Six Degrees of Domain Admin

The Web Audit Search Engine - Index and Search HTTP Requests and Responses in Web Application Audits with ElasticSearch

BadUSB 2.0 USB-HID MiTM POC

"Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protection against session hijacking via XSS

An SNMPv3 User Enumerator and Attack tool

Go library and command line to seek for secrets on various sources.

Content hijacking proof-of-concept using Flash, PDF and Silverlight

(Unofficial) Python API for https://dnsdumpster.com/

A curated list of awesome reversing resources

Electron Application with JavaScript WebSocket Backdoor and Ruby Command-Line Listener

A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.

Ruby In The Middle (HTTP/HTTPS interception proxy)

A little tool to play with Windows security

Collaborative malware analysis framework

Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools

Email recon made fast and easy, with a framework to build on

Defeating Windows User Account Control

Phishing Template Generation Made Easy

Copy of the BIOS Disassembly Ninjutsu ("1st Edition") PDF

PoC Javascript that scans your local network when you open a webpage

PowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier"

RSPET (Reverse Shell and Post Exploitation Tool) is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario.

DNS Enumeration Script