cybersissons,github

msimpersonate

msImpersonate - User account impersonation written in pure Python3

o365-doppelganger

A quick handy script to harvest credentials off of a user during a Red Team and get execution of a file from the user

offensive-docker

Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

offensive-docker-vps

Create a VPS on Google Cloud Platform or Digital Ocean easily with Offensive Docker included to launch assessment to the targets.

offensivenotion

Notion as a platform for offensive operations

osint_stuff_tool_collection

A collection of several hundred online tools for OSINT

owasp-masvs

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.

owasp-modsecurity-crs

OWASP ModSecurity Core Rule Set (CRS) Project (Official Repository)

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

payload-download-cradles

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-in-docker

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)

pentest-tools

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.