{ "at": "2026-07-17T19:29:15.305Z", "count": 3051, "tools": [ { "repo": "Ne0nd0g/merlin", "name": "merlin", "owner": "Ne0nd0g", "url": "https://github.com/Ne0nd0g/merlin", "stars": 5574, "language": "Go", "description": "Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4" }, "referencedBy": [ { "url": "https://www.bunniestudios.com/blog/2025/name-that-ware-january-2025/", "title": "Name that Ware, January 2025 « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://mazinahmed.net/blog/publishing-malicious-vscode-extensions/", "title": "Compromising Developers with Malicious Extensions - VS Code, Cursor AI, and the Backdoor You Didn't See Coming", "person": "Mazin Ahmed" }, { "url": "https://forensicitguy.github.io/whitelisting-ld-preload-for-fun-and-no-profit/", "title": "Whitelisting LD_PRELOAD for Fun and No Profit", "person": "Tony Lambert" } ], "referencedCount": 3, "adoptionOperators": 3, "score": 95, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 15, "contributors": [ { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "login": "ForensicITGuy" }, { "name": "John Hopper", "cardId": "61109955c224a1c5", "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "login": "zinic" } ], "id": "ef7abdc65f60", "pushedAt": "2025-04-17T15:08:42Z", "archived": false, "topContributors": [ { "login": "Ne0nd0g", "c": 698, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "twigatech", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/5000201?v=4", "type": "User" }, { "login": "ahhh", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/836166?v=4", "type": "User" }, { "login": "C-Sto", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/7466346?v=4", "type": "User" }, { "login": "audibleblink", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/4605783?v=4", "type": "User" }, { "login": "ForensicITGuy", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 7, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "HuskyHacks", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/57866415?v=4", "type": "User" }, { "login": "alexbires", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1472062?v=4", "type": "User" }, { "login": "droberson", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5570998?v=4", "type": "User" }, { "login": "g3rzi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11998736?v=4", "type": "User" }, { "login": "ibidani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1267684?v=4", "type": "User" }, { "login": "zinic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "type": "User" }, { "login": "klustic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6464304?v=4", "type": "User" }, { "login": "trumankain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42022383?v=4", "type": "User" } ] }, { "repo": "commercial/cobalt-strike", "id": "2d175834803a", "name": "Cobalt Strike", "owner": "Fortra", "url": "https://www.cobaltstrike.com", "commercial": true, "vendor": "Fortra", "stars": null, "language": null, "description": "The commercial adversary-simulation and red-team C2 platform that originated the Beacon implant and the Beacon Object File (BOF / COFF) format. Malleable C2 profiles for traffic shaping, Aggressor Script extensibility, and by far the largest BOF ecosystem and operator toolset.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Fortra", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 95, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": true, "canonicalArsenal": true, "commercial": true } }, { "repo": "byt3bl33d3r/crackmapexec", "name": "crackmapexec", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/CrackMapExec", "stars": 9155, "language": "Python", "description": "A swiss army knife for pentesting networks", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [ { "url": "https://hausec.com/2017/10/21/domain-penetration-testing-using-bloodhound-crackmapexec-mimikatz-to-get-domain-admin/", "title": "Domain Penetration Testing: Using BloodHound, Crackmapexec, & Mimikatz to get Domain Admin", "person": "Ryan Hausknecht" }, { "url": "https://blog.zsec.uk/path2da-pt3/", "title": "Pass The Hash - Defense/Offense/Fix", "person": "Andy Gill" }, { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://casvancooten.com/posts/2020/05/oscp-cheat-sheet-and-command-reference/", "title": "OSCP Cheat Sheet and Command Reference", "person": "Cas van Cooten" }, { "url": "https://n0t0d4y.medium.com/ecptx-exam-review-by-0xjin-7602232b53d3?source=rss-e520a72e2fdf------2", "title": "eCPTX Exam Review by 0xJin", "person": "0xJin" }, { "url": "https://hausec.com/2019/03/05/penetration-testing-active-directory-part-i/", "title": "Penetration Testing Active Directory, Part I", "person": "Ryan Hausknecht" }, { "url": "https://blog.tw1sm.io/p/2021-02-01-kerberos-conversion", "title": "Experimenting with Kerberos Ticket Formats", "person": "Matt Creel" }, { "url": "https://specterops.io/blog/2026/05/07/shift-happens-uncovering-two-built-in-command-injections-in-windows-context-menus/", "title": "Shift Happens - Uncovering Two Built-in Command Injections in Windows Context Menus", "person": "Remi GASCOU" }, { "url": "https://0xdf.gitlab.io/cheatsheets/smb-enum", "title": "SMB Enumeration Cheatsheet", "person": "0xdf" }, { "url": "https://tokyoneon.github.io/0x12", "title": "Use Reverse Proxies to Nmap Internal Networks | tokyoneon", "person": "tokyoneon" }, { "url": "https://trustedsec.com/blog/working-with-data-in-json-format", "title": "Working with data in JSON format", "person": "Charles Yost" } ], "referencedCount": 11, "id": "48d965d25af1", "score": 94, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 11, "mentionDistinct": 11, "canonical": true, "contributorCount": 81, "contributors": [ { "name": "David Kennedy", "cardId": "52309371b01b64e3", "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4", "login": "Cyb3rC3lt" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "login": "qtc-de" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "login": "swisskyrepo" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" }, { "name": "Gabriel Tremblay", "cardId": "64bdc4dcb493283e", "avatar": "https://avatars.githubusercontent.com/u/755871?v=4", "login": "gabtremblay" }, { "name": "Martin Dubé", "cardId": "f8db5f434b058cc5", "avatar": "https://avatars.githubusercontent.com/u/4238786?v=4", "login": "martindube" }, { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "login": "DanMcInerney" }, { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" }, { "name": "Julien Bedel", "cardId": "75c76ef1107ca8cd", "avatar": "https://avatars.githubusercontent.com/u/30991560?v=4", "login": "d3lb3" } ], "pushedAt": "2023-12-06T17:09:42Z", "archived": true, "topContributors": [ { "login": "mpgn", "c": 752, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "Marshall-Hallenbeck", "c": 640, "avatar": "https://avatars.githubusercontent.com/u/1518719?v=4", "type": "User" }, { "login": "NeffIsBack", "c": 103, "avatar": "https://avatars.githubusercontent.com/u/61382599?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "zblurx", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" }, { "login": "juliourena", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/29603107?v=4", "type": "User" }, { "login": "ILightThings", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/27817827?v=4", "type": "User" }, { "login": "Cyb3rC3lt", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4", "type": "User" }, { "login": "Shad0wC0ntr0ller", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/90877534?v=4", "type": "User" }, { "login": "nurfed1", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/8027846?v=4", "type": "User" }, { "login": "noraj", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "Hackndo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "qtc-de", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" }, { "login": "Dfte", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/23189983?v=4", "type": "User" }, { "login": "Kahvi-0", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/46513413?v=4", "type": "User" }, { "login": "aj-cgtech", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/36624268?v=4", "type": "User" }, { "login": "DaahtKing", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/61582785?v=4", "type": "User" }, { "login": "Serizao", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/11671895?v=4", "type": "User" }, { "login": "chocapicYo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/108938774?v=4", "type": "User" }, { "login": "pgormanDS", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/86318031?v=4", "type": "User" }, { "login": "spyr0-sec", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/78267628?v=4", "type": "User" }, { "login": "snovvcrash", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "r4wd3r", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/14118912?v=4", "type": "User" }, { "login": "p0dalirius", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "termanix", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/50464194?v=4", "type": "User" }, { "login": "probird5", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/52969604?v=4", "type": "User" }, { "login": "bongobongoland", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/129246896?v=4", "type": "User" }, { "login": "Dliv3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13077860?v=4", "type": "User" }, { "login": "awsmhacks", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2059326?v=4", "type": "User" }, { "login": "swisskyrepo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" } ] }, { "repo": "its-a-feature/Mythic", "name": "Mythic", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/Mythic", "stars": 4623, "language": "JavaScript", "description": "A collaborative, multi-platform, red teaming framework", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/holidayhack2019/2", "title": "Holiday Hack 2019: Unredact Threatening Document", "person": "0xdf" }, { "url": "https://specterops.io/blog/2026/06/29/llm-powered-edr-analysis/", "title": "Accelerating EDR Evasion with LLM-Driven Analysis", "person": "Adam Chester" }, { "url": "https://grahamhelton.com/blog/D-Bus-Drifting.html", "title": "D-Bus Drifting For User-Land\nPersistence", "person": "Graham Helton" }, { "url": "https://specterops.io/blog/2026/07/09/finding-socks-with-proxywatch/", "title": "Finding SOCKS with Proxywatch", "person": "Brian Reitz, John Wotton" }, { "url": "https://anubissec.github.io/Automating-Lambda-Serverless-Red-Team-Infrastructure/", "title": "Automating Lambda Serverless Red Team Infrastructure", "person": "Dylan Makowski" }, { "url": "https://www.bunniestudios.com/blog/2013/on-hacking-microsd-cards/", "title": "On Hacking MicroSD Cards « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://specterops.io/blog/2026/06/16/mythic-embarking-on-the-open-seas-containerized-payload-delivery-for-kubernetes-assessments/", "title": "Mythic Embarking on the Open Seas: Containerized Payload Delivery for Kubernetes Assessments", "person": "Alex R. (elrey741)" }, { "url": "https://redteamer.tips/sorry-if-its-hard-to-catch-my-vibe-building-the-dumbest-yet-smartest-c2-in-existence", "title": "Sorry if it's hard to catch my vibe -Building the Dumbest (Yet Smartest?) C2 in Existence", "person": "Jean-François Maes" }, { "url": "https://specterops.io/blog/2026/07/15/there-and-back-again-an-operators-guide-on-ntlm-relaying-egress/", "title": "There and Back Again: An Operators Guide on NTLM Relaying Egress", "person": "Logan Goins" }, { "url": "https://mez0.cc/posts/agentic-c2-ops", "title": "Exploring Agentic C2 Operations", "person": "Brandon McGrath" } ], "referencedCount": 10, "adoptionOperators": 20, "score": 92, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 28, "contributors": [ { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "login": "D00MFist" }, { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "login": "xorrior" }, { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" }, { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "login": "EvanMcBroom" }, { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "login": "matterpreter" } ], "id": "4e51ff1c09f9", "pushedAt": "2026-07-17T20:11:07Z", "archived": false, "topContributors": [ { "login": "its-a-feature", "c": 1617, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 333, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "dependabot[bot]", "c": 31, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "D00MFist", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" }, { "login": "Edznux", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5422152?v=4", "type": "User" }, { "login": "xorrior", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" }, { "login": "ulricvbs", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/54366361?v=4", "type": "User" }, { "login": "djhohnstein", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" }, { "login": "CCob", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "EvanMcBroom", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" }, { "login": "mattreduce", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/66427?v=4", "type": "User" }, { "login": "Kargha", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1193742?v=4", "type": "User" }, { "login": "art-dsit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/153507562?v=4", "type": "User" }, { "login": "reznok", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23696484?v=4", "type": "User" }, { "login": "Iorpim", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22481687?v=4", "type": "User" }, { "login": "MEhrn00", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13649965?v=4", "type": "User" }, { "login": "launchdaemon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7250222?v=4", "type": "User" }, { "login": "nt0xa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3396041?v=4", "type": "User" }, { "login": "anuj-modi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12874774?v=4", "type": "User" }, { "login": "DrorDvash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8413651?v=4", "type": "User" }, { "login": "frankli0324", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20221896?v=4", "type": "User" }, { "login": "pidone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124872432?v=4", "type": "User" }, { "login": "TimBF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47985652?v=4", "type": "User" }, { "login": "matterpreter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" }, { "login": "mmmmcoffee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50842195?v=4", "type": "User" }, { "login": "pangolinsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75450454?v=4", "type": "User" }, { "login": "piolug93", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24991520?v=4", "type": "User" }, { "login": "s1nc3ju1y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25319042?v=4", "type": "User" } ] }, { "repo": "dirkjanm/bloodhound.py", "name": "bloodhound.py", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/BloodHound.py", "stars": 2418, "language": "Python", "description": "A Python based ingestor for BloodHound", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/cheatsheets/uv", "title": "Python Tools and Scripts w/ UV CheatSheet", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2025/07/31/htb-lustroustwo.html", "title": "HTB: LustrousTwo", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2025/03/15/htb-certified.html", "title": "HTB: Certified", "person": "0xdf" }, { "url": "https://blog.zsec.uk/pyldapgui/", "title": "pyLDAPGui - How It was Born", "person": "Andy Gill" }, { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://blog.harmj0y.net/activedirectory/targeted-kerberoasting/", "title": "Targeted Kerberoasting", "person": "Will Schroeder" }, { "url": "https://specterops.io/blog/2026/06/18/bloodhound-mcp-one-year-later-what-i-learned-about-mcps-models-and-context/", "title": "BloodHound MCP, One Year Later: What I Learned About MCPs, Models, and Context", "person": "Matthew Nickerson" }, { "url": "https://specterops.io/blog/2026/03/18/introducing-attack-path-analysis-for-github-in-bloodhound-enterprise/", "title": "Introducing Attack Path Management for GitHub in BloodHound Enterprise", "person": "Jared Atkinson" }, { "url": "https://hausec.com/2019/04/15/bloodhound-and-cypherdog-cheatsheet/", "title": "CypherDog Cheatsheet", "person": "Ryan Hausknecht" }, { "url": "https://specterops.io/blog/2026/04/10/ghostwriter-v6-3-0-and-cli-v1-0-0-new-activity-logging-faster-installs-and-better-writing-qa/", "title": "Ghostwriter v6.3.0 and CLI v1.0.0: New Activity Logging, Faster Installs, and Better Writing QA", "person": "Christopher Maddalena" }, { "url": "https://blog.tw1sm.io/p/hunting-resource-based-constrained", "title": "Hunting Resource-Based Constrained Delegation in Active Directory", "person": "Matt Creel" }, { "url": "https://specterops.io/blog/2026/03/31/jamfhound-v1-1-update-sso-attack-paths-and-okta-additions/", "title": "JamfHound v1.1 Update: SSO Attack Paths and Okta Additions", "person": "Lance B. Cain" } ], "referencedCount": 12, "id": "411abb289dff", "score": 90, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 64, "mentionDistinct": 64, "canonical": true, "contributorCount": 41, "contributors": [ { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "login": "chvancooten" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "login": "itm4n" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" } ], "pushedAt": "2025-10-24T12:11:26Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 253, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "mwgielen", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4816201?v=4", "type": "User" }, { "login": "WilliamBruneau", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9432181?v=4", "type": "User" }, { "login": "vruello", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5345986?v=4", "type": "User" }, { "login": "dadevel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57419228?v=4", "type": "User" }, { "login": "NtAlexio2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/110637492?v=4", "type": "User" }, { "login": "chvancooten", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "MaxToffy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91328785?v=4", "type": "User" }, { "login": "q-roland", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "simondotsh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91923903?v=4", "type": "User" }, { "login": "0x48756773", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11379760?v=4", "type": "User" }, { "login": "5il", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8755278?v=4", "type": "User" }, { "login": "AdrianVollmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26064811?v=4", "type": "User" }, { "login": "NeffIsBack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61382599?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "itm4n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" }, { "login": "Flangvik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" }, { "login": "jasper-vdhoven", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22278716?v=4", "type": "User" }, { "login": "Joytide", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44203266?v=4", "type": "User" }, { "login": "justin-p", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8249280?v=4", "type": "User" }, { "login": "micahvandeusen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11220897?v=4", "type": "User" }, { "login": "nickvourd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32869078?v=4", "type": "User" }, { "login": "pgrimaud", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1866496?v=4", "type": "User" }, { "login": "b1two", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43686727?