An NMap NSE Scripts Cheat Sheet to show the correct usage per NSE script that ships with the NMAP software.

Security Auditor Utility for GraphQL APIs

New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.

RottenPotato local privilege escalation from service account to SYSTEM

Javascript payload that inject a malicious payload into the copy-buffer of the victim

Tested on AChat 0.150 Beta 7 Windows 7/8/10 x86/x64

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Stuff about it-security that might be good to know

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

Privilege Escalation Enumeration Script for Windows

A Zsh theme

simple service menu to open dolphin as root

Automatic CPU speed & power optimizer for Linux

Compilation of Resources from TCM's Windows Priv Esc Udemy Course

Tool to audit and attack LAPS environments

Yara rules to be used with the Burp Yara-Scanner extension

Send phishing messages and attachments to Microsoft Teams users

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

Light and dark colorful Gtk3.20+ theme

Zonos-v0.1 is a leading open-weight text-to-speech model trained on more than 200k hours of varied multilingual speech, delivering expressiveness and quality on par with—or even surpassing—top TTS …

PowerShell Pass The Hash Utils

Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

WhoAmI by asking the LDAP service on a domain controller.

Test tool for CVE-2020-1472