Spencer McIntyre

vphone-aio. 1 script run the vphone

Nginx-Rift. NGINX RCE exploits

supertonic. Lightning-Fast, On-Device, Multilingual TTS — running natively via ONNX.

deepsec. Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

cve_2026_31431. Exploit POC for CVE_2026_31431

DeepZero. Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows kernel drivers for exploitable IOCTLs natively using AI agents.

certigo. Certigo - Active Directory Certificate Services enumeration and abuse in Go

fastscheduler. Decorator-first Python scheduler — cron/interval/at jobs with simple persistence and built-in run history.

Misconfiguration-Manager. Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

panda. Platform for Architecture-Neutral Dynamic Analysis

TitanHide. Hiding kernel-driver for x86/x64.

cred1py. A Python POC for CRED1 over SOCKS5

Kavita. Kavita is a fast, feature rich, cross platform reading server. Built with the goal of being a full solution for all your reading needs. Setup your own server and share your reading collection with your friends and family.

romm. A beautiful, powerful, self-hosted rom manager and player.

wrkflw. Validate and Run GitHub Actions locally.

ARM64-ReflectiveDLLInjection. A Proof-of-Concept implementation of Reflective DLL Injection (RDI) specifically for Windows on ARM64. Demonstrates PEB access via the x18 register and manual DLL mapping.

retrobios. Complete BIOS and firmware packs for RetroArch, Batocera, Recalbox, Lakka, RetroPie, EmuDeck, RetroBat, RetroDECK, RomM. Verified checksums, 6700+ files, 300+ emulators profiled from source code.

gMSADumper. Lists who can read any gMSA password blobs and parses them if the current user has access.

Timeroast. Timeroasting scripts by Tom Tervoort

TermHound. Python

godap. A complete terminal user interface (TUI) for LDAP.

snek-sploit. Python RPC client for Metasploit Framework.

windows-api-function-cheatsheets. A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

operating-system-design-review. Operating System Design Review: A systematic analysis of modern systems architecture

sha256algorithm. Sha256 Algorithm Explained

gitreposearch. Streamlit App for GitHub Repository Search Tailored to User Criteria

age. A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

publications. Publications from Trail of Bits

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

EDR-Telemetry. This project aims to compare and evaluate the telemetry of various EDR products.

podlet. Generate Podman Quadlet files from a Podman command, compose file, or existing object

PoolParty. A set of fully-undetectable process injection techniques abusing Windows Thread Pools

syscall_api. Assembly

FlipperAmiibo. Made to be used with Flipper just drag the folder into NFC

scare. A multi-arch assembly REPL and emulator for your command line.

RecycledGate. Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

terminator-editor-plugin. Terminator plugin to open files specified by a given regex in an editor

BadBlood. BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Amsi-Bypass-Powershell. This repo contains some Amsi Bypass methods i found on different Blog Posts.

Active-Directory-Certificate-Services-abuse.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

enarx. Enarx: Confidential Computing with WebAssembly

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

PoC-in-GitHub. 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Anti-Virus-Evading-Payloads. During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Here is a simple way to evade anti-virus software when creating backdoors!

PrivExchange. Exchange your privileges for Domain Admin privs by abusing Exchange

binja_MSDN_Helper. Python

impacket. Impacket is a collection of Python classes for working with network protocols.

Certipy. Tool for Active Directory Certificate Services enumeration and abuse

KrbRelayUp. KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

AtomicSyscall. Tools and PoCs for Windows syscall investigation.

Viper. Adversary simulation and Red teaming platform with AI

Anime-Girls-Holding-Programming-Books. Anime Girls Holding Programming Books

exploit_mitigations. Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

PrintNightmare. C

MicrosoftWontFixList. A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

NetNTLMtoSilverTicket. SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

whoamsi. An effort to track security vendors' use of Microsoft's Antimalware Scan Interface

ScareCrow. ScareCrow - Payload creation framework designed around EDR bypass.

Shark. Turn off PatchGuard in real time for win7 (7600) ~ later

EfiGuard. Disable PatchGuard and Driver Signature Enforcement at boot time

CredBandit. Proof of concept Beacon Object File (BOF) that uses static x64 syscalls to perform a complete in memory dump of a process and send that back through your already existing Beacon communication channel

ByePg. Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.

EvasiveProcessHollowing. Evasive Process Hollowing Techniques

anybadge. A Python project for generating badges for your projects, with a focus on simplicity and flexibility.