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "rvazarkar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "p0dalirius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Sq00ky", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44957111?v=4", "type": "User" }, { "login": "richroc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3019070?v=4", "type": "User" } ] }, { "repo": "commercial/brute-ratel-c4", "id": "8be1fe88422e", "name": "Brute Ratel C4", "owner": "Dark Vortex (Chetan Nayak)", "url": "https://bruteratel.com", "commercial": true, "vendor": "Dark Vortex (Chetan Nayak)", "stars": null, "language": null, "description": "Commercial C2 and adversary-emulation framework centered on the Badger implant, engineered for evasion against modern EDR/AV. Native BOF execution, in-memory operations, and OPSEC-focused primitives.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Dark Vortex (Chetan Nayak)", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 90, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": true, "canonicalArsenal": true, "commercial": true } }, { "repo": "byt3bl33d3r/SILENTTRINITY", "name": "SILENTTRINITY", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/SILENTTRINITY", "stars": 2342, "language": "Boo", "description": "An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [ { "url": "https://hausec.com/2019/03/05/penetration-testing-active-directory-part-i/", "title": "Penetration Testing Active Directory, Part I", "person": "Ryan Hausknecht" } ], "referencedCount": 1, "adoptionOperators": 1, "score": 88, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 12, "contributors": [ { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" } ], "id": "fa1eb9d2c4be", "pushedAt": "2023-12-06T17:17:24Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 164, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "Daudau", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/4716154?v=4", "type": "User" }, { "login": "davidtavarez", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/337107?v=4", "type": "User" }, { "login": "devinmadewell", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4680207?v=4", "type": "User" }, { "login": "hackabean", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/50614334?v=4", "type": "User" }, { "login": "daddycocoaman", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" }, { "login": "GimmeTheCoPilot", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/169035312?v=4", "type": "User" }, { "login": "catwave", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/23383682?v=4", "type": "User" }, { "login": "RemiEscourrou", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22934796?v=4", "type": "User" }, { "login": "TheWover", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17090738?v=4", "type": "User" }, { "login": "Tinydile", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15231831?v=4", "type": "User" }, { "login": "phra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" } ] }, { "repo": "cobbr/covenant", "name": "covenant", "owner": "cobbr", "url": "https://github.com/cobbr/Covenant", "stars": 4712, "language": "C#", "description": "Covenant is a collaborative .NET C2 framework for red teamers.", "type": "tool", "lanes": [ "2", "curated" ], "author": { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/path2da-pt3/", "title": "Pass The Hash - Defense/Offense/Fix", "person": "Andy Gill" }, { "url": "https://rastamouse.me/infrastructure-as-code-terraform-ansible/", "title": "Infrastructure as Code (Terraform + Ansible)", "person": "Rasta Mouse" }, { "url": "https://chndlrx.com/posts/named-numbered-and-covenanted/", "title": "Named, Numbered, and Covenanted With", "person": "Chandler Johnson" }, { "url": "https://0xdf.gitlab.io/2019/04/10/commando-vm-overview.html", "title": "Commando VM: Looking Around", "person": "0xdf" }, { "url": "https://casvancooten.com/posts/2021/07/operate-like-you-mean-it-red-team-ops-crto-course-review/", "title": "Operate Like You Mean It: 'Red Team Ops' (CRTO) Course Review", "person": "Cas van Cooten" }, { "url": "https://s3cur3th1ssh1t.github.io/Covenant_Stageless_HTTP/", "title": "Stageless HTTP in Covenant", "person": "Fabian Mosch" } ], "referencedCount": 6, "id": "a61a1ee7ff5f", "score": 87, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 6, "mentionDistinct": 6, "canonical": true, "contributorCount": 13, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "pushedAt": "2024-07-18T17:25:35Z", "archived": false, "topContributors": [ { "login": "cobbr", "c": 305, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "mrjamiebowman", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/1640591?v=4", "type": "User" }, { "login": "fasetto", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/20834021?v=4", "type": "User" }, { "login": "3lpsy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8757851?v=4", "type": "User" }, { "login": "panagioto", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2184401?v=4", "type": "User" }, { "login": "3xpl01tc0d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33144026?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "bashexplode", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28577645?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "chopicalqui", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39760194?v=4", "type": "User" }, { "login": "kltdwd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4188978?v=4", "type": "User" }, { "login": "shellfarmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34570551?v=4", "type": "User" } ] }, { "repo": "commercial/nighthawk", "id": "663132ead2b8", "name": "Nighthawk", "owner": "MDSec", "url": "https://www.mdsec.co.uk/nighthawk/", "commercial": true, "vendor": "MDSec", "stars": null, "language": null, "description": "Commercial red-team C2 and implant built for advanced evasion and operational security, with flexible C2 channels and a strong focus on defeating detection. Supports BOFs.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "MDSec", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 87, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": true, "canonicalArsenal": true, "commercial": true } }, { "repo": "dirkjanm/roadtools", "name": "roadtools", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/ROADtools", "stars": 2671, "language": "Python", "description": "A collection of Azure AD/Entra tools for offensive and defensive security purposes", "type": "tool", "lanes": [ "2", "curated" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/persisting-with-federated-credentials-entra-apps-managed-identities/", "title": "Persisting on Entra ID applications and User Managed Identities with Federated Credentials", "person": "Dirk-jan Mollema" }, { "url": "https://sapirxfed.com/2024/07/09/just-me-trying-to-understand-every-field-of-jwt/", "title": "Just me trying to understand EVERY claim of JWT", "person": "Sapir Federovsky" }, { "url": "https://blacksnufkin.github.io/posts/opsec-offensive-code-review/", "title": "OPSEC: Read the Code Before It Burns Your Op", "person": "BlackSnufkin" }, { "url": "https://blog.tw1sm.io/p/an-operators-guide-to-device-joined", "title": "An Operator’s Guide to Device-Joined Hosts and the PRT Cookie", "person": "Matt Creel" }, { "url": "https://specterops.io/blog/2026/06/01/cve-2026-4387-strongdm-state-file-reuse/", "title": "CVE-2026-4387: StrongDM State File Reuse", "person": "Hope Walker" }, { "url": "https://specterops.io/blog/2026/02/17/stop-the-cap-making-entra-id-conditional-access-make-sense-offline/", "title": "STOP THE CAP: Making Entra ID Conditional Access Make Sense Offline", "person": "Lee Robinson" } ], "referencedCount": 6, "id": "e94dda3a9c5b", "score": 84, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 5, "mentionDistinct": 5, "canonical": true, "contributorCount": 34, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" }, { "name": "Kai Huang", "cardId": "bfccd516f1bc4cfc", "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4", "login": "kiwids0220" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" } ], "pushedAt": "2026-05-21T20:54:37Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 455, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "andreas-shelltrail", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/230317431?v=4", "type": "User" }, { "login": "rikvanduijn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7839269?v=4", "type": "User" }, { "login": "hugo-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "lootem", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/147092917?v=4", "type": "User" }, { "login": "damiengermonville", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4136736?v=4", "type": "User" }, { "login": "yuunaka1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12198335?v=4", "type": "User" }, { "login": "six2dez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "n3rada", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "maxbeckmann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37029778?v=4", "type": "User" }, { "login": "kiwids0220", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4", "type": "User" }, { "login": "dozernz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6723850?v=4", "type": "User" }, { "login": "compass-dexter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/145257008?v=4", "type": "User" }, { "login": "taufderl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1773401?v=4", "type": "User" }, { "login": "NotMedic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17074002?v=4", "type": "User" }, { "login": "TwistedSim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12924452?v=4", "type": "User" }, { "login": "pwnfoo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9546091?v=4", "type": "User" }, { "login": "rcobb-scwx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39737036?v=4", "type": "User" }, { "login": "rgmz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32133502?v=4", "type": "User" }, { "login": "p0dalirius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Palciny", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15854440?v=4", "type": "User" }, { "login": "byinarie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20119926?v=4", "type": "User" }, { "login": "mwgielen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4816201?v=4", "type": "User" }, { "login": "Paradoxis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6770124?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "so-lcain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/139277715?v=4", "type": "User" }, { "login": "Mauriceter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85106280?v=4", "type": "User" }, { "login": "BakkerJan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38911727?v=4", "type": "User" }, { "login": "c0fine", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67066904?v=4", "type": "User" }, { "login": "Anthirian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704388?v=4", "type": "User" } ] }, { "repo": "chvancooten/nimplant", "name": "nimplant", "owner": "chvancooten", "url": "https://github.com/chvancooten/NimPlant", "stars": 951, "language": "Rust", "description": "A light-weight first-stage C2 implant written in Nim (and Rust).", "type": "tool", "lanes": [ "2", "curated" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [ { "url": "https://casvancooten.com/posts/2021/08/building-a-c2-implant-in-nim-considerations-and-lessons-learned/", "title": "Building a C2 Implant in Nim - Considerations and Lessons Learned", "person": "Cas van Cooten" } ], "referencedCount": 1, "id": "425592f79949", "score": 84, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "canonical": true, "contributorCount": 3, "contributors": [], "pushedAt": "2026-03-02T10:59:25Z", "archived": false, "topContributors": [ { "login": "chvancooten", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "yamakadi", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/25483877?v=4", "type": "User" }, { "login": "notb9", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12910494?v=4", "type": "User" } ] }, { "repo": "commercial/outflank-security-tooling-ost", "id": "49c0d54c4eda", "name": "Outflank Security Tooling (OST)", "owner": "Outflank / Fortra", "url": "https://www.outflank.nl/products/outflank-security-tooling/", "commercial": true, "vendor": "Outflank / Fortra", "stars": null, "language": null, "description": "Commercial red-team toolkit that includes a C2 built to run existing BOFs without modification (and Async BOFs), alongside payload generation, evasion, and social-engineering tooling maintained by the Outflank research team.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Outflank / Fortra", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 84, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": true, "canonicalArsenal": true, "commercial": true } }, { "repo": "gentilkiwi/mimikatz", "name": "mimikatz", "owner": "gentilkiwi", "url": "https://github.com/gentilkiwi/mimikatz", "stars": 21717, "language": "C", "description": "A little tool to play with Windows security", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "🥝🏳️‍🌈 Benjamin Delpy", "cardId": "f3e89338be6de6f6", "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4" }, "referencedBy": [ { "url": "https://viralmaniar.github.io/internal%20pentest/internal%20infrastructure%20pentest/network%20pentest/mimikatz/", "title": "Internal Infrastructure Pentest - Mimikatz", "person": "Viral Maniar" }, { "url": "https://www.andrea-allievi.com/blog/the-next-gen-os-windows-10/", "title": "The next gen OS – Windows 10", "person": "Andrea Allievi" }, { "url": "https://blog.zsec.uk/path2da-pt3/", "title": "Pass The Hash - Defense/Offense/Fix", "person": "Andy Gill" }, { "url": "https://blog.harmj0y.net/redteaming/the-trustpocalypse/", "title": "The Trustpocalypse", "person": "Will Schroeder" }, { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://www.tiraniddo.dev/2017/10/bypassing-sacl-auditing-on-lsass.html", "title": "Bypassing SACL Auditing on LSASS", "person": "James Forshaw" }, { "url": "https://decoder.cloud/2018/03/18/unexpected-windows-privilege-escalations/", "title": "“Unexpected” Windows Privilege Escalations", "person": "Andrea Pierini" }, { "url": "https://klezvirus.github.io/posts/AV-Evasion-CodeExecNewDotnet/", "title": "The path to code execution in the era of EDR, Next-Gen AVs, and AMSI", "person": "klez" }, { "url": "https://hausec.com/2021/07/26/cobalt-strike-and-tradecraft/", "title": "Cobalt Strike and Tradecraft", "person": "Ryan Hausknecht" }, { "url": "https://itm4n.github.io/lsass-runasppl/", "title": "Do You Really Know About LSA Protection (RunAsPPL)?", "person": "Clément Labro" }, { "url": "https://n0t0d4y.medium.com/ecptx-exam-review-by-0xjin-7602232b53d3?source=rss-e520a72e2fdf------2", "title": "eCPTX Exam Review by 0xJin", "person": "0xJin" } ], "referencedCount": 11, "id": "3c3acc52e1c1", "score": 82, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 1, "adoptionOperators": 35, "mentionDistinct": 35, "canonical": true, "contributorCount": 11, "contributors": [ { "name": "Timo Hirvonen", "cardId": "03979c35946d1278", "avatar": "https://avatars.githubusercontent.com/u/8151967?v=4", "login": "timhir" } ], "pushedAt": "2026-04-17T17:48:27Z", "archived": false, "topContributors": [ { "login": "gentilkiwi", "c": 334, "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4", "type": "User" }, { "login": "hubert3", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/947995?v=4", "type": "User" }, { "login": "tanrikuluatahan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/76054863?v=4", "type": "User" }, { "login": "vletoux", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10632326?v=4", "type": "User" }, { "login": "chunhualiu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9837460?v=4", "type": "User" }, { "login": "matrix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15381185?v=4", "type": "User" }, { "login": "timhir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8151967?v=4", "type": "User" }, { "login": "zhangyoufu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1315097?v=4", "type": "User" }, { "login": "adervis3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18114252?v=4", "type": "User" }, { "login": "SLiNv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6207334?v=4", "type": "User" }, { "login": "brandoncasaba", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9833019?v=4", "type": "User" } ] }, { "repo": "BC-SECURITY/Empire", "name": "Empire", "owner": "BC-SECURITY", "url": "https://github.com/BC-SECURITY/Empire", "stars": 5221, "language": "PowerShell", "description": "Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "BC Security", "cardId": "08127f1b8fd194e3", "avatar": "https://avatars.githubusercontent.com/u/53022351?v=4" }, "referencedBy": [ { "url": "https://h0mbre.github.io/Lucid_Dreams_1/", "title": "Lucid Dreams I: Lucid’s First Time Fuzzing", "person": "h0mbre" }, { "url": "https://blog.harmj0y.net/redteaming/ghostpack/", "title": "GhostPack", "person": "Will Schroeder" }, { "url": "https://www.bunniestudios.com/blog/2013/the-12-gongkai-phone/", "title": "The $12 Gongkai Phone « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://reverse.put.as/2015/05/29/the-empire-strikes-back-apple-how-your-mac-firmware-security-is-completely-broken/", "title": "The Empire Strikes Back Apple – how your Mac firmware security is completely broken", "person": "Pedro Vilaça" }, { "url": "https://oddvar.moe/2017/12/13/applocker-case-study-how-insecure-is-it-really-part-1/", "title": "AppLocker – Case study – How insecure is it really? – Part 1", "person": "Oddvar Moe" }, { "url": "https://blog.zsec.uk/ltr101-windowsterm/", "title": "LtR101: Windows Terminals", "person": "Andy Gill" }, { "url": "https://n0t0d4y.medium.com/ecptx-exam-review-by-0xjin-7602232b53d3?source=rss-e520a72e2fdf------2", "title": "eCPTX Exam Review by 0xJin", "person": "0xJin" }, { "url": "https://decoder.cloud/2017/01/26/dirty-tricks-with-powershell/", "title": "Dirty tricks with Powershell", "person": "Andrea Pierini" }, { "url": "https://objective-see.org/blog/blog_0x0F.html", "title": "Objective-See", "person": "Patrick Wardle" }, { "url": "https://0xdf.gitlab.io/holidayhack2024/prologue/connect", "title": "Holiday Hack 2024: Elf Connect", "person": "0xdf" } ], "referencedCount": 10, "adoptionOperators": 36, "score": 82, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 100, "contributors": [ { "name": "Anthony Rose", "cardId": "cc257982279cd05b", "avatar": "https://avatars.githubusercontent.com/u/20302208?v=4", "login": "Cx01N" }, { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "login": "xorrior" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" }, { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "login": "cobbr" }, { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "login": "enigma0x3" }, { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "login": "infosecn1nja" }, { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "login": "Kevin-Robertson" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "login": "matterpreter" }, { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "login": "jfmaes" }, { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4", "login": "curi0usJack" }, { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "login": "DanMcInerney" }, { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" }, { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" }, { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "id": "360e786740d2", "pushedAt": "2026-07-12T19:01:44Z", "archived": false, "topContributors": [ { "login": "Cx01N", "c": 896, "avatar": "https://avatars.githubusercontent.com/u/20302208?v=4", "type": "User" }, { "login": "vinnybod", "c": 884, "avatar": "https://avatars.githubusercontent.com/u/9831420?v=4", "type": "User" }, { "login": "xorrior", "c": 533, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 249, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "web-flow", "c": 114, "avatar": "https://avatars.githubusercontent.com/u/19864447?v=4", "type": "User" }, { "login": "Hubbl3", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/42596432?v=4", "type": "User" }, { "login": "ceramicskate0", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/6934294?v=4", "type": "User" }, { "login": "mr64bit", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/2191440?v=4", "type": "User" }, { "login": "cobbr", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "enigma0x3", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "type": "User" }, { "login": "stufus", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/12296344?v=4", "type": "User" }, { "login": "import-au", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/30837560?