Ddosify - High-performance load testing tool

https://github.com/ddosify/ddosify

#loadtesting #Ddosify

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

https://github.com/EncodeGroup/BOF-RegSave

#cobaltstrike

Sysmon For Linux build and install instructions
https://github.com/Sysinternals/SysmonForLinux

The vulnerability allows a low-privilege user (such as www-data) to escalate his privileges to root using a bug in PHP-FPM, which has been present for 10 years.
https://www.ambionics.io/blog/php-fpm-local-root

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.
https://github.com/Rices/Phishious

A Proof-of-Concept Layer 2 Denial of Service Attack that disrupts low level operations of Programmable Logic Controllers within industrial environments. Utilizing multithreaded processing, Automator-Terminator delivers a powerful wave of spoofed ethernet packets to a null MAC address.
https://github.com/RoseSecurity/Automator-Terminator

Atomic Red Team™ is library of tests mapped to the MITRE ATT&CK® framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments.
https://github.com/redcanaryco/atomic-red-team

A TCP proxy to simulate network and system conditions for #chaos and #resiliency #testing
https://github.com/Shopify/toxiproxy
#toxiproxy #TCPproxy

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
https://github.com/splunk/attack_range

Combine namp and masscan for fast scanning and identification tools Github: https://github.com/MrLion7/Lmap

#tools #Scanner

Proof-of-concept obfuscation toolkit for C# post-exploitation tools
https://github.com/xforcered/InvisibilityCloak
#POC #FUD

Fast and customizable vulnerability scanner based on simple YAML based DSL.
https://github.com/projectdiscovery/nuclei
https://github.com/projectdiscovery/nuclei-templates
#scanner #bugbounty

Turbolist3r is a fork of the #sublist3r #subdomain discovery tool. In addition to the original #OSINT capabilties of sublist3r, turbolist3r automates some analysis of the results, with a focus on subdomain takeover.
https://github.com/alex14324/Turbolist3r

A Series of Baseband & LMP Exploits against Bluetooth Classic Controllers
https://github.com/Matheus-Garbelini/braktooth_esp32_bluetooth_classic_attacks

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.
https://wadcoms.github.io/

Backdoor
https://github.com/skerkour/black-hat-rust/tree/main/extra/backdoors
https://kerkour.com/rust-crate-backdoor/

Windows LPE 0day
https://github.com/klinix5/InstallerFileTakeOver
#0day #LPE #windows