BloodHound, NTDS and DCSync).

autobloody. Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

bloodyAD. BloodyAD is an Active Directory Privilege Escalation Framework

JustEvadeBro. JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.

Adalanche. Attack Graph Visualizer and Explorer (Active Directory) ...Who's *really* Domain Admin?

pingcastle. PingCastle - Get Active Directory Security at 80% in 20% of the time

BlueTuxedo. A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS

HardeningKitty. HardeningKitty - Checks and hardens your Windows configuration

Locksmith. A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

pywhisker. Python version of the C# tool for "Shadow Credentials" attacks

juice-shop. OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Awesome-GPT-Agents. A curated list of GPT agents for cybersecurity

SharpDPAPI. SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Rubeus-GUI. GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

SharpSCCM. A C# utility for interacting with SCCM

PS2. A port scanner written purely in PowerShell.

wappybird. Wappalyzer CLI tool to find Web Technologies

Whisker. Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

PortBender. TCP Port Redirection Utility

CredGuess. Generate password spraying lists based on the pwdLastSet-attribute of users.

LinikatzV2. linikatz is a tool to attack AD on UNIX

RedTeaming_CheatSheet. Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

PsMapExec. Dominate Active Directory with PowerShell.

winssh. Rust

PowerShellArmoury. A PowerShell armoury for security guys and girls

ThreatCheck. Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

SUDO_KILLER. A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.

spiderfoot. SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

RedTeam-Tools. Tools and Techniques for Red Team / Penetration Testing

bbot. The recursive internet scanner for hackers. 🧡

Spoofy. Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

NetExec. The Network Execution Tool

3rdpartypooper. Python

DCToolbox. Tools for Microsoft cloud fans

Practice-AD-CS-Domain-Escalation. Introductory guide on the configuration and subsequent exploitation of Active Directory Certificate Services with Certipy. Based on the white paper Certified Pre-Owned.

awesome-privilege-escalation. A curated list of awesome privilege escalation

BChecks. BChecks collection for Burp Suite Professional and Burp Suite DAST

VhostFinder. Identify virtual hosts by similarity comparison

virtual-host-discovery. A script to enumerate virtual hosts on a server.

rlwrap. A readline wrapper

C-Reverse-Shell. a simple c++ reverse shell for windows

ldapnomnom. Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Villain. Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

WINAudit. Windows security configuration audit.

cypherhound. Your template-based BloodHound terminal companion tool

Farmer. C#

RedTeamOps-Havoc-101. Materials for the workshop "Red Team Ops: Havoc 101"

nextgenmap. Nmap GUI with SearchSploit and vulnerability script integrations, schedules, and reports

nlist. An nmap script to produce target lists for use with various tools.

CVEScannerV2. Nmap script that scans for probable vulnerabilities based on services discovered in open ports.

nmap-log4shell. Nmap Log4Shell NSE script for discovery Apache Log4j RCE (CVE-2021-44228)

Penetration-List. Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

unix_collector. unix_collector is a Live Response collection script for Incident Response on UNIX-like systems using native binaries. Supports AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris systems artifacts.

SlinkyCat. Slinky Cat attempts to give users an easy-to-navigate menu offering predefined Active Directory Service Interfaces (ADSI) and .NET queries which can be used to enumerate a Windows domain.

Hardening-Audit-Tool-AuditTAP. FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.

windows_hardening. HardeningKitty and Windows Hardening Settings

ContainerKitty. Invoke-ContainerKitty - Automates container scans with Docker Engine

2ms. Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

powerview.py. Powerview on steroids

Pentest-Tools-Collection. PowerShell

resocks. mTLS-Encrypted Back-Connect SOCKS5 Proxy

pentestmindmap. a mindmap on pentest #pentestmindmap #oscp #lpt #ecsa #ceh #bugbounty

Mindmap. This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

Powermad. PowerShell MachineAccountQuota and DNS exploit tools

ASREPRoast. Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.

FullPowers. Recover the default privilege set of a LOCAL/NETWORK SERVICE account

PrintSpoofer. Abusing impersonation privileges through the "Printer Bug"

Lovely-Potato. Automating juicy potato local privilege escalation exploit for penetration testers

BloodHoundQueries. Python

targetedKerberoast. Kerberoast with ACL abuse capabilities

ldeep. In-depth ldap enumeration utility

BloodHound-Owned. A collection of files for adding and leveraging custom properties in BloodHound.

krbrelayx. Kerberos relaying and unconstrained delegation abuse toolkit

3snake. Tool for extracting information from newly spawned processes

ADACLScanner. Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

ADCSPwn. A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

GeoWordlists. GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes. A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

ldapdomaindump. Active Directory information dumper via LDAP

ysoserial.net. Deserialization payload generator for a variety of .NET formatters

Exegol-resources. Hacking resources for the Exegol project

PENTESTING-BIBLE. articles

mitm6. pwning IPv4 via IPv6

CypherDog. PoSh BloodHound Dog Whisperer

Bloodhound-Custom-Queries. Custom Query list for the Bloodhound GUI based off my cheatsheet

DonPAPI. Dumping DPAPI credz remotely

osep-tools. PowerShell

BloodHound.py. A Python based ingestor for BloodHound

adidnsdump. Active Directory Integrated DNS dumping by any authenticated user

corkscrew. Corkscrew is a tool for tunneling SSH through HTTP proxies.

Lfi-Space. Lfi Scan Tool

webmatcher. A tool to find valid subdomains for a given domain which resolve to the provided, in-scope IP addresses. Useful on externals when you are only given public IP ranges, find loads of web services, but cannot access them as you have no knowledge of the subdomains needed for the URL.

awesome-gpt-security. A curated list of awesome security tools, experimental case or other interesting things with LLM or GPT.

