RedByts Security

pentest-ai. Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

recon-skills. An evolving recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

CyberStrike. Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK, OWASP WSTG, CIS Benchmarks. Post-exploit: Linux/Windows/macOS/AWS/Azure/K8s/CI-CD. Web UI + Cloudflare Tunnel. Your AI red team.

AI-For-Beginners. 12 Weeks, 24 Lessons, AI for All!

garak. the LLM vulnerability scanner

hexstrike-ai. HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

NimPlant. A light-weight first-stage C2 implant written in Nim (and Rust).

GIUDA. Ask a TGS on behalf of another user without password

hoaxshell. A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

Awesome-RCE-techniques. Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

CVE-2019-3980. Python

api_wordlist. A wordlist of API names for web application assessments

adfsbrute. A script to test credentials against Active Directory Federation Services (ADFS), allowing password spraying or bruteforce attacks.

password-list. Password lists with top passwords to optimize bruteforce attacks

WinPwn. Automation for internal Windows Penetrationtest / AD-Security

Recon. Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix methodologies

GitTools. A repository with 3 tools for pwn'ing websites with .git repositories available

gitleaks. Find secrets with Gitleaks 🔑

AlternativeShellcodeExec. Alternative Shellcode Execution Via Callbacks

OSINT-SAN. OSINT-SAN Framework дает возможность быстро находить информацию и деанонимизировать пользователей сети интернет.

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

degoogle. search Google and extract results directly. skip all the click-through links and other sketchiness

restler-fuzzer. RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

PowerShell-Red-Team. Collection of PowerShell functions a Red Teamer may use in an engagement

awesome-privilege-escalation. A curated list of awesome privilege escalation

BypassAV. Cobalt Strike插件，用于快速生成免杀的可执行文件

ConPtyShell. ConPtyShell - Fully Interactive Reverse Shell for Windows

Awesome-CobaltStrike. List of Awesome CobaltStrike Resources

IoT-PT-v1. A Virtual environment for Pentesting IoT Devices

OSCPRepo. A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

dnSpy. .NET debugger and assembly editor

NetLoader. Loads any C# binary in mem, patching AMSI + ETW.

Buffer-Overflow-Exploit-Development-Practice. Good For OSCP Training

shad0w. A post exploitation framework designed to operate covertly on heavily monitored environments

Macrome. Excel Macro Document Reader/Writer for Red Teamers & Analysts

amass. In-depth attack surface mapping and asset discovery

MBE. Course materials for Modern Binary Exploitation by RPISEC

h4cker. This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org

OSCE. Collection of Windows usermode exploits targeting various third-party software applications, these exploits were written in preparation for the Offsec CTP/OSCE certification

malware-samples. Malware samples, analysis exercises and other interesting resources.

cobalt-arsenal. My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

commix. Automated All-in-One OS Command Injection Exploitation Tool

Phantom-Evasion. Python antivirus evasion tool

eBook-BypassingAVsByCSharp. eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

UACME. Defeating Windows User Account Control

Invisi-Shell. Hide your Powershell script in plain sight. Bypass all Powershell security features

pwndrop. Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

RedTeamCSharpScripts. C# Script used for Red Team

ebfuscator. Ebfuscator: Abusing system errors for binary obfuscation

PowerSharpPack. PowerShell

Malleable-C2-Profiles. Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

RedTeamTools. 记录自己编写、修改的部分工具

WhiteListEvasion. Collection of scripts, binaries and the like to aid in WhiteList Evasion on a Microsoft Windows Network.

at-ps. Adversary Tactics - PowerShell Training

CVE-2020-0796. CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

C2concealer. C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

CobaltStrike-ToolKit. Some useful scripts for CobaltStrike

Penetration_Testing_POC. 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pacu. The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

ZSC. OWASP ZSC - Shellcode/Obfuscate Code Generator https://www.secologist.com/

Invoke-SharpLoader. PowerShell

Http-Asynchronous-Reverse-Shell. [POC] Asynchronous reverse shell using the HTTP protocol.

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

vmware-exploitation. A collection of links related to VMware escape exploits

windows-php-reverse-shell. Simple php reverse shell implemented using binary .

