Open-source alternatives to One Lin3r

Zero-Day Code Injection and Persistence Technique

Know the dangers of credential reuse attacks.

Steal Net-NTLM Hash using Bad-PDF

rules to identify files containing juicy information like usernames, passwords etc

Active Directory Integrated DNS dumping by any authenticated user

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

List DTDs and generate XXE payloads using those local DTDs.

dsvpn is a point-to-point virtual private network tool that establishes encrypted tunnels between two specific endpoints. It functions as a network driver utility that routes raw operating system traffic through a virtual interface for encapsulation and secure transmission. The project distinguishes itself by encapsulating IP packets within TCP streams, allowing secure connections to bypass restrictive network firewalls and filters that block non-standard protocols. It uses symmetric encryption with pre-shared secret keys to authenticate participants and protect data transmission. The softwa

Various public documents, whitepapers and articles about APT campaigns

h8mail is an open-source intelligence tool for searching leaked credentials and compromised accounts across remote APIs and local data dumps. It functions as a credential leak hunter and email reconnaissance framework designed to identify exposed passwords and sensitive information using usernames, domains, IP addresses, and email hashes. The tool distinguishes itself through a recursive target expansion system that feeds newly discovered email addresses back into the search queue to broaden the scope of investigations. It also includes a local breach data parser that employs multiprocessing

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

Mr.SIP is a simple console based SIP-based Audit and Attack Tool. Originally it was developed to be used in academic work to help developing novel SIP-based DDoS attacks and then as an idea to convert it to a fully functional SIP-based penetration testing tool. So far Mr SIP resulted several…

Utility to find AES keys in running processes

This repo contains information about EDRs that can be useful during red team exercise.