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 31, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "etn-security", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/149513427?v=4", "type": "User" }, { "login": "killswitch-GUI", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/8761706?v=4", "type": "User" }, { "login": "infosecn1nja", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" }, { "login": "DakotaNelson", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/6242741?v=4", "type": "User" }, { "login": "n00py", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/14309124?v=4", "type": "User" }, { "login": "leesoh", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1276654?v=4", "type": "User" }, { "login": "ThePirateWhoSmellsOfSunflowers", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/18633286?v=4", "type": "User" }, { "login": "ihamburglar", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5925087?v=4", "type": "User" }, { "login": "dchrastil", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26440487?v=4", "type": "User" }, { "login": "michael-bey", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1136610?v=4", "type": "User" }, { "login": "Kevin-Robertson", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "jamcut", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3229709?v=4", "type": "User" }, { "login": "lavafroth", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/107522312?v=4", "type": "User" }, { "login": "jarrodcoulter", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7229351?v=4", "type": "User" }, { "login": "johneiser", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/11484302?v=4", "type": "User" }, { "login": "PierrickV", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8960084?v=4", "type": "User" } ] }, { "repo": "rebootuser/linenum", "name": "linenum", "owner": "rebootuser", "url": "https://github.com/rebootuser/LinEnum", "stars": 7975, "language": "Shell", "description": "Scripted Local Linux Enumeration & Privilege Escalation Checks", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Owen Shearing", "cardId": "0156f6c19966012a", "avatar": "https://avatars.githubusercontent.com/u/5245685?v=4" }, "referencedBy": [ { "url": "https://hausec.com/pentesting-cheatsheet/", "title": "Pentesting Cheatsheet", "person": "Ryan Hausknecht" }, { "url": "https://casvancooten.com/posts/2020/05/oscp-cheat-sheet-and-command-reference/", "title": "OSCP Cheat Sheet and Command Reference", "person": "Cas van Cooten" }, { "url": "https://n0.lol/miraiexotic/", "title": "Exotic Mirai Targets", "person": "netspooky" }, { "url": "https://specterops.io/blog/2026/06/08/keeping-a-short-leash-new-azurehound-least-privilege-documentation/", "title": "Keeping a Short Leash: New AzureHound Least-Privilege Documentation", "person": "Martin Sohn Christensen" }, { "url": "https://in.security/2018/08/20/lin-security-walkthrough/", "title": "Lin.security – walkthrough - In.security", "person": "Owen Shearing" } ], "referencedCount": 5, "id": "a29affcae334", "score": 82, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 5, "canonical": true, "contributorCount": 15, "contributors": [ { "name": "Anant Shrivastava", "cardId": "e3f7c3ceed1b9c92", "avatar": "https://avatars.githubusercontent.com/u/236843?v=4", "login": "anantshri" } ], "pushedAt": "2023-09-06T18:02:29Z", "archived": false, "topContributors": [ { "login": "rebootuser", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/5245685?v=4", "type": "User" }, { "login": "Anon-Exploiter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18597330?v=4", "type": "User" }, { "login": "richardcurteis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6715506?v=4", "type": "User" }, { "login": "anantshri", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/236843?v=4", "type": "User" }, { "login": "d78ui98", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27950739?v=4", "type": "User" }, { "login": "Disassembler0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5568046?v=4", "type": "User" }, { "login": "erikgeiser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14264874?v=4", "type": "User" }, { "login": "Hypnoze57", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25591433?v=4", "type": "User" }, { "login": "Jonnycake", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3747493?v=4", "type": "User" }, { "login": "Jrhenderson11", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16228548?v=4", "type": "User" }, { "login": "stealthcopter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1211162?v=4", "type": "User" }, { "login": "theninj4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3055120?v=4", "type": "User" }, { "login": "SaeedHashem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21090640?v=4", "type": "User" }, { "login": "insecurityltd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38198228?v=4", "type": "User" }, { "login": "kishore-hariram", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36239971?v=4", "type": "User" } ] }, { "repo": "commercial/core-impact", "id": "4a40bedcceed", "name": "Core Impact", "owner": "Fortra", "url": "https://www.coreimpact.com", "commercial": true, "vendor": "Fortra", "stars": null, "language": null, "description": "Commercial penetration-testing platform with a large validated exploit library, automated multi-stage attacks, pivoting, and agent-based post-exploitation. Supports loading COFF/BOF modules.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Fortra", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 80, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": true, "commercial": true } }, { "repo": "BishopFox/sliver", "name": "sliver", "owner": "BishopFox", "url": "https://github.com/BishopFox/sliver", "stars": 11531, "language": "Go", "description": "Adversary Emulation Framework", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "BishopFox", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/4523757?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/holidayhack2024/act-iii/frostbit", "title": "Holiday Hack 2024: Frostbit Malware", "person": "0xdf" }, { "url": "https://www.bunniestudios.com/blog/2021/fixing-a-tiny-corner-of-the-supply-chain/", "title": "Fixing a Tiny Corner of the Supply Chain « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://kattraxler.cloud/rethinking-your-threatmodels/", "title": "Rethinking Your Threat Models for the Cloud", "person": "Kat Traxler" }, { "url": "https://specterops.io/blog/2026/07/09/finding-socks-with-proxywatch/", "title": "Finding SOCKS with Proxywatch", "person": "Brian Reitz, John Wotton" }, { "url": "https://anubissec.github.io/Automating-Lambda-Serverless-Red-Team-Infrastructure/", "title": "Automating Lambda Serverless Red Team Infrastructure", "person": "Dylan Makowski" }, { "url": "https://objective-see.org/blog/blog_0x71.html", "title": "The Mac Malware of 2022 👾", "person": "Patrick Wardle" }, { "url": "https://trustedsec.com/blog/introducing-the-shelf", "title": "Introducing The Shelf", "person": "Christopher Paschen" }, { "url": "https://trustedsec.com/blog/situational-awareness-bofs-for-script-kiddies", "title": "Situational Awareness BOFs for Script Kiddies", "person": "TrustedSec" } ], "referencedCount": 8, "adoptionOperators": 8, "score": 78, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 100, "contributors": [ { "name": "David Tomaschik", "cardId": "5709420abaa7a297", "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "login": "Matir" }, { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" }, { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" }, { "name": "Max Andreacchi", "cardId": "bccc5122014e16e0", "avatar": "https://avatars.githubusercontent.com/u/84281259?v=4", "login": "atomicchonk" } ], "id": "d07188c4cc0b", "pushedAt": "2026-07-17T22:18:04Z", "archived": false, "topContributors": [ { "login": "moloch--", "c": 2746, "avatar": "https://avatars.githubusercontent.com/u/875022?v=4", "type": "User" }, { "login": "rkervella", "c": 1152, "avatar": "https://avatars.githubusercontent.com/u/44028017?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 256, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "TimBF", "c": 198, "avatar": "https://avatars.githubusercontent.com/u/47985652?v=4", "type": "User" }, { "login": "RafBishopFox", "c": 133, "avatar": "https://avatars.githubusercontent.com/u/84349012?v=4", "type": "User" }, { "login": "rwincey", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/5438659?v=4", "type": "User" }, { "login": "lesnuages", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/1799430?v=4", "type": "User" }, { "login": "jamesgol", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/6788517?v=4", "type": "User" }, { "login": "maxlandon", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/25826036?v=4", "type": "User" }, { "login": "Matir", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "type": "User" }, { "login": "mrThe", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/1254163?v=4", "type": "User" }, { "login": "skoveit", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/110070707?v=4", "type": "User" }, { "login": "c2biz", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/94481756?v=4", "type": "User" }, { "login": "C-Sto", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/7466346?v=4", "type": "User" }, { "login": "MrAle98", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/74059030?v=4", "type": "User" }, { "login": "usiegl00", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/50933431?v=4", "type": "User" }, { "login": "h4ng3r", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2039733?v=4", "type": "User" }, { "login": "audibleblink", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/4605783?v=4", "type": "User" }, { "login": "dzflack", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/11132774?v=4", "type": "User" }, { "login": "cha0tic87", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/26422015?v=4", "type": "User" }, { "login": "hypnoticpattern", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/45320229?v=4", "type": "User" }, { "login": "kmathisbf", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/82833266?v=4", "type": "User" }, { "login": "carterburn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/899382?v=4", "type": "User" }, { "login": "MKMithun2806", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/173469207?v=4", "type": "User" }, { "login": "jjensn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5910157?v=4", "type": "User" }, { "login": "guervild", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/11190755?v=4", "type": "User" }, { "login": "cmprmsd", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/73472903?v=4", "type": "User" }, { "login": "ActualTrash", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/31072505?v=4", "type": "User" }, { "login": "Eriner", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6919167?v=4", "type": "User" }, { "login": "kyleavery", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "commercial/metasploit-pro", "id": "93818e19e607", "name": "Metasploit Pro", "owner": "Rapid7", "url": "https://www.rapid7.com/products/metasploit/", "commercial": true, "vendor": "Rapid7", "stars": null, "language": null, "description": "The commercial edition of Metasploit, layering automated exploitation, phishing / social-engineering campaigns, credential reuse, task chains, reporting, and team collaboration on top of the open-source Framework and Meterpreter.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Rapid7", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 78, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": true, "commercial": true } }, { "repo": "commercial/immunity-canvas", "id": "88e20cad084a", "name": "Immunity CANVAS", "owner": "Immunity Inc.", "url": "https://www.immunityinc.com/products/canvas/", "commercial": true, "vendor": "Immunity Inc.", "stars": null, "language": null, "description": "Commercial exploitation framework with hundreds of exploits, a fully scriptable Python engine, and the MOSDEF post-exploitation agent for reliable, cross-platform payload execution.", "type": "tool", "pushedAt": null, "archived": false, "lanes": [ "commercial" ], "canonical": true, "author": { "name": "Immunity Inc.", "cardId": null, "avatar": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 76, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": true, "commercial": true } }, { "repo": "samratashok/nishang", "name": "nishang", "owner": "samratashok", "url": "https://github.com/samratashok/nishang", "stars": 10003, "language": "PowerShell", "description": "Nishang - Offensive PowerShell for red team, penetration testing and offensive security. ", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Nikhil \"SamratAshok\" Mittal", "cardId": "9650ca02c5588a07", "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2018/03/18/unexpected-windows-privilege-escalations/", "title": "“Unexpected” Windows Privilege Escalations", "person": "Andrea Pierini" }, { "url": "https://0xdf.gitlab.io/2019/03/02/htb-access.html", "title": "HTB: Access", "person": "0xdf" }, { "url": "https://decoder.cloud/2017/01/26/dirty-tricks-with-powershell/", "title": "Dirty tricks with Powershell", "person": "Andrea Pierini" }, { "url": "https://0xdf.gitlab.io/2019/03/05/htb-devel.html", "title": "HTB: Devel", "person": "0xdf" }, { "url": "https://decoder.cloud/2017/02/03/bypassing-uac-from-a-remote-powershell-and-escalting-to-system/", "title": "Bypassing UAC from a remote powershell and escalating to “SYSTEM”", "person": "Andrea Pierini" }, { "url": "https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/", "title": "Windows & Active Directory Exploitation Cheat Sheet and Command Reference", "person": "Cas van Cooten" }, { "url": "https://0xdf.gitlab.io/2019/04/15/commando-vm-lessons.html", "title": "Commando VM: Lessons Learned", "person": "0xdf" }, { "url": "https://www.willsroot.io/2019/06/exploiting-java-deserialization.html", "title": "Exploiting Java DeSerialization", "person": "willsroot" }, { "url": "https://oddvar.moe/2017/05/30/ping-is-okay-right/", "title": "Ping is okay? – Right?", "person": "Oddvar Moe" }, { "url": "https://tokyoneon.github.io/0x10", "title": "Bypass VirusTotal & AMSI Detection Signatures with Chimera | tokyoneon", "person": "tokyoneon" } ], "referencedCount": 10, "id": "111682276e10", "score": 73, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 5, "mentionDistinct": 5, "canonical": true, "contributorCount": 11, "contributors": [ { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" }, { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "login": "antonioCoco" } ], "pushedAt": "2024-04-25T19:39:44Z", "archived": false, "topContributors": [ { "login": "samratashok", "c": 312, "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4", "type": "User" }, { "login": "sammbertram", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5989847?v=4", "type": "User" }, { "login": "Dliv3", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13077860?v=4", "type": "User" }, { "login": "zer1t0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17518559?v=4", "type": "User" }, { "login": "firefart", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "mrtnrdl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1167062?v=4", "type": "User" }, { "login": "addenial", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4261203?v=4", "type": "User" }, { "login": "bryant1410", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3905501?v=4", "type": "User" }, { "login": "antonioCoco", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "lukeasec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25990951?v=4", "type": "User" }, { "login": "redfast00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10746993?v=4", "type": "User" } ] }, { "repo": "dirkjanm/mitm6", "name": "mitm6", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/mitm6", "stars": 1913, "language": "Python", "description": "pwning IPv4 via IPv6", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/", "title": "Relaying Kerberos over DNS using krbrelayx and mitm6", "person": "Dirk-jan Mollema" } ], "referencedCount": 1, "id": "0398b22c1f54", "score": 72, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 3, "canonical": true, "contributorCount": 5, "contributors": [], "pushedAt": "2024-02-20T16:11:53Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "ThePirateWhoSmellsOfSunflowers", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18633286?v=4", "type": "User" }, { "login": "deadjakk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30613497?v=4", "type": "User" }, { "login": "laxa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" } ] }, { "repo": "p0dalirius/Coercer", "name": "Coercer", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Coercer", "stars": 2293, "language": "Python", "description": "A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 72, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 16, "contributors": [], "id": "d1ae75303315", "pushedAt": "2026-04-24T08:03:18Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "XiaoliChan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/30458572?v=4", "type": "User" }, { "login": "AdrianVollmer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26064811?v=4", "type": "User" }, { "login": "p0rtL6", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/80869244?v=4", "type": "User" }, { "login": "exploide", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "jenaye", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15458329?v=4", "type": "User" }, { "login": "radman404", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7841214?