0xsyr0

Awesome-Cybersecurity-Handbooks. A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

OSCP. OSCP Cheat Sheet

Red-Team-Playbooks. This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.

vx-underground-wordlist. Wordlist to crack .zip-file password

CTF-Notes. From Zero To Hero

Cybersecurity-Glossary. A summary of the most abbreviations I encountered so far

Cybersecurity-Book-Recommendations. This repository is about books I recommend in terms of cybersecurity.

Red-Team-Field-Guide. Field guide to gather low-hanging fruits

OSCP-Note-Vault. Obsidian Vault for note taking during the OSCP exam.

InfoScraper. Python implementation of two famous JavaScript payloads for Bug Bounty.

0xsyr0.

Log4Shell. This repository contains all gathered resources we used during our Incident Reponse on CVE-2021-44228 and CVE-2021-45046 aka Log4Shell.

atomic-red-team. Small and highly portable detection tests based on MITRE's ATT&CK.

Obsidian-Snippets. Obsidian snippets for generating engagements reports

Bobber. Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

syshell. Protected web shell for offensive security purposes.

sliver. Adversary Emulation Framework

nuclei-templates. A collection of useful nuclei templates

0xsyr0.github.io. A minimal, responsive, and powerful Jekyll theme for presenting professional writing.

Havoc. The Havoc Framework

phishing-templates. Over 50 of The Most Deceptive Phishing Templates, Pages & Links for GoPhish!

RustRedOps. 🦀 | RustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language. (In Construction)

thc-tips-tricks-hacks-cheat-sheet. Various tips & tricks

OffensiveNim. My experiments in weaponizing Nim (https://nim-lang.org/)

bindshell. bindshell project for understanding purposes

Red-Teaming-Toolkit. This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

pytroj. This repository contains files for the Python programming series of Alh4zr3d on YouTube.

PowerSploit. PowerSploit - A PowerShell Post-Exploitation Framework

Empire. Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

GadgetToJScript. A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

peeko. peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

Mythic_NimSyscallPacker_Wrapper. Mythic C2 wrapper for NimSyscallPacker

ZigStrike. ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.

PackMyPayload. A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

FindMeAccess. Python

dittobytes. Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

PowerShellRunner. PowerShell runner for executing malicious payloads in order to bypass Windows Defender.

Black-Hat-Zig. This project provides some code examples of Zig for malwares, hacking, and red teaming.

sliver-cheatsheet. Sliver CheatSheet for OSEP

merlin-agent-dll. Go

Nimcrypt2. .NET, PE, & Raw Shellcode Packer/Loader Written in Nim

PowerSharpPack. PowerShell

nishang. Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

OffensivePipeline. OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

Ransomware. Python

evilginx2. Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication