Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

This is my OSCP cheat sheet made by combining a lot of different resources online with a little bit of tweaking. I used this cheat sheet during my exam (Fri, 13 Sep 2019) and during the labs. I can proudly say it helped me pass so I hope it can help you as well ! Good Luck and Try Harder

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

Cobalt Strike AggressorScripts For Red Team

Programmatically extract saved passwords from Chromium based browsers.

Metasploit Modules Development

Hello my friends, it is my repo about sql injections. Call me in Telegram: @anakein

Squatm3gator is a complete web solution based on the python tool squatm3, designed to enumerate available domains generated modifying the original domain name through different cybersquatting techniques

Open-Source autonomous security operations and red teaming agent built to help defenders investigate threats, analyze vulnerabilities, assess indicators of compromise, generate hardening guidance, and execute security research through an auditable agent workflow.

Compiling Csharp in-memory and Execute to bypass AVs

A simple WiFi scanning GUI for scanning the available wireless networks

A tool to obfuscate powershell reverseshell payloads to be undetected in windows

Pentesting resources

Pentesting & Hacking Tools

A DNS and Reverse DNS Lookup Tool

Collection of Tools For Red Teaming Just Use it For Study Purpose And Ctf

Most realistic social media phishing page for Instagram and facebook

A tool to check for MAC addresses vendor

A powerful serverless AWS platform that instantly deploys fully-equipped reconnaissance and vulnerability scanning environments on demand. It runs an arsenal of security tools, leverages AI for deep analysis, then automatically destroys itself — leaving zero infrastructure footprint. One trigger. Complete automated recon. Zero maintenance.

Match contributors to project needs with data-backed suggestions from test gaps, docs, bugspots, and open issues.