breachsimrange/redteamsimmerWeb-based adversary emulation platform that orchestrates Atomic Red Team tests across Windows endpoints via Go agents, with MITRE ATT&CK mapping, APT…
gmh5225/aggressor-aggregatorA helper script for consolidating Aggressor and BOF repositories into a single CNA for Cobalt Strike.
facebookincubator/ttpforgeThe TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).
sokarepo/coercedpotatordllReflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
trustedsec/speculaModular command-and-control framework abusing Microsoft Outlook's Home Page feature for stealthy persistence, remote access, and post-exploitation.
trustedsec/tapThe TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.
jas502n/burpsuite-pluginPlugin For BurpSuite (Pentester)
nccgroup/autopwnSpecify targets and run sets of tools against them
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
horizon3ai/h3-cliCLI tool for the Horizon3.ai API
nccgroup/async-pico-hubAsync PICO Hub is a work-in-progress framework to extend Cobalt Strike with custom event monitoring and in-process Asynchronous BOFs
0xjessie21/wp2shell-checkerWordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)
cerberusmrxi/cve-2026-44680-mikroorm-sql-injection-exploit-frameworkPoC tool for CVE-2026-44680 affecting MikroORM ≤7.0.13. Exploits JSON path injection to extract database contents via UNION-based attacks. Features…
h3x0v3rl0rd/cve-2019-9053Python exploit for CVE-2019-9053 targeting a SQL injection vulnerability in CMS Made Simple. Automates time-based blind SQLi to extract admin…
bhavsec/autopentest-aiAgentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
incursi0n/bluesamA Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.
ikotler/hackershA free and open source command-line shell and scripting language designed especially for security testing
smythtech/sdnpwnAn SDN penetration testing toolkit
