A simple tool to test for CRLF injection
https://github.com/ualvesdias/crlfbruter
#CRLF_injection

Tools for hunting for threats
https://github.com/GossiTheDog/ThreatHunting
#threathunting

Violent Fungus is a command and control (C2) software suite, providing red teams post-exploitation persistence and other juicy stuff. WIP.
https://github.com/sogonsec/ViolentFungus-C2
#c2 #python

WebContent->EL1 LPE: OOBR in AppleCLCD / IOMobileFrameBuffer
https://saaramar.github.io/IOMobileFrameBuffer_LPE_POC/
این آسیب پذیری توسط اپل در نسخه 14.7.1 رفع شده است.

Racketeer Project - Ransomware emulation toolkit
https://github.com/dsnezhkov/racketeer/tree/main/Docs
#ransomware #emulation

Juumla is opensource scanner like joomscan
https://github.com/oppsec/juumla
#scanner #Juumla

meet Revealin
nice Osint Tools for Uncover the full name of a target on Linkedin.
https://github.com/mxrch/revealin
#Osint #linkedin

A more advanced free and open .NET obfuscator using dnlib.
https://github.com/AnErrupTion/LoGiC.NET
#dotnet #obfuscation

California health smart card now accessible (vaccination record)
https://github.com/dxa4481/SmartHealthCardViewer
#California #health_record

9 Post-Exploitation Tools for Your Next Penetration Test
»>https://labs.bishopfox.com/industry-blog/9-post-exploitation-tools-for-your-next-penetration-test?utm_campaign=2021_Posts_Blog_Industry&utm_content=173153971&utm_medium=social&utm_source=linkedin&hss_channel=lcp-232312
GhostPack
https://github.com/GhostPack
Mimikatz
https://github.com/gentilkiwi/mimikatz
Metasploit
https://www.metasploit.com/
PowerHub
https://github.com/AdrianVollmer/PowerHub
LOLBAS and LLOLBAS
https://github.com/LOLBAS-Project/LOLBAS
https://github.com/AZSERG/LLOLBAS
PHPSploit
https://github.com/nil0x42/phpsploit
swap_digger
https://github.com/sevagas/swap_digger
Bashark
https://github.com/redcode-labs/Bashark
BeRoot Project
https://github.com/AlessandroZ/BeRoot

Meet Pickle
Post-exploitation and lateral movements framework
===================================
https://picklec2.readthedocs.io/en/latest/Usage.html
PickleC2 is a simple C2 framework written in python3 used to help the community in Penetration Testers in their red teaming engagements. it has the ability to import your own PowerShell module for Post-Exploitation and Lateral Movement or automate the process.
#redteaming #pentesting #postexploit #lateralmovement #cybersecurity #framework

A collection of links related to VMware escape exploits
https://github.com/xairy/vmware-exploitation
#vmware #exploit

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.
https://twitter.com/_batsec_/status/1421140725815709698
https://github.com/bats3c/ADCSPwn

#Osint #Foca

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution
ابزاری مشابه سری ابزارهای pstools
https://github.com/0xthirteen/SharpRDP

Universal Privilege Escalation and Persistence – Printer
https://pentestlab.blog/2021/08/02/universal-privilege-escalation-and-persistence-printer/

ساخت object های مختلف در اکیتو دایرکتوری برای تبدیل ماشین مجازی به محیط تست اکتیو دایرکتوری توسط ماژول های پاورشل badblood
https://github.com/davidprowe/BadBlood
#badblood #LAB #Activedirectory

Selection blackhat Tools
https://therecord.media/security-tools-showcased-at-black-hat-usa-2021/amp/?__twitter_impression=true
#blackhat

OSINT Domain
https://github.com/Peneter/Pentest-tools/blob/main/IG/DnsLookup.py

Tool to bypass LSA Protection (aka Protected Process Light)
https://github.com/RedCursorSecurityConsulting/PPLKiller
#post_exploit