Run PowerShell with rundll32. Bypass software restrictions.
- security
- powershell
- applocker
78,351 visible repositories in the index
97–120 of 146 · Most stars
Run PowerShell with rundll32. Bypass software restrictions.
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
Azure Security Resources and Notes
A Powershell incident response framework
UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.
A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
Powerful Python tool to analyze PDF documents
PowerForensics provides an all in one platform for live disk forensic analysis
Generate smart and powerful wordlists
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
A powerful and easy to configure uptime and ssl monitor
Simple yet powerful authorization / authentication client library for Python web applications.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
ebpfkit is a rootkit powered by eBPF
APKinspector is a powerful GUI tool for analysts to analyze the Android applications.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
Galah: An LLM-powered web honeypot.
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
Documenting the unofficial and internal Steam Web API
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Integrated certification via Let's encrypt for Elixir-powered sites
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.