EDRs. C

Priv2Admin. Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

CVE-2021-3156. Sudo Baron Samedit Exploit

minidump. Python library to parse and read Microsoft minidump file format

phpggc. PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

rich. Rich is a Python library for rich text and beautiful formatting in the terminal.

CVE-2020-17530. Python

stackedit. In-browser Markdown editor

glorp. A CLI-based HTTP intercept and replay proxy

OffensiveCSharp. Collection of Offensive C# Tooling

GadgetToJScript. A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

speakeasy. Windows kernel and user mode emulation.

BugId. Detect, analyze and uniquely identify crashes in Windows applications

xattr. Python wrapper for extended filesystem attributes

cnn-watermark-removal. Fully convolutional deep neural network to remove transparent overlays from images

RpcSsImpersonator. Privilege Escalation Via RpcSs svc

proxy.py. 💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework

RomPatcher.js. An IPS/UPS/APS/BPS/RUP/PPF/xdelta ROM patcher made in HTML5.

DefenderCheck. Identifies the bytes that Microsoft Defender flags on.

kiewtai. A port of Kaitai to the Hiew hex editor

win32k-bugs. Dump of win32k POCs for bugs I've found

ruby_smb. A native Ruby implementation of the SMB Protocol Family

pipenv. Python Development Workflow for Humans.

exploit-exercises. exploit-exercises holds my solutions and thoughts on the exercises on exploit-exercises.com

pyunifi. Python

sourcerer-app. 🦄 Sourcerer app makes a visual profile from your GitHub and git repositories.

pinjectra. Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

manul. Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS

ShellcodeCompiler. Shellcode Compiler

restincode. A memorial site for Hackers and Infosec people who have passed

protocol. An ASCII Header Generator for Network Protocols

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

king-phisher-plugins. Plugins for the King Phisher open source phishing campaign toolkit.

awesome-gbdev. A curated list of Game Boy development resources such as tools, docs, emulators, related projects and open-source ROMs.

gb-studio. A quick and easy to use drag and drop retro game creator for your favourite handheld video game system

Windows-Kernel-Explorer. A free but powerful Windows kernel research tool.

Auto_EAP. Automated Brute-Force Login Attacks Against EAP Networks.

atom-tablr. Edit CSV files using a table editor

rattle. evm binary static analysis

sh00t. Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

Detours. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

btlejack. Bluetooth Low Energy Swiss-army knife

TDL. Driver loader for bypassing Windows x64 Driver Signature Enforcement

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

raindance. Reconnaissance tool for Microsoft Office 365

gfm. [Archived] GitHub Flavored Markdown in Python

mdx_bleach. Python-Markdown extension to sanitize the output of untrusted Markdown documents.

linqit. Extend python lists operations using .NET's LINQ syntax for clean and fast coding.

al-khaser. Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

voltron. A hacky debugger UI for hackers

CodeExecutionOnWindows. A list of ways to execute code on Windows using legitimate Windows tools

windows-syscalls. Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

pypykatz. Mimikatz implementation in pure Python

shellen. :cherry_blossom: Interactive shellcoding environment to easily craft shellcodes

pysheeet. Python Cheat Sheet

geany-themes. A collection of colour schemes for Geany.

gnomecast. Chromecast local files from Linux - supports MKV, subtitles, 5.1 sound and 4K!

tsx-tools. Header files for Intel TSX (Transactional Synchronization Extension) development

LIEF. LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

One-Lin3r. Gives you one-liners that aids in penetration testing operations, privilege escalation and more

pwnjs. A Javascript library for browser exploitation

cmd2. cmd2 - quickly build feature-rich and user-friendly interactive command line applications in Python

bleah. This repository is DEPRECATED, please use bettercap as this tool has been ported to its BLE modules.

YAOLO. YAOLO (Yet Another Offensive LinkedIn Obtainer)

kAFL. Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

trust. An interactive guide to the game theory of cooperation

sRDI. Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Reflective-Driver-Loader. C++

Awesome-Fuzzing. A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.

smoke-zephyr. Python utility collection

python-email-validator. A robust email syntax and deliverability validation library for Python.

guild-wars-2. Guild Wars 2 API

pipdeptree. A command line utility to display dependency tree of the installed Python packages

geOSINT. Search physical locations for geo tagged photos

hardentools. Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

trump2cash. A stock trading bot powered by Trump tweets

honggfuzz. Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)

olefile. olefile is a Python package to parse, read and write Microsoft OLE2 files (also called Structured Storage, Compound File Binary Format or Compound Document File Format), such as Microsoft Office 97-2003 documents, vbaProject.bin in MS Office 2007+ files, Image Composer and FlashPix files, Outlook messages, StickyNotes, several Microscopy file formats, McAfee antivirus quarantine files, etc.

awesome-windows-exploitation. A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

big-list-of-naughty-strings. The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

endless-sky. Space exploration, trading, and combat game.

