Awesome GitHub RepositoriesAdversarial Payload Execution

Monkey is an adversary emulation platform and breach and attack simulation tool designed to test network defenses through automated lateral movement and exploit delivery. It functions as a network security testing system that evaluates security posture by attempting to propagate through vulnerabilities and extract sensitive system credentials. The platform distinguishes itself by simulating specific real-world attacker behaviors, such as ransomware encryption, cryptojacking, and the theft of browser-stored credentials and secure shell keys. It utilizes binary hash randomization to evade antiv

P4wnP1 is a hardware-based USB HID attack platform and peripheral emulator. It functions as a tool for emulating USB keyboards and mice to execute automated keystroke payloads, as well as a WiFi-enabled remote access tool that provides a wireless bridge for network relay and SSH access. The project is distinguished by its ability to establish covert bidirectional communication channels and remote shells using raw HID reports, specifically to bridge air-gapped systems. It further enables wireless network interception and the routing of network traffic over WiFi to facilitate man-in-the-middle

This project is a set of specialized utilities for generating malformed documents, obfuscating payloads, and crafting specific attack vectors to evaluate the resilience of security scanners. It functions as a PDF fuzzing framework and security testing tool designed to create PDF files with embedded payloads for verifying how document viewers and web applications handle vulnerabilities. The toolkit provides capabilities for encoding and hiding malicious content to test the detection effectiveness of security scanners. It includes a security payload generator for crafting specific attack vector

Dieses Projekt ist ein umfassendes Toolkit für Linux-Sicherheitsaudits und System-Enumeration. Es fungiert als Framework zur Identifizierung von Konfigurationsschwächen, zum Sammeln von Systeminformationen und zum Erkennen von Schwachstellen, um beim Erlangen höherer administrativer Zugriffsebenen auf Linux-Systemen zu unterstützen. Das Toolkit enthält spezialisierte Funktionen für versionsbasiertes Schwachstellen-Scanning, das installierte Software mit bekannten betroffenen Releases abgleicht, sowie Zeitfenster-Prozessüberwachung, um wiederkehrende Systemmuster und periodische Aufgaben zu verfolgen. Es bietet zudem eine Infrastruktur zum Hosten und Bereitstellen von Enumerations-Skripten über ein lokales Netzwerk zur Remote-Ausführung auf Zielmaschinen. Das System deckt ein breites Spektrum an Sicherheitsanalysebereichen ab, einschließlich Local-Privilege-Escalation-Scanning, regelbasierter Enumeration und gefilterter Ausgabeberichte basierend auf benutzerdefinierten Verbosity-Stufen und Kategorien.

BloodHound is an identity risk management platform and graph-based attack path analyzer used to map identity relationships and permissions in Active Directory. It functions as a security tool for auditing directory services, uncovering unintended privilege relationships, and visualizing sequences of permissions that can lead to domain compromise. The project differentiates itself as a comprehensive adversary emulation framework that coordinates remote agents and executes post-exploitation commands. It includes a reverse proxy for bypassing multi-factor authentication via real-time session hij