A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

A collection of Cobalt Strike Aggressor scripts.

Evilginx Phishing Engagement Infrastructure Setup Guide

CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

Tunnel TCP connections through a file

The Havoc Framework.

Adversary Emulation Framework

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

The repo contains a series of challenges for learning Frida for Android Exploitation.

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

My experiments in weaponizing Nim (https://nim-lang.org/)

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

Penetration Testing Student version 2 simple condensed NOTES for quick recap