A post exploitation framework designed to operate covertly on heavily monitored environments
https://blog.dylan.codes/shad0w/

custom your windows client for redteaming.
https://lnkd.in/gNagi3wb
#redteam

disable function bypass 0day poc
https://github.com/mm0r1/exploits/tree/master/php-filter-bypass

NMAP noscript for CVE-2021-41773 (Path Traversal on Apache HTTP Server 2.4.49).

https://github.com/RootUp/PersonalStuff/blob/master/http-vuln-cve-2021-41773.nse

#apache #nmap

Run Powershell without software restrictions.
https://github.com/iomoath/PowerShx

New version of #BurpSuite Exporter extension.
Fixed minor bugs, added support for HTML Forms, Ruby Net::HTTP, JavaScript XHR and a Tab to search HTTP Requests.
https://github.com/artssec/burp-exporter
#bugbounty #bugbountytips

Ddosify - High-performance load testing tool

https://github.com/ddosify/ddosify

#loadtesting #Ddosify

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

https://github.com/EncodeGroup/BOF-RegSave

#cobaltstrike

Sysmon For Linux build and install instructions
https://github.com/Sysinternals/SysmonForLinux

The vulnerability allows a low-privilege user (such as www-data) to escalate his privileges to root using a bug in PHP-FPM, which has been present for 10 years.
https://www.ambionics.io/blog/php-fpm-local-root

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.
https://github.com/Rices/Phishious

A Proof-of-Concept Layer 2 Denial of Service Attack that disrupts low level operations of Programmable Logic Controllers within industrial environments. Utilizing multithreaded processing, Automator-Terminator delivers a powerful wave of spoofed ethernet packets to a null MAC address.
https://github.com/RoseSecurity/Automator-Terminator