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "compass-dexter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/145257008?v=4", "type": "User" }, { "login": "n3rada", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "opendev0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2190141?v=4", "type": "User" }, { "login": "r74tech", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57354947?v=4", "type": "User" }, { "login": "s0i37", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22872513?v=4", "type": "User" }, { "login": "shoxxdj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5250807?v=4", "type": "User" }, { "login": "zblurx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" } ] }, { "repo": "SpecterOps/BloodHound", "name": "BloodHound", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/BloodHound", "stars": 3225, "language": "Go", "description": "Six Degrees of Domain Admin", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/pyldapgui/", "title": "pyLDAPGui - How It was Born", "person": "Andy Gill" }, { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://blog.harmj0y.net/activedirectory/targeted-kerberoasting/", "title": "Targeted Kerberoasting", "person": "Will Schroeder" }, { "url": "https://specterops.io/blog/2026/06/18/bloodhound-mcp-one-year-later-what-i-learned-about-mcps-models-and-context/", "title": "BloodHound MCP, One Year Later: What I Learned About MCPs, Models, and Context", "person": "Matthew Nickerson" }, { "url": "https://specterops.io/blog/2026/03/18/introducing-attack-path-analysis-for-github-in-bloodhound-enterprise/", "title": "Introducing Attack Path Management for GitHub in BloodHound Enterprise", "person": "Jared Atkinson" }, { "url": "https://hausec.com/2019/04/15/bloodhound-and-cypherdog-cheatsheet/", "title": "CypherDog Cheatsheet", "person": "Ryan Hausknecht" }, { "url": "https://specterops.io/blog/2026/04/10/ghostwriter-v6-3-0-and-cli-v1-0-0-new-activity-logging-faster-installs-and-better-writing-qa/", "title": "Ghostwriter v6.3.0 and CLI v1.0.0: New Activity Logging, Faster Installs, and Better Writing QA", "person": "Christopher Maddalena" }, { "url": "https://0xdf.gitlab.io/cheatsheets/uv", "title": "Python Tools and Scripts w/ UV CheatSheet", "person": "0xdf" }, { "url": "https://blog.tw1sm.io/p/hunting-resource-based-constrained", "title": "Hunting Resource-Based Constrained Delegation in Active Directory", "person": "Matt Creel" }, { "url": "https://specterops.io/blog/2026/03/31/jamfhound-v1-1-update-sso-attack-paths-and-okta-additions/", "title": "JamfHound v1.1 Update: SSO Attack Paths and Okta Additions", "person": "Lance B. Cain" } ], "referencedCount": 10, "adoptionOperators": 65, "score": 67, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 92, "contributors": [ { "name": "John Hopper", "cardId": "61109955c224a1c5", "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "login": "zinic" }, { "name": "Brandon Shearin", "cardId": "282211dc896b5cda", "avatar": "https://avatars.githubusercontent.com/u/23143242?v=4", "login": "brandonshearin" }, { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" }, { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "login": "martinsohn" }, { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" }, { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "login": "chrismaddalena" } ], "id": "d42ede7e155b", "pushedAt": "2026-07-18T01:49:07Z", "archived": false, "topContributors": [ { "login": "mistahj67", "c": 194, "avatar": "https://avatars.githubusercontent.com/u/26472282?v=4", "type": "User" }, { "login": "specter-flq", "c": 171, "avatar": "https://avatars.githubusercontent.com/u/174142109?v=4", "type": "User" }, { "login": "sirisjo", "c": 138, "avatar": "https://avatars.githubusercontent.com/u/27371613?v=4", "type": "User" }, { "login": "superlinkx", "c": 135, "avatar": "https://avatars.githubusercontent.com/u/466326?v=4", "type": "User" }, { "login": "urangel", "c": 134, "avatar": "https://avatars.githubusercontent.com/u/16910931?v=4", "type": "User" }, { "login": "zinic", "c": 103, "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "type": "User" }, { "login": "ykaiboussiSO", "c": 102, "avatar": "https://avatars.githubusercontent.com/u/182781928?v=4", "type": "User" }, { "login": "Holocraft", "c": 98, "avatar": "https://avatars.githubusercontent.com/u/4176725?v=4", "type": "User" }, { "login": "dcairnsspecterops", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/206783973?v=4", "type": "User" }, { "login": "maffkipp", "c": 88, "avatar": "https://avatars.githubusercontent.com/u/16313351?v=4", "type": "User" }, { "login": "benwaples", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/66393111?v=4", "type": "User" }, { "login": "StephenHinck", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/12970156?v=4", "type": "User" }, { "login": "jvacca-specterops", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/208869601?v=4", "type": "User" }, { "login": "wes-mil", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/169498386?v=4", "type": "User" }, { "login": "mvlipka", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/2319609?v=4", "type": "User" }, { "login": "elikmiller", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/1761629?v=4", "type": "User" }, { "login": "rvazarkar", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "TheNando", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/6663710?v=4", "type": "User" }, { "login": "brandonshearin", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/23143242?v=4", "type": "User" }, { "login": "JonasBK", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "irshadaj", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/24904109?v=4", "type": "User" }, { "login": "LawsonWillard", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/46655228?v=4", "type": "User" }, { "login": "AD7ZJ", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/1594845?v=4", "type": "User" }, { "login": "ALCooper12", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/60487920?v=4", "type": "User" }, { "login": "KillahDillah", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/29666170?v=4", "type": "User" }, { "login": "sircodemane", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/6968902?v=4", "type": "User" }, { "login": "ddlees", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/8984872?v=4", "type": "User" }, { "login": "kpowderly", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/203709350?v=4", "type": "User" }, { "login": "LucasParraF", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/207884690?v=4", "type": "User" }, { "login": "stephanieslamb", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/173102465?v=4", "type": "User" } ] }, { "repo": "powershellmafia/powersploit", "name": "powersploit", "owner": "powershellmafia", "url": "https://github.com/PowerShellMafia/PowerSploit", "stars": 13076, "language": "PowerShell", "description": "PowerSploit - A PowerShell Post-Exploitation Framework", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "powershellmafia", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2021/11/06/htb-pivotapi.html", "title": "HTB: PivotAPI", "person": "0xdf" }, { "url": "https://decoder.cloud/2018/03/18/unexpected-windows-privilege-escalations/", "title": "“Unexpected” Windows Privilege Escalations", "person": "Andrea Pierini" }, { "url": "https://hausec.com/2018/10/08/active-directory-assessment-and-privilege-escalation-script/", "title": "Active Directory Assessment and Privilege Escalation Script 2.0", "person": "Ryan Hausknecht" }, { "url": "https://viralmaniar.github.io/internal%20pentest/internal%20infrastructure%20pentest/network%20pentest/Interesting-Repos-for-Internal-Pentest/", "title": "Internal Infrastructure Pentest - Repos For Internal Pentest", "person": "Viral Maniar" }, { "url": "https://blog.zsec.uk/path2da-pt3/", "title": "Pass The Hash - Defense/Offense/Fix", "person": "Andy Gill" }, { "url": "https://blog.harmj0y.net/powershell/gpp-and-powerview/", "title": "GPP and PowerView", "person": "Will Schroeder" }, { "url": "https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/", "title": "Windows & Active Directory Exploitation Cheat Sheet and Command Reference", "person": "Cas van Cooten" }, { "url": "https://decoder.cloud/2017/01/26/dirty-tricks-with-powershell/", "title": "Dirty tricks with Powershell", "person": "Andrea Pierini" }, { "url": "https://0xdf.gitlab.io/2019/04/10/commando-vm-overview.html", "title": "Commando VM: Looking Around", "person": "0xdf" }, { "url": "https://hausec.com/2019/03/12/penetration-testing-active-directory-part-ii/", "title": "Penetration Testing Active Directory, Part II", "person": "Ryan Hausknecht" }, { "url": "https://trustedsec.com/blog/operating-inside-the-interpreted-offensive-python", "title": "Operating Inside the Interpreted: Offensive Python", "person": "Kevin Clark" }, { "url": "https://trustedsec.com/blog/more-active-directory-for-script-kiddies", "title": "More Active Directory for Script Kiddies", "person": "TrustedSec" }, { "url": "https://trustedsec.com/blog/account-hunting-invoke-tokenmanipulation", "title": "Account Hunting for Invoke-TokenManipulation", "person": "Larry Spohn" } ], "referencedCount": 13, "id": "593e445dcd89", "score": 65, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 10, "mentionDistinct": 10, "canonical": true, "contributorCount": 29, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "Jared Atkinson", "cardId": "b74077f8734cc496", "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4", "login": "jaredcatkinson" }, { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" } ], "pushedAt": "2020-08-17T23:19:49Z", "archived": true, "topContributors": [ { "login": "HarmJ0y", "c": 196, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "ICanHazDonuts", "c": 156, "avatar": "https://avatars.githubusercontent.com/u/235585438?v=4", "type": "User" }, { "login": "clymb3r", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/4003012?v=4", "type": "User" }, { "login": "obscuresec", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/3047099?v=4", "type": "User" }, { "login": "FuzzySecurity", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/10997340?v=4", "type": "User" }, { "login": "webstersprodigy", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1940826?v=4", "type": "User" }, { "login": "Meatballs1", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "mattifestation", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1781087?v=4", "type": "User" }, { "login": "leechristensen", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "stufus", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/12296344?v=4", "type": "User" }, { "login": "mbrancato", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8493275?v=4", "type": "User" }, { "login": "pyllyukko", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1058704?v=4", "type": "User" }, { "login": "garignack", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3020162?v=4", "type": "User" }, { "login": "monoxgas", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1223016?v=4", "type": "User" }, { "login": "secabstraction", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5590939?v=4", "type": "User" }, { "login": "jaredcatkinson", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4", "type": "User" }, { "login": "MrAnde7son", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15673250?v=4", "type": "User" }, { "login": "hackjammer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3200511?v=4", "type": "User" }, { "login": "FixTheExchange", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15450904?v=4", "type": "User" }, { "login": "linuz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1454676?v=4", "type": "User" }, { "login": "st3r30byt3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8157586?v=4", "type": "User" }, { "login": "andyrobbins", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "cfalta", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7213829?v=4", "type": "User" }, { "login": "joncave", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/621103?v=4", "type": "User" }, { "login": "hydrajump", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6806679?v=4", "type": "User" }, { "login": "breenmachine", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6730611?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "hajdbo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1834306?v=4", "type": "User" }, { "login": "mmashwani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5581235?v=4", "type": "User" } ] }, { "repo": "fortra/impacket", "name": "impacket", "owner": "fortra", "url": "https://github.com/fortra/impacket", "stars": 15909, "language": "Python", "description": "Impacket is a collection of Python classes for working with network protocols.", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "fortra", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2024/03/30/htb-rebound.html", "title": "HTB: Rebound", "person": "0xdf" }, { "url": "https://itm4n.github.io/fuzzing-windows-rpc-rpcview/", "title": "Fuzzing Windows RPC with RpcView", "person": "Clément Labro" }, { "url": "https://swarm.ptsecurity.com/kerberoasting-without-spns/", "title": "Performing Kerberoasting without SPNs", "person": "Mark Ermolov" }, { "url": "https://clearbluejar.github.io/posts/from-ntobjectmanager-to-petitpotam/", "title": "From NtObjectManager to PetitPotam", "person": "John McIntosh" }, { "url": "https://blog.zsec.uk/old-but-gold/", "title": "Old but Gold - Attack and Defend the Sys Admins", "person": "Andy Gill" }, { "url": "https://dirkjanm.io/exploiting-CVE-2019-1040-relay-vulnerabilities-for-rce-and-domain-admin/", "title": "Exploiting CVE-2019-1040 - Combining relay vulnerabilities for RCE and Domain Admin", "person": "Dirk-jan Mollema" }, { "url": "https://hausec.com/2019/08/12/offensive-lateral-movement/", "title": "Offensive Lateral Movement", "person": "Ryan Hausknecht" }, { "url": "https://0xdf.gitlab.io/cheatsheets/uv", "title": "Python Tools and Scripts w/ UV CheatSheet", "person": "0xdf" }, { "url": "https://blog.harmj0y.net/activedirectory/remote-hash-extraction-on-demand-via-host-security-descriptor-modification/", "title": "Remote Hash Extraction On Demand Via Host Security Descriptor Modification", "person": "Will Schroeder" }, { "url": "https://blog.tw1sm.io/p/hunting-resource-based-constrained", "title": "Hunting Resource-Based Constrained Delegation in Active Directory", "person": "Matt Creel" }, { "url": "https://casvancooten.com/posts/2020/05/oscp-cheat-sheet-and-command-reference/", "title": "OSCP Cheat Sheet and Command Reference", "person": "Cas van Cooten" } ], "referencedCount": 11, "id": "c17ba3c28488", "score": 65, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 30, "mentionDistinct": 30, "canonical": true, "contributorCount": 100, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "login": "ropnop" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "login": "mxrch" } ], "pushedAt": "2026-07-15T04:39:27Z", "archived": false, "topContributors": [ { "login": "asolino", "c": 1333, "avatar": "https://avatars.githubusercontent.com/u/11577828?v=4", "type": "User" }, { "login": "0xdeaddood", "c": 192, "avatar": "https://avatars.githubusercontent.com/u/56035084?v=4", "type": "User" }, { "login": "dirkjanm", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "mohemiv", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/5724896?v=4", "type": "User" }, { "login": "gabrielg5", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/1108902?v=4", "type": "User" }, { "login": "anadrianmanrique", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/60896207?v=4", "type": "User" }, { "login": "alexisbalbachan", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/8486486?v=4", "type": "User" }, { "login": "kacpern", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/1493775?v=4", "type": "User" }, { "login": "snovvcrash", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "franferrax", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/8713657?v=4", "type": "User" }, { "login": "rmaksimov", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "cnotin", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "NtAlexio2", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/110637492?v=4", "type": "User" }, { "login": "p0dalirius", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "MrAnde7son", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/15673250?v=4", "type": "User" }, { "login": "cclauss", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "rdubourguais", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/12847917?v=4", "type": "User" }, { "login": "martinuy", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/22035856?v=4", "type": "User" }, { "login": "NeffIsBack", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/61382599?v=4", "type": "User" }, { "login": "cube0x0", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/39370848?v=4", "type": "User" }, { "login": "UNC1739", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "exploide", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "Sanmopre", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/40120264?v=4", "type": "User" }, { "login": "zexusx26", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/35561605?v=4", "type": "User" }, { "login": "contactr2m", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13003246?v=4", "type": "User" }, { "login": "mpgn", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "zblurx", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" } ] }, { "repo": "SpecterOps/SharpHound", "name": "SharpHound", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/SharpHound", "stars": 1316, "language": "C#", "description": "C# Data Collector for BloodHound", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [ { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://ipurple.team/2024/07/15/sharphound-detection/", "title": "SharpHound Detection", "person": "Panos Gkatziroulis 🦄" }, { "url": "https://specterops.io/blog/2026/04/13/bloodhound-9-0-product-updates/", "title": "BloodHound 9.0 — Product Updates", "person": "Justin Kohler" }, { "url": "https://blog.tw1sm.io/p/bofhound-session-integration", "title": "BOFHound: The Session Update", "person": "Matt Creel" }, { "url": "https://specterops.io/blog/2026/06/08/keeping-a-short-leash-new-azurehound-least-privilege-documentation/", "title": "Keeping a Short Leash: New AzureHound Least-Privilege Documentation", "person": "Martin Sohn Christensen" }, { "url": "https://blog.harmj0y.net/redteaming/a-guide-to-attacking-domain-trusts/", "title": "A Guide to Attacking Domain Trusts", "person": "Will Schroeder" }, { "url": "https://dirkjanm.io/abusing-forgotten-permissions-on-precreated-computer-objects-in-active-directory/", "title": "Abusing forgotten permissions on computer objects in Active Directory", "person": "Dirk-jan Mollema" }, { "url": "https://specterops.io/blog/2026/03/26/leveling-up-secure-code-reviews-with-claude-code/", "title": "Leveling Up Secure Code Reviews with Claude Code", "person": "Andrew Luke" }, { "url": "https://blog.zsec.uk/bloodhound-101/", "title": "Bloodhound 2.2 - How to Setup and Use it", "person": "Andy Gill" }, { "url": "https://specterops.io/blog/2025/06/04/chatting-with-your-attack-paths-an-mcp-for-bloodhound/", "title": "Chatting with Your Attack Paths: An MCP for BloodHound", "person": "Matthew Nickerson" } ], "referencedCount": 10, "adoptionOperators": 13, "score": 65, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 29, "contributors": [ { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" }, { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "login": "martinsohn" }, { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" } ], "id": "6ae1150e5852", "pushedAt": "2026-07-15T17:19:29Z", "archived": false, "topContributors": [ { "login": "rvazarkar", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "JonasBK", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "ddlees", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/8984872?v=4", "type": "User" }, { "login": "definitelynotagoblin", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/80649445?v=4", "type": "User" }, { "login": "lrfalslev", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/37004519?v=4", "type": "User" }, { "login": "mykeelium", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10276078?v=4", "type": "User" }, { "login": "mikex777", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/288318948?v=4", "type": "User" }, { "login": "urangel", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/16910931?v=4", "type": "User" }, { "login": "ktstrader", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/187799553?v=4", "type": "User" }, { "login": "0x13d", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/45909214?v=4", "type": "User" }, { "login": "elikmiller", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1761629?v=4", "type": "User" }, { "login": "emmanuelrobles", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/31362194?v=4", "type": "User" }, { "login": "juggernot325", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/885166?v=4", "type": "User" }, { "login": "simondotsh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91923903?v=4", "type": "User" }, { "login": "mwilco03", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/36248105?v=4", "type": "User" }, { "login": "martinsohn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "type": "User" }, { "login": "augwu-thortech", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/79155399?v=4", "type": "User" }, { "login": "8pu5", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/77575747?v=4", "type": "User" }, { "login": "superlinkx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/466326?v=4", "type": "User" }, { "login": "pradameinhof", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16960409?v=4", "type": "User" }, { "login": "Mayyhem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" }, { "login": "irshadaj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24904109?v=4", "type": "User" }, { "login": "JimSycurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14374121?v=4", "type": "User" }, { "login": "leechristensen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "PfiatDe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47333109?v=4", "type": "User" }, { "login": "stuartw1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1748393?v=4", "type": "User" }, { "login": "ykaiboussiSO", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/182781928?v=4", "type": "User" }, { "login": "lap1nou", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10383569?v=4", "type": "User" } ] }, { "repo": "t3l3machus/villain", "name": "villain", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/Villain", "stars": 4411, "language": "Python", "description": "Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ", "type": "tool", "lanes": [ "2", "curated" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4212802494c2", "score": 64, "signals": { "cited": false, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "canonical": true, "contributorCount": 7, "contributors": [], "pushedAt": "2025-05-21T10:49:04Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 322, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" }, { "login": "abuyusif01", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/49121684?v=4", "type": "User" }, { "login": "D3vil0p3r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/83867734?v=4", "type": "User" }, { "login": "penetrationt3ster", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/171661675?v=4", "type": "User" }, { "login": "Pri3st", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66968346?v=4", "type": "User" }, { "login": "RefractionSplash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/148286691?v=4", "type": "User" }, { "login": "x4v1l0k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47472863?v=4", "type": "User" } ] }, { "repo": "lgandx/responder", "name": "responder", "owner": "lgandx", "url": "https://github.com/lgandx/Responder", "stars": 6511, "language": "Python", "description": "Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "lgandx", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2025/04/05/htb-ghost.html", "title": "HTB: Ghost", "person": "0xdf" }, { "url": "https://blog.tw1sm.io/p/keeping-up-with-the-ntlm-relay", "title": "Keeping Up with the NTLM Relay", "person": "Matt Creel" }, { "url": "https://www.bunniestudios.com/blog/2007/winner-of-name-that-ware-may-and-june-2007/", "title": "Winner of Name That Ware May and June 2007 « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://wehackpeople.wordpress.com/2019/09/19/lock-picking-laws-in-tennessee/", "title": "Lock Picking Laws in Tennessee", "person": "Tim Roberts" }, { "url": "https://blog.zsec.uk/path2da-pt3/", "title": "Pass The Hash - Defense/Offense/Fix", "person": "Andy Gill" }, { "url": "https://eaton-works.com/2023/06/06/honda-ecommerce-hack/", "title": "Compromising Honda’s power equipment / marine / lawn & garden dealer eCommerce platform through a vulnerable password reset API", "person": "Eaton Zveare" }, { "url": "https://blog.richardfan.xyz/2024/08/02/reusable-workflow-is-good-until-you-realize-your-identity-is-also-reusable-by-anyone.html", "title": "Reusable workflow is good … Until you realize your identity is also reusable by anyone (1)", "person": "Richard Fan" }, { "url": "https://mez0.cc/posts/evaluating-implants-with-ember", "title": "Using EMBER2024 to evaluate red team implants", "person": "Brandon McGrath" }, { "url": "https://onecloudplease.com/blog/https-endpoints-and-more-tricks-with-aws-step-functions", "title": "HTTPS Endpoints and more tricks with AWS Step Functions – One Cloud Please", "person": "Ian Mckay" }, { "url": "https://oddvar.moe/2017/05/18/bypassing-application-whitelisting-with-bginfo/", "title": "Bypassing Application Whitelisting with BGInfo", "person": "Oddvar Moe" }, { "url": "https://worthdoingbadly.com/bluetooth/", "title": "Proof-of-concept for CVE-2025-48593: No, this Android Bluetooth issue does NOT affect your phone or tablet", "person": "worthdoingbadly" }, { "url": "https://blog.orange.tw/posts/2019-01-hacking-jenkins-part-1-play-with-dynamic-routing/", "title": "Hacking Jenkins Part 1 - Play with Dynamic Routing", "person": "Orange Tsai" } ], "referencedCount": 12, "id": "b370ae83646b", "score": 63, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 108, "mentionDistinct": 110, "canonical": true, "contributorCount": 72, "contributors": [ { "name": "ValdikSS", "cardId": "c76eaa2d709872a9", "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "login": "ValdikSS" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "login": "chrismaddalena" } ], "pushedAt": "2026-06-10T14:28:34Z", "archived": false, "topContributors": [ { "login": "lgandx", "c": 364, "avatar": "https://avatars.githubusercontent.com/u/383080?v=4", "type": "User" }, { "login": "jrmdev", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1413609?v=4", "type": "User" }, { "login": "nobbd", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5907251?v=4", "type": "User" }, { "login": "ValdikSS", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "type": "User" }, { "login": "also-here", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/27977024?v=4", "type": "User" }, { "login": "HexPandaa", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/47880094?v=4", "type": "User" }, { "login": "exploide", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "jvoisin", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/325724?v=4", "type": "User" }, { "login": "requin-citron", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/48998190?v=4", "type": "User" }, { "login": "brightio", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/65655412?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "cnotin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "hlein", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4372440?v=4", "type": "User" }, { "login": "johnnyxmas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6288329?v=4", "type": "User" }, { "login": "skelsec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19204702?v=4", "type": "User" }, { "login": "Hackndo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "vysec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" }, { "login": "ThePirateWhoSmellsOfSunflowers", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18633286?v=4", "type": "User" }, { "login": "mubix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "megabug", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15011974?v=4", "type": "User" }, { "login": "idarlund", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3417634?v=4", "type": "User" }, { "login": "hdm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1171392?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "BlWasp", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35003340?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "deltronzero", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79029311?v=4", "type": "User" }, { "login": "cweedon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4373792?v=4", "type": "User" }, { "login": "NullByteZero", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4499571?v=4", "type": "User" }, { "login": "q-roland", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "Mipsters", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4920832?v=4", "type": "User" } ] }, { "repo": "nettitude/PoshC2", "name": "PoshC2", "owner": "nettitude", "url": "https://github.com/nettitude/PoshC2", "stars": 2114, "language": "PowerShell", "description": "A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "nettitude", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/11998401?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/ltr101-windowsterm/", "title": "LtR101: Windows Terminals", "person": "Andy Gill" }, { "url": "https://0xdf.gitlab.io/2019/04/10/commando-vm-overview.html", "title": "Commando VM: Looking Around", "person": "0xdf" }, { "url": "https://trustedsec.com/blog/pentesters-framework-ptf-v1-8-tool-depot-released", "title": "The PenTesters Framework (PTF) v1.8 \"Tool Depot\" Released", "person": "David Kennedy" } ], "referencedCount": 3, "adoptionOperators": 3, "score": 63, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 25, "contributors": [ { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "login": "its-a-feature" }, { "name": "Phil Keeble", "cardId": "b2cf4e8e8fceed95", "avatar": "https://avatars.githubusercontent.com/u/64729432?v=4", "login": "PhilKeeble" } ], "id": "168eb57963b9", "pushedAt": "2025-11-20T13:55:21Z", "archived": false, "topContributors": [ { "login": "benpturner", "c": 462, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "riskydissonance", "c": 340, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" }, { "login": "x41x41x41", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5831119?v=4", "type": "User" }, { "login": "PwnDexter", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/7848161?v=4", "type": "User" }, { "login": "Console", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/699884?v=4", "type": "User" }, { "login": "rolen", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1428801?v=4", "type": "User" }, { "login": "BaffledJimmy", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26554069?v=4", "type": "User" }, { "login": "b4ggio-su", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/25221753?v=4", "type": "User" }, { "login": "DotoPototo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17406786?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Bli5s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5310074?v=4", "type": "User" }, { "login": "skahwah", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5567558?v=4", "type": "User" }, { "login": "Luct0r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43627224?v=4", "type": "User" }, { "login": "its-a-feature", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" }, { "login": "0x413x4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11176964?v=4", "type": "User" }, { "login": "abdessamad-imrim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/231633694?v=4", "type": "User" }, { "login": "archcloudlabs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1250113?v=4", "type": "User" }, { "login": "Flangvik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" }, { "login": "PhilKeeble", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64729432?v=4", "type": "User" }, { "login": "RustyBower", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3969053?v=4", "type": "User" }, { "login": "developerbart", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23361004?v=4", "type": "User" }, { "login": "kibercthulhu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3317317?v=4", "type": "User" }, { "login": "lhagan-eth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5909764?v=4", "type": "User" }, { "login": "er28-0652", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33626923?v=4", "type": "User" }, { "login": "thehackerish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4753842?v=4", "type": "User" } ] }, { "repo": "kgretzky/evilginx2", "name": "evilginx2", "owner": "kgretzky", "url": "https://github.com/kgretzky/evilginx2", "stars": 15336, "language": "Go", "description": "Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication", "type": "tool", "lanes": [ "2", "curated" ], "author": { "name": "Kuba Gretzky", "cardId": "8be8d7866769df75", "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5721d5684454", "score": 63, "signals": { "cited": false, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "canonical": true, "contributorCount": 24, "contributors": [ { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" } ], "pushedAt": "2026-06-10T12:12:03Z", "archived": false, "topContributors": [ { "login": "kgretzky", "c": 168, "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4", "type": "User" }, { "login": "An0nUD4Y", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/37680540?v=4", "type": "User" }, { "login": "JamesCullum", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5477111?v=4", "type": "User" }, { "login": "ahhh", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/836166?v=4", "type": "User" }, { "login": "perfectlylogical", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1110748?v=4", "type": "User" }, { "login": "charlesbel", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/37935727?v=4", "type": "User" }, { "login": "fabacab", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/18677?v=4", "type": "User" }, { "login": "sho-luv", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1679089?v=4", "type": "User" }, { "login": "jjangga0214", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28584151?v=4", "type": "User" }, { "login": "fdataz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16714738?v=4", "type": "User" }, { "login": "antman1p", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6889529?v=4", "type": "User" }, { "login": "bschmoker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/53497581?v=4", "type": "User" }, { "login": "antoineVIVIES", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23381717?v=4", "type": "User" }, { "login": "Anonymoushawk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56723216?v=4", "type": "User" }, { "login": "audibleblink", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4605783?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "ohpe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704560?v=4", "type": "User" }, { "login": "michaelmagyar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15677350?v=4", "type": "User" }, { "login": "kulinacs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9296478?v=4", "type": "User" }, { "login": "wikijm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10724809?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "yudasm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/88127398?v=4", "type": "User" }, { "login": "kjblack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42039135?v=4", "type": "User" }, { "login": "rotarydrone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26116086?v=4", "type": "User" } ] }, { "repo": "ghostpack/rubeus", "name": "rubeus", "owner": "ghostpack", "url": "https://github.com/GhostPack/Rubeus", "stars": 5091, "language": "C#", "description": "Trying to tame the three-headed dog.", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "ghostpack", "cardId": null }, "referencedBy": [ { "url": "https://swarm.ptsecurity.com/python-sspi-teaching-impacket-to-respect-windows-sso/", "title": "Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO", "person": "Mark Ermolov" }, { "url": "https://ipurple.team/2025/07/28/badsuccessor/", "title": "BadSuccessor", "person": "Panos Gkatziroulis 🦄" }, { "url": "https://spaceraccoon.dev/offensive-security-experienced-penetration-tester-osep-review-and-exam/", "title": "Offensive Security Experienced Penetration Tester (OSEP) Review and Exam", "person": "Eugene Lim" }, { "url": "https://blog.harmj0y.net/activedirectory/certified-pre-owned/", "title": "Certified Pre-Owned", "person": "Will Schroeder" }, { "url": "https://swarm.ptsecurity.com/kerberoasting-without-spns/", "title": "Performing Kerberoasting without SPNs", "person": "Mark Ermolov" }, { "url": "https://decoder.cloud/2023/09/05/from-ntauthcertificates-to-silver-certificate/", "title": "From NTAuthCertificates to “Silver” Certificate", "person": "Andrea Pierini" }, { "url": "https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/", "title": "Relaying Kerberos over DNS using krbrelayx and mitm6", "person": "Dirk-jan Mollema" }, { "url": "https://n0t0d4y.medium.com/ecptx-exam-review-by-0xjin-7602232b53d3?source=rss-e520a72e2fdf------2", "title": "eCPTX Exam Review by 0xJin", "person": "0xJin" }, { "url": "https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/", "title": "Windows & Active Directory Exploitation Cheat Sheet and Command Reference", "person": "Cas van Cooten" }, { "url": "https://www.tiraniddo.dev/2022/05/exploiting-rbcd-using-normal-user.html", "title": "Exploiting RBCD Using a Normal User Account*", "person": "James Forshaw" }, { "url": "https://rastamouse.me/memory-patching-amsi-bypass/", "title": "Memory Patching AMSI Bypass", "person": "Rasta Mouse" }, { "url": "https://blog.zsec.uk/ltr-d101-splunk/", "title": "Learning The [Defence] Ropes 101 - Splunk Setup & Config", "person": "Andy Gill" } ], "referencedCount": 12, "id": "82cb4ba8d202", "score": 62, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 19, "mentionDistinct": 20, "canonical": true, "contributorCount": 35, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "login": "tyranid" }, { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" }, { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "login": "matterpreter" } ], "pushedAt": "2026-05-21T11:08:54Z", "archived": false, "topContributors": [ { "login": "0xe7", "c": 134, "avatar": "https://avatars.githubusercontent.com/u/13423848?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "CCob", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "VbScrub", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/53273102?v=4", "type": "User" }, { "login": "pkb1s", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/25517393?v=4", "type": "User" }, { "login": "JoeDibley", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/23236842?v=4", "type": "User" }, { "login": "mDoi12mdjf", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/43760585?v=4", "type": "User" }, { "login": "eladshamir", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8843083?v=4", "type": "User" }, { "login": "coffeegist", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1392689?v=4", "type": "User" }, { "login": "leechristensen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "BlueSkeye", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5776214?v=4", "type": "User" }, { "login": "tyranid", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" }, { "login": "4ndr3w6", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50060374?v=4", "type": "User" }, { "login": "cnotin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "l0ss", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24580473?