CrucibleC2. A C# Command & Control framework

Privilege-Escalation. This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Nope-Proxy. TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

Thick-Client-Pentest-Checklist. A OWASP Based Checklist With 80+ Test Cases

git-scanner. A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public

SQLiWeb. Lab Website For Practicing Different Types of SQL Injection Vulnerabilities

GitTools. A repository with 3 tools for pwn'ing websites with .git repositories available

fingerprintx. Standalone utility for service discovery on open ports!

ad-ldap-enum. An LDAP based Active Directory user and group enumeration tool

NfSpy. ID-spoofing NFS client

static-binaries-i386. static binaries linux i386

waf-bypass. Check your WAF before an attacker does

gtfo. Search gtfobins and lolbas files from your terminal

NFStash. NFS client CLI toolkit

pwdsearch. Tool searching for different default passwords.

mssql-cli. A command-line client for SQL Server with auto-completion and syntax highlighting

SniffAir. A framework for wireless pentesting.

Database-Security-Audit. Training course materials, scripts and notes related to database security audit and penetration testing

nmap-query-xml. A simple program to query nmap xml files in the terminal.

mapcidr. Utility program to perform multiple operations for a given subnet/CIDR ranges.

Cheat-Sheet---Active-Directory. This cheat sheet outlines common enumeration and attack methods for Windows Active Directory using PowerShell.

nmap-formatter. A tool that allows you to convert NMAP results to html, csv, json, markdown, graphviz (dot), sqlite, excel and d2-lang. Simply put it's nmap converter.

pdtm. ProjectDiscovery's Open Source Tool Manager

awesome-bugbounty-tools. A curated list of various bug bounty tools

ffufsee. Ffuf output browser

offsec-tools. Compiled tools for internal assessments

certsync. Dump NTDS with golden certificates and UnPAC the hash

api_wordlist. A wordlist of API names for web application assessments

C99Shell-PHP7. PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

kiterunner. Contextual Content Discovery Tool

GHunt. 🕵️‍♂️ Offensive Google framework.

pwndbg. Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Awesome-AI.

adduser-dll. Simple DLL that add a user to the local Administrators group

SmartContracts-audit-checklist. A checklist of things to look for when auditing Solidity smart contracts.

OneRuleToRuleThemStill. A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule

Exegol. Fully featured and community-driven hacking environment

DFSCoerce. Python

wordlists. Real-world infosec wordlists, updated regularly

Loop. UNIX's missing `loop` command

haiti. :key: Hash type identifier (CLI & lib)

SilentHound. Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

WindowsElevation. Windows Elevation(持续更新)

gateway-finder-imp. Tool to identify routers on the local LAN and paths to the Internet

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

orpheus. Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

Certipy. Tool for Active Directory Certificate Services enumeration and abuse

eml_analyzer. A cli script to analyze an E-Mail in the EML format for viewing the header, extracting attachments, etc.

shells. Script for generating revshells

WeaponizeKali.sh. Collection of extra pentest tools for Kali Linux

wwwtree. A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation.

mips-binaries. Various binaries for the mips architecture.

static-tools. Static compiled binaries + scripts ready to use on systems

TheFatRat. Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

otseca. Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.

awesome-security-hardening. A collection of awesome security hardening guides, tools and other resources

puredns. Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

parsenmap. Simple Nmap XML parsing script. Doesn't do anything fancy

enumy. Linux post exploitation privilege escalation enumeration

revshellgen. Reverse shell generator written in Python 3.

OffensiveReverseShellCheatSheet. Collection of reverse shells for red team operations.

NFSClient. NFSClient is an application for Microsoft Windows. It's an client for NFS server supporting protocols NFS 2, NFS 3 and NFS 4.1

ocd-mindmaps. Orange Cyberdefense mindmaps

ApacheTomcatScanner. A python script to scan for Apache Tomcat server vulnerabilities.

Apache-Tomcat-Pentesting. Apache Tomcat exploit and Pentesting guide for penetration tester

tomcatWarDeployer. Apache Tomcat auto WAR deployment & pwning penetration testing tool.

osint_stuff_tool_collection. A collection of several hundred online tools for OSINT

Flipper_Zero_Badusb_hack5_payloads. hack5 badusb payloads moded for be played with flipper zero

nmap-static-binaries. Static binaries, removing any required dependencies from the operating system. Gziped files availabe to download via curl onto your targeted system.

static-binaries. Various *nix tools built as statically-linked binaries

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

dorks_hunter. Simple Google Dorks search tool

DumpsterDiver. Tool to search secrets in various filetypes.

azucar. Security auditing tool for Azure environments

BruteShark. Network Analysis Tool

brutespray. Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

steampipe-mod-microsoft365-compliance. Run individual controls or full compliance benchmarks for CIS across all of your Microsoft 365 and Office 365 tenants using Powerpipe and Steampipe.

iodine. Official git repo for iodine dns tunnel

Kage. Kage is Graphical User Interface for Metasploit Meterpreter and Session Handler

SQLInjectionWiki. A wiki focusing on aggregating and documenting various SQL injection methods

sprayhound. Password spraying tool and Bloodhound integration

awesome-kubernetes-security. A curated list of awesome Kubernetes security resources

kubernetes-security-checklist. Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

dive. A tool for exploring each layer in a docker image

icmpdoor. ICMP Reverse Shell written in Python 3 and with Scapy (backdoor/rev shell)

Posh-SSH. PowerShell Module for automating tasks on remote systems using SSH

Neo-reGeorg. Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

gowitness. 🔍 gowitness - a golang, web screenshot utility using Chrome Headless

RedEye. RedEye is a visual analytic tool supporting Red & Blue Team operations