joel-correa Goto Github PK

movecert

movecert

objection

📱 objection - runtime mobile exploration

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

penetration-testing-tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pentest-tools

phishmonger

Phishmonger: A free and open source public archive of real-world phishing websites

powersharppack

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pssw100avb

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

rafel-rat

-------> RAFEL<------ Android Rat Written in Java With WebPanel For Controlling Victims...Hack Android Devices

redteam-resources

rew-sploit

Emulate and Dissect MSF and *other* attacks

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scrummage

The Ultimate OSINT and Threat Hunting Framework

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

sharpnamedpipepth

Pass the Hash to a named pipe for token Impersonation

sleep_python_bridge

This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testing and is in no way an officially support feature. Perhaps this could be something added in the future to the core product.

sql-injection-payload-list

🎯 SQL Injection Payload List

tomcatwardeployer

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

unipacker

Automatic and platform-independent unpacker for Windows binaries based on emulation

web-ctf-cheatsheet

Web CTF CheatSheet 🐈

windows-auditing-mindmap

Set of Mindmaps providing a detailed overview of the different #Windows auditing capacities and event log files.

winpwn

Automation for internal Windows Penetrationtest / AD-Security