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "lberezy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5207383?v=4", "type": "User" }, { "login": "koztkozt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/96878659?v=4", "type": "User" }, { "login": "royreinders", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8884958?v=4", "type": "User" }, { "login": "r3motecontrol", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2549509?v=4", "type": "User" }, { "login": "michael-dev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1722555?v=4", "type": "User" }, { "login": "lyntux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10225455?v=4", "type": "User" }, { "login": "skorov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15148733?v=4", "type": "User" }, { "login": "theogobinet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30470719?v=4", "type": "User" }, { "login": "steve-embling", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34773749?v=4", "type": "User" }, { "login": "qlemaire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29045289?v=4", "type": "User" }, { "login": "matterpreter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" }, { "login": "mark-s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/999307?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/inveigh", "name": "inveigh", "owner": "kevin-robertson", "url": "https://github.com/Kevin-Robertson/Inveigh", "stars": 2991, "language": "C#", "description": ".NET IPv4/IPv6 machine-in-the-middle tool for penetration testers", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [ { "url": "https://hausec.com/2018/10/08/active-directory-assessment-and-privilege-escalation-script/", "title": "Active Directory Assessment and Privilege Escalation Script 2.0", "person": "Ryan Hausknecht" }, { "url": "https://0xdf.gitlab.io/2019/04/15/commando-vm-lessons.html", "title": "Commando VM: Lessons Learned", "person": "0xdf" }, { "url": "https://hausec.com/2019/03/05/penetration-testing-active-directory-part-i/", "title": "Penetration Testing Active Directory, Part I", "person": "Ryan Hausknecht" }, { "url": "https://blog.harmj0y.net/empire/empire-1-5/", "title": "Empire 1.5", "person": "Will Schroeder" }, { "url": "https://offsec.blog/hidden-menace-how-to-identify-misconfigured-and-dangerous-logon-scripts", "title": "Hidden Menace: How to Identify Misconfigured and Dangerous Logon Scripts - Offensive Security Blog - SecurIT360", "person": "Spencer Alessi" }, { "url": "https://dirkjanm.io/krbrelayx-unconstrained-delegation-abuse-toolkit/", "title": "“Relaying” Kerberos - Having fun with unconstrained delegation", "person": "Dirk-jan Mollema" }, { "url": "https://grahamhelton.com/blog/human-memory-management.html", "title": "Human Memory Management: Techniques\nFor Actionable Security Research", "person": "Graham Helton" } ], "referencedCount": 7, "id": "13cee710a00a", "score": 62, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 6, "mentionDistinct": 6, "canonical": true, "contributorCount": 4, "contributors": [], "pushedAt": "2025-11-19T04:12:41Z", "archived": false, "topContributors": [ { "login": "Kevin-Robertson", "c": 161, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "kant2002", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4257079?v=4", "type": "User" }, { "login": "Reelix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/289404?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "harmj0y/powerup", "name": "powerup", "owner": "harmj0y", "url": "https://github.com/HarmJ0y/PowerUp", "stars": 255, "language": "PowerShell", "description": "This version of PowerUp is now unsupported. See https://github.com/Veil-Framework/PowerTools/tree/master/PowerUp for the most current version.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/windows-registry-rpceptmapper-eop/", "title": "Windows RpcEptMapper Service Insecure Registry Permissions EoP", "person": "Clément Labro" } ], "referencedCount": 1, "id": "a7e96ea2f5b9", "score": 62, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 8, "mentionDistinct": 9, "contributorCount": 1, "contributors": [], "pushedAt": "2017-04-18T09:30:16Z", "archived": false, "topContributors": [ { "login": "HarmJ0y", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "topotam/petitpotam", "name": "petitpotam", "owner": "topotam", "url": "https://github.com/topotam/PetitPotam", "stars": 2255, "language": "C", "description": "PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "topotam", "cardId": null }, "referencedBy": [ { "url": "https://itm4n.github.io/fuzzing-windows-rpc-rpcview/", "title": "Fuzzing Windows RPC with RpcView", "person": "Clément Labro" }, { "url": "https://itm4n.github.io/from-rpcview-to-petitpotam/", "title": "From RpcView to PetitPotam", "person": "Clément Labro" }, { "url": "https://blog.tw1sm.io/p/keeping-up-with-the-ntlm-relay", "title": "Keeping Up with the NTLM Relay", "person": "Matt Creel" }, { "url": "https://clearbluejar.github.io/posts/from-ntobjectmanager-to-petitpotam/", "title": "From NtObjectManager to PetitPotam", "person": "John McIntosh" }, { "url": "https://www.tiraniddo.dev/2021/08/how-windows-firewall-rpc-filter-works.html", "title": "How the Windows Firewall RPC Filter Works", "person": "James Forshaw" }, { "url": "https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/", "title": "NTLM relaying to AD CS - On certificates, printers and a little hippo", "person": "Dirk-jan Mollema" }, { "url": "https://decoder.cloud/2025/04/24/from-ntlm-relay-to-kerberos-relay-everything-you-need-to-know/", "title": "From NTLM relay to Kerberos relay: Everything you need to know", "person": "Andrea Pierini" }, { "url": "https://specterops.io/blog/2026/07/15/there-and-back-again-an-operators-guide-on-ntlm-relaying-egress/", "title": "There and Back Again: An Operators Guide on NTLM Relaying Egress", "person": "Logan Goins" }, { "url": "https://blog.zsec.uk/chasing-the-silver-petit-potam/", "title": "Chasing the Silver Petit Potam to Domain Admin", "person": "Andy Gill" } ], "referencedCount": 9, "id": "f5c96c7010c2", "score": 60, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 8, "mentionDistinct": 9, "canonical": true, "contributorCount": 8, "contributors": [ { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "login": "subat0mik" }, { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" } ], "pushedAt": "2024-08-15T03:52:26Z", "archived": false, "topContributors": [ { "login": "topotam", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/20562821?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "cfalta", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7213829?v=4", "type": "User" }, { "login": "tothi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6377720?v=4", "type": "User" }, { "login": "subat0mik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "bugch3ck", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" }, { "login": "darknotevil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44245421?v=4", "type": "User" } ] }, { "repo": "decalage2/oletools", "name": "oletools", "owner": "decalage2", "url": "https://github.com/decalage2/oletools", "stars": 3381, "language": "Python", "description": "oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Philippe Lagadec", "cardId": "2f01d6d832e70243", "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4" }, "referencedBy": [ { "url": "https://decalage.info/vba_tools/", "title": "Tools to extract VBA Macro source code from MS Office Documents", "person": "Philippe Lagadec" }, { "url": "https://decalage.info/python/oletools/", "title": "oletools - python tools to analyze OLE and MS Office files", "person": "Philippe Lagadec" }, { "url": "https://forensicitguy.github.io/agenttesla-rtf-dotnet-tradecraft/", "title": "AgentTesla From RTF Exploitation to .NET Tradecraft", "person": "Tony Lambert" } ], "referencedCount": 3, "id": "b167479f3be6", "score": 60, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 4, "mentionDistinct": 4, "contributorCount": 45, "contributors": [ { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "login": "staaldraad" }, { "name": "Olivier Bilodeau", "cardId": "443fb359106c0bef", "avatar": "https://avatars.githubusercontent.com/u/546325?v=4", "login": "obilodeau" }, { "name": "Caleb Fenton", "cardId": "4c080c7ad1a4f093", "avatar": "https://avatars.githubusercontent.com/u/1356658?v=4", "login": "CalebFenton" }, { "name": "Bart", "cardId": "9b82391c60e5a30e", "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4", "login": "bartblaze" } ], "pushedAt": "2026-02-14T19:42:44Z", "archived": false, "topContributors": [ { "login": "decalage2", "c": 825, "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4", "type": "User" }, { "login": "christian-intra2net", "c": 498, "avatar": "https://avatars.githubusercontent.com/u/17023464?v=4", "type": "User" }, { "login": "samiraguiar", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/13439135?v=4", "type": "User" }, { "login": "kirk-sayre-work", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/29897701?v=4", "type": "User" }, { "login": "Feandil", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1488247?v=4", "type": "User" }, { "login": "enkelli", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/14038418?v=4", "type": "User" }, { "login": "kijeong", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2956678?v=4", "type": "User" }, { "login": "comawill", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2579633?v=4", "type": "User" }, { "login": "halos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/307219?v=4", "type": "User" }, { "login": "Gabriele-Pippi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/35693420?v=4", "type": "User" }, { "login": "Rafiot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/248875?v=4", "type": "User" }, { "login": "mlodic", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30625432?v=4", "type": "User" }, { "login": "HashTables2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25035619?v=4", "type": "User" }, { "login": "matthieuxyz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9122514?v=4", "type": "User" }, { "login": "idiom", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2530252?v=4", "type": "User" }, { "login": "vEpiphyte", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26100278?v=4", "type": "User" }, { "login": "2xyo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31675?v=4", "type": "User" }, { "login": "Murphant", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8375640?v=4", "type": "User" }, { "login": "xambroz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/723625?v=4", "type": "User" }, { "login": "DecimalTurn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31558169?v=4", "type": "User" }, { "login": "jloehel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2422012?v=4", "type": "User" }, { "login": "federicofantini", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/122294644?v=4", "type": "User" }, { "login": "staaldraad", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" }, { "login": "spender-sandbox", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16083446?v=4", "type": "User" }, { "login": "slackish", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3422163?v=4", "type": "User" }, { "login": "naqushab", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6817118?v=4", "type": "User" }, { "login": "obilodeau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/546325?v=4", "type": "User" }, { "login": "robert-scheck", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10982488?v=4", "type": "User" }, { "login": "rsaccani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6411594?v=4", "type": "User" }, { "login": "sdushantha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27065646?v=4", "type": "User" } ] }, { "repo": "n1nj4sec/pupy", "name": "pupy", "owner": "n1nj4sec", "url": "https://github.com/n1nj4sec/pupy", "stars": 8990, "language": "Python", "description": "Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "n1nj4sec", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/12549318?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 60, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 27, "contributors": [], "id": "5542d3ef7e61", "pushedAt": "2024-03-22T08:52:53Z", "archived": true, "topContributors": [ { "login": "alxchk", "c": 2251, "avatar": "https://avatars.githubusercontent.com/u/329535?v=4", "type": "User" }, { "login": "n1nj4sec", "c": 746, "avatar": "https://avatars.githubusercontent.com/u/12549318?v=4", "type": "User" }, { "login": "AlessandroZ", "c": 191, "avatar": "https://avatars.githubusercontent.com/u/10668373?v=4", "type": "User" }, { "login": "quentinhardy", "c": 137, "avatar": "https://avatars.githubusercontent.com/u/6815593?v=4", "type": "User" }, { "login": "golind", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/9433974?v=4", "type": "User" }, { "login": "kefkahacks", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8886247?v=4", "type": "User" }, { "login": "cclauss", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "pwna5aurus", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20076739?v=4", "type": "User" }, { "login": "b2az", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/20790250?v=4", "type": "User" }, { "login": "bitrot-sh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34035518?v=4", "type": "User" }, { "login": "Zorilixer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43043243?v=4", "type": "User" }, { "login": "0x1a0ran", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1891389?v=4", "type": "User" }, { "login": "be1ko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3055972?v=4", "type": "User" }, { "login": "boxed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/332428?v=4", "type": "User" }, { "login": "radarhere", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3112309?v=4", "type": "User" }, { "login": "BuffaloWill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1125757?v=4", "type": "User" }, { "login": "ChristopherShawn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1236285?v=4", "type": "User" }, { "login": "jamesgol", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6788517?v=4", "type": "User" }, { "login": "minjimwu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7794568?v=4", "type": "User" }, { "login": "brimstone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/812795?v=4", "type": "User" }, { "login": "mdulin2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21994392?v=4", "type": "User" }, { "login": "mscherer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/230335?v=4", "type": "User" }, { "login": "ndragon798", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10368650?v=4", "type": "User" }, { "login": "Strazzom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36013285?v=4", "type": "User" }, { "login": "void-in", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1746697?v=4", "type": "User" }, { "login": "RedSunEmpire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5862147?v=4", "type": "User" }, { "login": "noevents", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12109435?v=4", "type": "User" } ] }, { "repo": "leechristensen/spoolsample", "name": "spoolsample", "owner": "leechristensen", "url": "https://github.com/leechristensen/SpoolSample", "stars": 1137, "language": "C#", "description": "PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/", "title": "PrintSpoofer - Abusing Impersonation Privileges on Windows 10 and Server 2019", "person": "Clément Labro" } ], "referencedCount": 1, "id": "0b39a4278cbf", "score": 59, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 5, "mentionDistinct": 5, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-29T10:53:10Z", "archived": false, "topContributors": [ { "login": "leechristensen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" } ] }, { "repo": "HavocFramework/Havoc", "name": "Havoc", "owner": "HavocFramework", "url": "https://github.com/HavocFramework/Havoc", "stars": 8499, "language": "Go", "description": "The Havoc Framework", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "HavocFramework", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/110123898?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 59, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 36, "contributors": [ { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "login": "Cracked5pider" } ], "id": "09ebc7d06589", "pushedAt": "2025-12-18T15:10:21Z", "archived": true, "topContributors": [ { "login": "S4ntiagoP", "c": 412, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "Cracked5pider", "c": 242, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" }, { "login": "p4p1", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/19672114?v=4", "type": "User" }, { "login": "rmusser01", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/1444720?v=4", "type": "User" }, { "login": "adamsvoboda", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/3341597?v=4", "type": "User" }, { "login": "BlackTrace", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8064316?v=4", "type": "User" }, { "login": "realoriginal", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/118862626?v=4", "type": "User" }, { "login": "0xTriboulet", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22229087?v=4", "type": "User" }, { "login": "rhakb", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22503688?v=4", "type": "User" }, { "login": "0xv1n", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/11021725?v=4", "type": "User" }, { "login": "ImuSpirit", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36792635?v=4", "type": "User" }, { "login": "chbGSmCm", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/79546298?v=4", "type": "User" }, { "login": "CodeXTF2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/29991665?v=4", "type": "User" }, { "login": "DaBigBlob", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/73036332?v=4", "type": "User" }, { "login": "Iieitaimus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51837943?v=4", "type": "User" }, { "login": "youngifif", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/151758018?v=4", "type": "User" }, { "login": "djnnvx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29751352?v=4", "type": "User" }, { "login": "w33ts", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27108677?v=4", "type": "User" }, { "login": "lucasstinson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38330119?v=4", "type": "User" }, { "login": "timoxoszt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75104235?v=4", "type": "User" }, { "login": "souzomain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/92044641?v=4", "type": "User" }, { "login": "fplazar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4822772?v=4", "type": "User" }, { "login": "n0isegat3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69188555?v=4", "type": "User" }, { "login": "killeven", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20269644?v=4", "type": "User" }, { "login": "k3nundrum", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47409600?v=4", "type": "User" }, { "login": "h00die", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/752491?v=4", "type": "User" }, { "login": "daniruiz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12565871?v=4", "type": "User" }, { "login": "ZeroMemoryEx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60795188?v=4", "type": "User" }, { "login": "ConnectedLucy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/113638057?v=4", "type": "User" }, { "login": "byinarie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20119926?v=4", "type": "User" } ] }, { "repo": "d00mfist/mystikal", "name": "mystikal", "owner": "d00mfist", "url": "https://github.com/D00MFist/Mystikal", "stars": 326, "language": "Python", "description": "macOS Initial Access Payload Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "338e76e59d18", "score": 59, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "login": "ForensicITGuy" }, { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "login": "its-a-feature" } ], "pushedAt": "2024-01-10T15:48:12Z", "archived": false, "topContributors": [ { "login": "D00MFist", "c": 116, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" }, { "login": "ForensicITGuy", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" }, { "login": "threat-punter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56409778?v=4", "type": "User" }, { "login": "its-a-feature", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" }, { "login": "CsEnox", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60170196?v=4", "type": "User" } ] }, { "repo": "ly4k/Certipy", "name": "Certipy", "owner": "ly4k", "url": "https://github.com/ly4k/Certipy", "stars": 3593, "language": "Python", "description": "Tool for Active Directory Certificate Services enumeration and abuse", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "ly4k", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/53348818?