hydra

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

SSH man-in-the-middle tool

IPv6 attack toolkit

NetCat for Windows

Multi-architecture Linux privilege escalation toolkit with 24 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

👾 a decade of resources for security researchers: pentesting, CTF, wargames, cryptography, forensics, reverse engineering, IoCs, botnets, cloud hacking, linux hacking, steganography, vulnerabilities, etc.

Modular personalized dictionary generator.

Headless Wireless Penetration Testing on ESP32

Penetration tests on SSH servers using brute force or dictionary attacks. Written in C.

My public notes about offensive security

An application that utilizes fast AF_XDP Linux sockets to generate and send network packets. Used for penetration testing including Denial of Service (DoS) and network monitoring. Made by @gamemann!

Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I h…

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Automated Cyber Offense

A very high-speed, configurable, and portable packet-crafting utility optimized for embedded devices

A Log4j writeup and Docker based PoC written in PowerShell

Packet crafting, injection and sniffing tool

RedTeam-Agent: AI-Powered Autonomous Red Team Framework via Model Context Protocol. AI红队与内网渗透自动化框架，支持 gogo, fscan, httpx, nuclei, impacket, playwright 等 15+ 渗透工具，让 LLM 直接化身安全审计黑客。