In 2016 we released BloodHound, which helps attackers and defenders alike identify and execute or eliminate attack paths in Active Directory. Since then, BloodHound's collection and analysis capabilities have been limited to Active Directory and domain-joined…

A Repository dedicated to creating modular and automated penetration testing frameworks utilizing Jupyter Notebooks - GitHub - obheda12/JupyterPen: A Repository dedicated to creating modular and au...

State-of-the-art native debugging tools. Contribute to HyperDbg/HyperDbg development by creating an account on GitHub.

My experiments in weaponizing Nim (https://nim-lang.org/) - byt3bl33d3r/OffensiveNim

"Use ImageMagick® to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) includ...

On a whim, I tossed this into the address field of the registrant data of a domain so it’d appear in whois records…

Technical details about how to pivot through a Microsoft SQL Server . Using mssql as a proxy for lateral movement

How to run Windows 10 on ARM or Ubuntu for ARM64 in QEMU on Apple Silicon Mac - README.en.md

Google has found thousands of security vulnerabilities and other bugs using Fuzzing. Now we are introducing the Atheris fuzzing engine.

XS-Leaks Wiki # Overview # Cross-site leaks (aka XS-Leaks, XSLeaks) are a class of vulnerabilities derived from side-channels 1 built into the web platform. They take advantage of the web’s core principle of composability, which allows websites to interact…

Contribute to oskarsve/ms-teams-rce development by creating an account on GitHub.

holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function. - megadose/holehe

So…this one’s been here for a while: a local privilege escalation vulnerability in PsExec. This local privilege escalation allows a…

TrustedSec's blog is an expert source of information on information security trends and best practices for strategic risk management.

Read a helpful overview of the Bronze Bit attack (CVE-2020-17049) against Kerberos implementations in Windows Active Directory.

Intro to the book contents and what to expect.

Sophos-ReversingLabs 20 million sample dataset. Contribute to sophos/SOREL-20M development by creating an account on GitHub.

A private Lumina server for IDA Pro. Contribute to naim94a/lumen development by creating an account on GitHub.

Learn how to emulate, trace, debug, and Reverse Engineer UEFI modules in part 2 of our new blog series on Firmware Security