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2023/09/05/from-ntauthcertificates-to-silver-certificate/", "title": "From NTAuthCertificates to “Silver” Certificate", "person": "Andrea Pierini" }, { "url": "https://0xdf.gitlab.io/cheatsheets/uv", "title": "Python Tools and Scripts w/ UV CheatSheet", "person": "0xdf" }, { "url": "https://swarm.ptsecurity.com/python-sspi-teaching-impacket-to-respect-windows-sso/", "title": "Python ❤️ SSPI: Teaching Impacket to Respect Windows SSO", "person": "Mark Ermolov" }, { "url": "https://dirkjanm.io/extending-ad-cs-attack-surface-intune-certs/", "title": "Extending AD CS attack surface to the cloud with Intune certificates", "person": "Dirk-jan Mollema" }, { "url": "https://blog.zsec.uk/common-tool-errors-kerberos/", "title": "Common Tool Errors - Kerberos", "person": "Andy Gill" }, { "url": "https://specterops.io/blog/2026/07/15/there-and-back-again-an-operators-guide-on-ntlm-relaying-egress/", "title": "There and Back Again: An Operators Guide on NTLM Relaying Egress", "person": "Logan Goins" } ], "referencedCount": 6, "adoptionOperators": 6, "score": 57, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 36, "contributors": [ { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "id": "d9b1ad169226", "pushedAt": "2026-07-15T18:20:23Z", "archived": false, "topContributors": [ { "login": "ly4k", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/53348818?v=4", "type": "User" }, { "login": "Patralos", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/27063650?v=4", "type": "User" }, { "login": "sploutchy", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1473439?v=4", "type": "User" }, { "login": "Clayno", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15702611?v=4", "type": "User" }, { "login": "exploide", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "nurfed1", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8027846?v=4", "type": "User" }, { "login": "AdrianVollmer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26064811?v=4", "type": "User" }, { "login": "f3rn0s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1351279?v=4", "type": "User" }, { "login": "shikatano", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2265505?v=4", "type": "User" }, { "login": "JJK96", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11193274?v=4", "type": "User" }, { "login": "CykuTW", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22723799?v=4", "type": "User" }, { "login": "NeffIsBack", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61382599?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "snovvcrash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "Signum21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "stfnw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28357058?v=4", "type": "User" }, { "login": "Tim-Hoekstra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135951177?v=4", "type": "User" }, { "login": "VeryDampTowel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32224673?v=4", "type": "User" }, { "login": "adervis3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18114252?v=4", "type": "User" }, { "login": "antuache", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22861294?v=4", "type": "User" }, { "login": "Ryanu9", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116372810?v=4", "type": "User" }, { "login": "plur1bu5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/260260768?v=4", "type": "User" }, { "login": "praetorian-rang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/263791006?v=4", "type": "User" }, { "login": "Skriep", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34940983?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "vilacham", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21269492?v=4", "type": "User" }, { "login": "martanne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5736493?v=4", "type": "User" }, { "login": "LazyTitan33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80063008?v=4", "type": "User" }, { "login": "laxa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" } ] }, { "repo": "dirkjanm/privexchange", "name": "privexchange", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/PrivExchange", "stars": 1073, "language": "Python", "description": "Exchange your privileges for Domain Admin privs by abusing Exchange", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/abusing-exchange-one-api-call-away-from-domain-admin/", "title": "Abusing Exchange: One API call away from Domain Admin", "person": "Dirk-jan Mollema" }, { "url": "https://swarm.ptsecurity.com/attacking-ms-exchange-web-interfaces/", "title": "Attacking MS Exchange Web Interfaces", "person": "Mark Ermolov" } ], "referencedCount": 2, "id": "0c7e990761ae", "score": 57, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 4, "mentionDistinct": 4, "contributorCount": 1, "contributors": [], "pushedAt": "2020-01-23T19:48:51Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" } ] }, { "repo": "Adaptix-Framework/AdaptixC2", "name": "AdaptixC2", "owner": "Adaptix-Framework", "url": "https://github.com/Adaptix-Framework/AdaptixC2", "stars": 3379, "language": "C++", "description": "AdaptixC2 is a highly modular advanced redteam toolkit", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Adaptix-Framework", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/178991823?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 57, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": true }, "contributorCount": 29, "contributors": [], "id": "5d88bb71ff70", "pushedAt": "2026-07-15T11:01:10Z", "archived": false, "topContributors": [ { "login": "RalfHacker", "c": 656, "avatar": "https://avatars.githubusercontent.com/u/54005327?v=4", "type": "User" }, { "login": "shashinma", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/80101293?v=4", "type": "User" }, { "login": "bri5ee", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/58535635?v=4", "type": "User" }, { "login": "lsr00ter", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3685107?v=4", "type": "User" }, { "login": "Xre0uS", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/36565320?v=4", "type": "User" }, { "login": "AnvithLobo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/64419387?v=4", "type": "User" }, { "login": "exil-security", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36631807?v=4", "type": "User" }, { "login": "shantanu561993", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8576432?v=4", "type": "User" }, { "login": "yinsel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/91541985?v=4", "type": "User" }, { "login": "BlackMeerkat", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/72072312?v=4", "type": "User" }, { "login": "3v4Si0N", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26328419?v=4", "type": "User" }, { "login": "CyberSecurityTron", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/180129025?v=4", "type": "User" }, { "login": "mdube99", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38991862?v=4", "type": "User" }, { "login": "mil4ne", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/89859279?v=4", "type": "User" }, { "login": "D4rthMaulCop", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49704708?v=4", "type": "User" }, { "login": "yutianqaq", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40353095?v=4", "type": "User" }, { "login": "M1ndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44820142?v=4", "type": "User" }, { "login": "uxbug", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38550616?v=4", "type": "User" }, { "login": "spring556", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44287891?v=4", "type": "User" }, { "login": "melnicek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41522529?v=4", "type": "User" }, { "login": "NanoWraith", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/118002757?v=4", "type": "User" }, { "login": "cr0eax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/86051840?v=4", "type": "User" }, { "login": "T1erno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78065668?v=4", "type": "User" }, { "login": "Sakura529", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/113512079?v=4", "type": "User" }, { "login": "rsherstnev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26627142?v=4", "type": "User" }, { "login": "ArturLukianov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47292310?v=4", "type": "User" }, { "login": "jinncoder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6900588?v=4", "type": "User" }, { "login": "Adnnlnistrator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56180228?v=4", "type": "User" }, { "login": "0xShkk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51774233?v=4", "type": "User" } ] }, { "repo": "pennyw0rth/netexec", "name": "netexec", "owner": "pennyw0rth", "url": "https://github.com/Pennyw0rth/NetExec", "stars": 5700, "language": "Python", "description": "The Network Execution Tool", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "pennyw0rth", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/cheatsheets/uv", "title": "Python Tools and Scripts w/ UV CheatSheet", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/cheatsheets/smb-enum", "title": "SMB Enumeration Cheatsheet", "person": "0xdf" }, { "url": "https://jackhacsecurity.com/2025/04/13/assume-breach-not-burnout/", "title": "Assume Breach, Not Burnout: The New OSCP+ Experience", "person": "Andrew Buchanan" }, { "url": "https://specterops.io/blog/2026/07/09/finding-socks-with-proxywatch/", "title": "Finding SOCKS with Proxywatch", "person": "Brian Reitz, John Wotton" }, { "url": "https://specterops.io/blog/2026/05/07/shift-happens-uncovering-two-built-in-command-injections-in-windows-context-menus/", "title": "Shift Happens - Uncovering Two Built-in Command Injections in Windows Context Menus", "person": "Remi GASCOU" }, { "url": "https://in.security/2025/09/08/from-shadows-to-signals-hunting-pass-the-hash-attacks/", "title": "From Shadows to Signals: Hunting Pass-the-Hash Attacks - In.security", "person": "Owen Shearing" } ], "referencedCount": 6, "id": "fdbc64bf9411", "score": 56, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 5, "mentionDistinct": 5, "canonical": true, "contributorCount": 100, "contributors": [ { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "David Kennedy", "cardId": "52309371b01b64e3", "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4", "login": "Cyb3rC3lt" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "login": "qtc-de" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "login": "swisskyrepo" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "pushedAt": "2026-07-16T20:35:20Z", "archived": false, "topContributors": [ { "login": "NeffIsBack", "c": 2124, "avatar": "https://avatars.githubusercontent.com/u/61382599?v=4", "type": "User" }, { "login": "Marshall-Hallenbeck", "c": 1268, "avatar": "https://avatars.githubusercontent.com/u/1518719?v=4", "type": "User" }, { "login": "mpgn", "c": 1003, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "termanix", "c": 181, "avatar": "https://avatars.githubusercontent.com/u/50464194?v=4", "type": "User" }, { "login": "zblurx", "c": 166, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" }, { "login": "azoxlpf", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/213314124?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 99, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "XiaoliChan", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/30458572?v=4", "type": "User" }, { "login": "Kahvi-0", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/46513413?v=4", "type": "User" }, { "login": "tiagomanunes", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/10863794?v=4", "type": "User" }, { "login": "Dfte", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/23189983?v=4", "type": "User" }, { "login": "Adamkadaban", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/34610663?v=4", "type": "User" }, { "login": "d4ytox", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/204069580?v=4", "type": "User" }, { "login": "Mauriceter", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/85106280?v=4", "type": "User" }, { "login": "crosscutsaw", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/73831924?v=4", "type": "User" }, { "login": "juliourena", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/29603107?v=4", "type": "User" }, { "login": "Shad0wC0ntr0ller", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/90877534?v=4", "type": "User" }, { "login": "lodos2005", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/2681526?v=4", "type": "User" }, { "login": "lap1nou", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/10383569?v=4", "type": "User" }, { "login": "haytechy", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/34686858?v=4", "type": "User" }, { "login": "ILightThings", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/27817827?v=4", "type": "User" }, { "login": "Cyb3rC3lt", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4", "type": "User" }, { "login": "XedSama", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/20247169?v=4", "type": "User" }, { "login": "sebrink", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/29733832?v=4", "type": "User" }, { "login": "0x0Trace", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/214216903?v=4", "type": "User" }, { "login": "KriyosArcane", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/60072023?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "n3rada", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "MickeyDB", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/90868907?v=4", "type": "User" }, { "login": "fulc2um", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/75536280?v=4", "type": "User" } ] }, { "repo": "gophish/gophish", "name": "gophish", "owner": "gophish", "url": "https://github.com/gophish/gophish", "stars": 14030, "language": "Go", "description": "Open-Source Phishing Toolkit", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "gophish", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/16602581?v=4" }, "referencedBy": [ { "url": "https://betheadversary.com/posts/get_busy_phishing/", "title": "Get busy phishing, or get busy paying - Microsoft community meetup", "person": "Roei Sherman" }, { "url": "https://blog.tw1sm.io/p/2022-02-21-redlure-setup", "title": "Reintroducing redlure", "person": "Matt Creel" }, { "url": "https://mazinahmed.net/blog/indepth-analysis-twitch-security-tools/", "title": "Twitch Internal Security Tools: In-depth Analysis of the Leaked Twitch Security Tools", "person": "Mazin Ahmed" }, { "url": "https://s3cur3th1ssh1t.github.io/Evade_signature-based-phishing_detections/", "title": "Evade signature-based phishing detections", "person": "Fabian Mosch" } ], "referencedCount": 4, "adoptionOperators": 4, "score": 56, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 44, "contributors": [ { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "login": "Ne0nd0g" } ], "id": "2e7808ace347", "pushedAt": "2024-09-23T04:24:43Z", "archived": false, "topContributors": [ { "login": "jordan-wright", "c": 620, "avatar": "https://avatars.githubusercontent.com/u/1317288?v=4", "type": "User" }, { "login": "wjwoodson", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/7348076?v=4", "type": "User" }, { "login": "glennzw", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/3966613?v=4", "type": "User" }, { "login": "rcutmore", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/873661?