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

python-afl. American Fuzzy Lop fork server and instrumentation for pure-Python code

gdb-dashboard. Modular visual interface for GDB in Python

gitsome. A supercharged Git/GitHub command line interface (CLI). An official integration for GitHub and GitHub Enterprise: https://github.com/works-with/category/desktop-tools

dnSpy. .NET debugger and assembly editor

no-more-secrets. A command line tool that recreates the famous data decryption effect seen in the 1992 movie Sneakers.

pushbullet.py. A python client for http://pushbullet.com

pyAIML. PyAIML -- The Python AIML Interpreter

ntfy. 🖥️📱🔔 A utility for sending notifications, on demand and when commands finish.

BloodHound-Legacy. Six Degrees of Domain Admin

Ablation. Ablation is a tool for augmenting static analysis by extracting information at runtime, and importing it into IDA. It can resolve virtual calls, reveal interesting code, exclude heavily traversed regions, identify untested or undocumented features, visually diff samples, or perform root cause analysis simply by running samples. My favourite however is the virtual call resolution with fully interactive x-refs. It's simple, elegant, and disassembled C++ reads like C! It helps me time and time again.

awesome-selfhosted. A list of Free Software network services and web applications which can be hosted on your own servers

demos. Demos of various injection techniques found in malware

aflfast. AFLFast (extends AFL with Power Schedules)

wcc. The Witchcraft Compiler Collection

pentext. PenText system: Easily create beautiful looking penetration test quotes, reports, and documents in many formats (PDF, text, JSON, Markdown, CSV, ...)

xerosploit. Efficient and advanced man in the middle framework

pywerview. A (partial) Python rewriting of PowerSploit's PowerView

wdbgark. WinDBG Anti-RootKit Extension

ansible4redteams. Ansible playbooks to facilitate redteam stuff

EasyHook. EasyHook - The reinvention of Windows API Hooking

log-progress. https://habr.com/ru/post/276725/

pluginbase. A simple but flexible plugin system for Python.

pyenv-implict. Allow pyenv to guess the python version from the program name.

king-phisher-templates. Templates for the King Phisher open source phishing campaign toolkit.

WSL. Windows Subsystem for Linux

ownnote. Notes app for ownCloud

notes. Awesome note taking.

jsencrypt. A tiny (18.5 kB gzip), zero-dependency, Javascript library to perform OpenSSL RSA Encryption, Decryption, and Key Generation.

bandit. Python AST-based static analyzer from OpenStack Security Group

nerd-fonts. Iconic font aggregator, collection, & patcher. 3,600+ icons, 50+ patched fonts: Hack, Source Code Pro, more. Glyph collections: Font Awesome, Material Design Icons, Octicons, & more

Js2Py. JavaScript to Python Translator & JavaScript interpreter written in 100% pure Python🚀 Try it online:

laboratory. Achieving confident refactoring through experimentation with Python 2.7 & 3.3+

kitty. Fuzzing framework written in python

peda. PEDA - Python Exploit Development Assistance for GDB

piprot. How rotten are your requirements?

domi-owned. IBM/Lotus Domino exploitation

agate. A Python data analysis library that is optimized for humans instead of machines.

borg. Deduplicating archiver with compression and authenticated encryption.

excel-press. Python script to compress VBA macro files

intermediatePython. Python

Ropper. Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

codeface. Typefaces for source code beautification

Hack. A typeface designed for source code

gotty. Share your terminal as a web application

bits. BIOS Implementation Test Suite

UnmanagedPowerShell. Executes PowerShell from an unmanaged process

Empire. Empire is a PowerShell and Python post-exploitation agent.

king-phisher. Phishing Campaign Toolkit

awesome. 😎 Awesome lists about all kinds of interesting topics

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

interactive-coding-challenges. 120+ interactive Python coding interview challenges (algorithms and data structures). Includes Anki flashcards.

metasploit-payloads. Unified repository for different Metasploit Framework payloads

the-art-of-command-line. Master the command line, in one page