Hashcat-Cheatsheet. Hashcat Cheatsheet for OSCP

Active-Directory-Exploitation-Cheat-Sheet. A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

lazy_nessus. If you deal with PCI or have a need to extract periodically scheduled scan report from nessus, then this tool can do this for you while you can focus on other things rather than clicking on same UI every time.

awesome-industrial-control-system-security. A curated list of resources related to Industrial Control System (ICS) security.

MS17-010. MS17-010

OSCE_BIBLE. A collection of OSCE preparation resources.

ATTCK-PenTester-Book. ATTCK-PenTester-Book

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

CurveBall. PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

RedELK. Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.

SharpLocker. C#

StageStrike. Custom Cobalt Strike stagers using different methods of thread execution and memory allocation

Red-Team-Infrastructure-Wiki. Wiki to collect Red Team infrastructure hardening resources

physical-docs. This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

One-Lin3r. Gives you one-liners that aids in penetration testing operations, privilege escalation and more

CVE-2019-19781. CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

cve-2019-19781. This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

Awesome-Hacking. A collection of various awesome lists for hackers, pentesters and security researchers

CVE-2019-1215. C++

Empire. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Nuages. A modular C2 framework

SysWhispers. AV/EDR evasion via direct system calls.

Python-Rootkit. Python Remote Administration Tool (RAT) to gain meterpreter session

awesome-shodan-queries. 🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

APT_REPORT. Interesting APT Report Collection And Some Special IOCs

OSCP. Collection of things made during my OSCP journey

linux-microsoft-ie-virtual-machines. Run Internet Explorer 8/9/10/11/MS-Edge Virtual machines from Microsoft under Linux via VirtualBox.

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

UltimateAppLockerByPassList. The goal of this repository is to document the most common techniques to bypass AppLocker.

Red-Teaming-Toolkit. This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Keylogger. A simple keylogger for Windows, Linux and Mac

Serpico. SimplE RePort wrIting and COllaboration tool

RE-iOS-Apps. A completely free, open source and online course about Reverse Engineering iOS Applications.

the-book-of-secret-knowledge. A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

o365-attack-toolkit. A toolkit to attack Office365

CVE-2017-11882-metasploit. This is a Metasploit module which exploits CVE-2017-11882 using the POC released here : https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about.

OSCP-stuff. Where I'll be posting my scripts, guides, cheatsheets, and notes for for my OSCP journey.

Awesome-Red-Teaming. List of Awesome Red Teaming Resources

Privilege-Escalation. This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

ShellPop. Pop shells like a master.

fuxploider. File upload vulnerability scanner and exploitation tool.

Salsa-tools. Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

Amsi-Bypass-Powershell. This repo contains some Amsi Bypass methods i found on different Blog Posts.

Windows-RCE-exploits. The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are uploaded for education purposes for red and blue teams.

CVE-2017-12615. POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

public-pentesting-reports. A list of public penetration test reports published by several consulting firms and academic security groups.

SharpShooter. Payload Generation Framework

mole. CLI application to create ssh tunnels focused on resiliency and user experience.

LOLBAS. Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

PrivEsc. A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

CrackMapExec. A swiss army knife for pentesting networks

LaZagne. Credentials recovery project

3proxy. 3proxy - tiny free proxy server

Malleable-C2-Profiles. Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

Malleable-C2-Randomizer. A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

AggressorScripts. Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

Empire. Empire is a PowerShell and Python post-exploitation agent.

metasploit-framework. Metasploit Framework

unicorn. Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

ptf. The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

dnscat2. PHP

linux. Linux kernel source tree

smali. smali/baksmali

C0F3. C0F3 is a Jailbreak for 10.0 - 10.3.3 & 11.0 - 11.1.2

idb. idb is a tool to simplify some common tasks for iOS pentesting and research

Introspy-iOS. Security profiling for blackbox iOS

viproy-voipkit. VIPROY - VoIP Pen-Test Kit for Metasploit Framework

android-ssl-bypass. Black box tool to bypass SSL verification on Android, even when pinning is used.

classdump-dyld. Class-dump any Mach-o file without extracting it from dyld_shared_cache

Keychain-Dumper. A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken

krackattacks-scripts. C

pth-toolkit. Modified version of the passing-the-hash tool collection made to work straight out of the box

Infosec_Reference. An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

mona. Corelan Repository for mona.py

Awesome-Fuzzing. A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

dirtycow.github.io. Dirty COW