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 20, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "StrangeUSB", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6924235?v=4", "type": "User" }, { "login": "shuheiktgw", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/7028383?v=4", "type": "User" }, { "login": "svigne1", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7950563?v=4", "type": "User" }, { "login": "mitprasoon", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3781359?v=4", "type": "User" }, { "login": "dmaciejak", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2658335?v=4", "type": "User" }, { "login": "gliptak", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50109?v=4", "type": "User" }, { "login": "aczietlow", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1714659?v=4", "type": "User" }, { "login": "29vivek", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/37272414?v=4", "type": "User" }, { "login": "xtrasimplicity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9316813?v=4", "type": "User" }, { "login": "philomath213", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20177422?v=4", "type": "User" }, { "login": "dzsibi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4534880?v=4", "type": "User" }, { "login": "Caetan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19588029?v=4", "type": "User" }, { "login": "cschwartz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/358625?v=4", "type": "User" }, { "login": "jake-walker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10981005?v=4", "type": "User" }, { "login": "jonathaningram", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/626664?v=4", "type": "User" }, { "login": "JoseW3b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25183331?v=4", "type": "User" }, { "login": "Kirill89", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2003936?v=4", "type": "User" }, { "login": "mcab", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4522043?v=4", "type": "User" }, { "login": "marksteward", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/121960?v=4", "type": "User" }, { "login": "mattaura", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7576620?v=4", "type": "User" }, { "login": "mnickels", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4460481?v=4", "type": "User" }, { "login": "PaulSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4060683?v=4", "type": "User" }, { "login": "FLX-0x00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26464774?v=4", "type": "User" }, { "login": "wmnnd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7488303?v=4", "type": "User" }, { "login": "rpsteinbrueck", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18668644?v=4", "type": "User" } ] }, { "repo": "michaelgrafnetter/dsinternals", "name": "dsinternals", "owner": "michaelgrafnetter", "url": "https://github.com/MichaelGrafnetter/DSInternals", "stars": 1960, "language": "C#", "description": " Directory Services Internals (DSInternals) PowerShell Module and Framework", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Michael Grafnetter", "cardId": "ca48376ab8cc6ffd", "avatar": "https://avatars.githubusercontent.com/u/8986376?v=4" }, "referencedBy": [ { "url": "https://ipurple.team/2025/09/02/golden-dmsa/", "title": "Golden dMSA", "person": "Panos Gkatziroulis 🦄" } ], "referencedCount": 1, "id": "e832e2e4c500", "score": 56, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 3, "contributorCount": 13, "contributors": [], "pushedAt": "2026-07-04T19:28:39Z", "archived": false, "topContributors": [ { "login": "MichaelGrafnetter", "c": 504, "avatar": "https://avatars.githubusercontent.com/u/8986376?v=4", "type": "User" }, { "login": "matrix", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/15381185?v=4", "type": "User" }, { "login": "aseigler", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6605560?v=4", "type": "User" }, { "login": "azure-pipelines[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/9426?v=4", "type": "Bot" }, { "login": "ciyi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1180432?v=4", "type": "User" }, { "login": "PrzemyslawKlys", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15063294?v=4", "type": "User" }, { "login": "BazirClem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/144218176?v=4", "type": "User" }, { "login": "cdanger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1372580?v=4", "type": "User" }, { "login": "FabienLavocat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4154532?v=4", "type": "User" }, { "login": "cincuranet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4540597?v=4", "type": "User" }, { "login": "Friedricj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11218326?v=4", "type": "User" }, { "login": "rmaksimov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "bluecurby", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45951367?v=4", "type": "User" } ] }, { "repo": "empireproject/empire", "name": "empire", "owner": "empireproject", "url": "https://github.com/EmpireProject/Empire", "stars": 7858, "language": "PowerShell", "description": "Empire is a PowerShell and Python post-exploitation agent.", "type": "tool", "lanes": [ "1" ], "author": { "name": "empireproject", "cardId": null }, "referencedBy": [ { "url": "https://hausec.com/2018/10/08/active-directory-assessment-and-privilege-escalation-script/", "title": "Active Directory Assessment and Privilege Escalation Script 2.0", "person": "Ryan Hausknecht" }, { "url": "https://forensicitguy.github.io/analyzing-empire-macos-pkg-stager/", "title": "Analyzing an Empire macOS PKG Stager", "person": "Tony Lambert" } ], "referencedCount": 2, "id": "dd092ea53ac6", "score": 55, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 36, "mentionDistinct": 36, "contributorCount": 96, "contributors": [ { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "login": "xorrior" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" }, { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "login": "cobbr" }, { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "login": "enigma0x3" }, { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "login": "Kevin-Robertson" }, { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" }, { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4", "login": "curi0usJack" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "login": "DanMcInerney" }, { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "login": "Ne0nd0g" } ], "pushedAt": "2020-01-19T22:50:59Z", "archived": true, "topContributors": [ { "login": "xorrior", "c": 461, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 249, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "cobbr", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "enigma0x3", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "type": "User" }, { "login": "stufus", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/12296344?v=4", "type": "User" }, { "login": "import-au", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/30837560?v=4", "type": "User" }, { "login": "killswitch-GUI", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/8761706?v=4", "type": "User" }, { "login": "DakotaNelson", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/6242741?v=4", "type": "User" }, { "login": "n00py", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/14309124?v=4", "type": "User" }, { "login": "ThePirateWhoSmellsOfSunflowers", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/18633286?v=4", "type": "User" }, { "login": "mr64bit", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/2191440?v=4", "type": "User" }, { "login": "etn-security", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/149513427?v=4", "type": "User" }, { "login": "ihamburglar", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5925087?v=4", "type": "User" }, { "login": "dchrastil", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26440487?v=4", "type": "User" }, { "login": "Kevin-Robertson", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "jamcut", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3229709?v=4", "type": "User" }, { "login": "jarrodcoulter", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7229351?v=4", "type": "User" }, { "login": "nnh100", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/941693?v=4", "type": "User" }, { "login": "secdev02", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/151179166?v=4", "type": "User" }, { "login": "monoxgas", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1223016?v=4", "type": "User" }, { "login": "PierrickV", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8960084?v=4", "type": "User" }, { "login": "matthewneeley", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19346998?v=4", "type": "User" }, { "login": "caleb-sfdcsec", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/33878899?v=4", "type": "User" }, { "login": "tristandostaler", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5489330?v=4", "type": "User" }, { "login": "leoloobeek", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8801754?v=4", "type": "User" }, { "login": "ceramicskate0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6934294?v=4", "type": "User" }, { "login": "s0lst1c3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5394955?v=4", "type": "User" }, { "login": "leesoh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1276654?v=4", "type": "User" }, { "login": "whoot", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8066322?v=4", "type": "User" } ] }, { "repo": "corkami/collisions", "name": "collisions", "owner": "corkami", "url": "https://github.com/corkami/collisions", "id": "7268c4d1b308", "stars": 3390, "language": "Python", "description": "Hash collisions and exploitations", "type": "tool", "pushedAt": "2025-02-20T08:06:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ange Albertini", "cardId": "fd76f4e4fe0c68ad", "avatar": "https://pbs.twimg.com/profile_images/1844256597209485318/dhhelsYw_400x400.jpg" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Niek Timmers", "cardId": "1b58ccc39599844f", "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4", "login": "angea" } ], "adoptionOperators": 39, "score": 55, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "angea", "c": 152, "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4", "type": "User" }, { "login": "DavidBuchanan314", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13520633?v=4", "type": "User" } ] }, { "repo": "darkoperator/dnsrecon", "name": "dnsrecon", "owner": "darkoperator", "url": "https://github.com/darkoperator/dnsrecon", "id": "f5a6f719870c", "stars": 3050, "language": "Python", "description": "DNS Enumeration Script", "type": "tool", "pushedAt": "2026-07-13T05:51:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "login": "mazen160" }, { "name": "David Tomaschik", "cardId": "5709420abaa7a297", "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "login": "Matir" }, { "name": "Michael Hendrickx", "cardId": "e0fcf494618057a9", "avatar": "https://avatars.githubusercontent.com/u/355050?v=4", "login": "ndrix" } ], "adoptionOperators": 2, "score": 55, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 70, "topContributors": [ { "login": "L1ghtn1ng", "c": 300, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "darkoperator", "c": 276, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 169, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "filippolauria", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/4223503?v=4", "type": "User" }, { "login": "tsellers-r7", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/20306699?v=4", "type": "User" }, { "login": "NotoriousRebel", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/36310667?v=4", "type": "User" }, { "login": "leebaird", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "McFacePunch", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/31390595?v=4", "type": "User" }, { "login": "jsoref", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2119212?v=4", "type": "User" }, { "login": "mogigoma", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/130862?v=4", "type": "User" }, { "login": "siloraptor", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/145231499?v=4", "type": "User" }, { "login": "hyperNURb", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/59742?v=4", "type": "User" }, { "login": "cmaruti", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2283072?v=4", "type": "User" }, { "login": "frapava98", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/45664945?v=4", "type": "User" }, { "login": "t0kubetsu", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/243174419?v=4", "type": "User" }, { "login": "mazen160", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "usd-markus", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/47627831?v=4", "type": "User" }, { "login": "hspaans", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1072510?v=4", "type": "User" }, { "login": "Hyatche", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/33911325?v=4", "type": "User" }, { "login": "nojanath", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4381314?v=4", "type": "User" }, { "login": "ret2src", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2010034?v=4", "type": "User" }, { "login": "matugm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1369748?v=4", "type": "User" }, { "login": "clmntb", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8915233?v=4", "type": "User" }, { "login": "yigitsever", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9094218?v=4", "type": "User" }, { "login": "TomSellers", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6500426?v=4", "type": "User" }, { "login": "timols", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/456103?v=4", "type": "User" }, { "login": "kazzarahw", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/155109680?v=4", "type": "User" }, { "login": "kartoch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/160925?v=4", "type": "User" }, { "login": "Matir", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "type": "User" }, { "login": "branchv", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19800529?v=4", "type": "User" } ] }, { "repo": "dirkjanm/krbrelayx", "name": "krbrelayx", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/krbrelayx", "stars": 1624, "language": "Python", "description": "Kerberos relaying and unconstrained delegation abuse toolkit", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/", "title": "Relaying Kerberos over DNS using krbrelayx and mitm6", "person": "Dirk-jan Mollema" }, { "url": "https://dirkjanm.io/krbrelayx-unconstrained-delegation-abuse-toolkit/", "title": "“Relaying” Kerberos - Having fun with unconstrained delegation", "person": "Dirk-jan Mollema" }, { "url": "https://blog.tw1sm.io/p/keeping-up-with-the-ntlm-relay", "title": "Keeping Up with the NTLM Relay", "person": "Matt Creel" } ], "referencedCount": 3, "id": "a9c9943becbc", "score": 54, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 3, "contributorCount": 19, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "pushedAt": "2026-03-11T22:16:43Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "hugo-syn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "i128", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2417131?v=4", "type": "User" }, { "login": "0x5ECF4ULT", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17967646?v=4", "type": "User" }, { "login": "4ndr34z", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8947165?v=4", "type": "User" }, { "login": "5tuk0v", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90915844?v=4", "type": "User" }, { "login": "rtpt-erikgeiser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70747329?v=4", "type": "User" }, { "login": "laxa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" }, { "login": "Lz1y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23468993?v=4", "type": "User" }, { "login": "MaxToffy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91328785?v=4", "type": "User" }, { "login": "MrAle98", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74059030?v=4", "type": "User" }, { "login": "b1two-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90333807?v=4", "type": "User" }, { "login": "Ramzeth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25324933?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "Tw1sm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "q-roland", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "zar3bski", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22128014?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/offensivenim", "name": "OffensiveNim", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/OffensiveNim", "id": "99072b304601", "stars": 3076, "language": "Nim", "description": "My experiments in weaponizing Nim (https://nim-lang.org/)", "type": "tool", "pushedAt": "2024-05-13T15:27:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "login": "S3cur3Th1sSh1t" }, { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "login": "jfmaes" } ], "adoptionOperators": 1, "score": 53, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 21, "topContributors": [ { "login": "byt3bl33d3r", "c": 79, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "S3cur3Th1sSh1t", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "FurkanAyar", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5422778?v=4", "type": "User" }, { "login": "HuskyHacks", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/57866415?v=4", "type": "User" }, { "login": "m4ul3r", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/75012320?v=4", "type": "User" }, { "login": "Tycx2ry", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6139198?v=4", "type": "User" }, { "login": "fkadibs", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11808043?v=4", "type": "User" }, { "login": "jfmaes", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" }, { "login": "x42en", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11926870?v=4", "type": "User" }, { "login": "AbstractClass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10750313?v=4", "type": "User" }, { "login": "itaymigdal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32266629?v=4", "type": "User" }, { "login": "0xEr3bus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/71999752?v=4", "type": "User" }, { "login": "0xHop", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79155809?v=4", "type": "User" }, { "login": "opexxx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/106825?v=4", "type": "User" }, { "login": "Alh4zr3d", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31547911?v=4", "type": "User" }, { "login": "NotoriousRebel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36310667?v=4", "type": "User" }, { "login": "nodauf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7670696?v=4", "type": "User" }, { "login": "VVX7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46228229?v=4", "type": "User" }, { "login": "ILightThings", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27817827?v=4", "type": "User" }, { "login": "whydee86", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43274863?v=4", "type": "User" }, { "login": "zhangding222", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42668898?v=4", "type": "User" } ] }, { "repo": "chvancooten/follina.py", "name": "follina.py", "owner": "chvancooten", "url": "https://github.com/chvancooten/follina.py", "stars": 1145, "language": "Smarty", "description": "POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8b27f1b8a13", "score": 53, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 2, "contributorCount": 4, "contributors": [], "pushedAt": "2023-02-24T16:08:08Z", "archived": false, "topContributors": [ { "login": "chvancooten", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "DanusMinimus", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/60087084?v=4", "type": "User" }, { "login": "aidenmitchell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30846409?v=4", "type": "User" }, { "login": "mosajjal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10158936?v=4", "type": "User" } ] }, { "repo": "harmj0y/asreproast", "name": "asreproast", "owner": "harmj0y", "url": "https://github.com/HarmJ0y/ASREPRoast", "stars": 209, "language": "PowerShell", "description": "Project that retrieves crackable hashes from KRB5 AS-REP responses for users without kerberoast preauthentication enabled.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b3df77f0728", "score": 53, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 4, "mentionDistinct": 5, "contributorCount": 1, "contributors": [], "pushedAt": "2018-09-25T03:26:00Z", "archived": false, "topContributors": [ { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "api0cradle/ultimateapplockerbypasslist", "name": "ultimateapplockerbypasslist", "owner": "api0cradle", "url": "https://github.com/api0cradle/UltimateAppLockerByPassList", "stars": 2075, "language": "PowerShell", "description": "The goal of this repository is to document the most common techniques to bypass AppLocker. ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [ { "url": "https://oddvar.moe/2017/12/13/applocker-case-study-how-insecure-is-it-really-part-1/", "title": "AppLocker – Case study – How insecure is it really? – Part 1", "person": "Oddvar Moe" }, { "url": "https://oddvar.moe/2017/12/21/applocker-case-study-how-insecure-is-it-really-part-2/", "title": "AppLocker – Case study – How insecure is it really? – Part 2", "person": "Oddvar Moe" } ], "referencedCount": 2, "id": "1e59c9e18104", "score": 52, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 5, "contributors": [], "pushedAt": "2023-09-11T20:43:25Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" }, { "login": "jpginc", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2696824?v=4", "type": "User" }, { "login": "AnaDr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/114407377?v=4", "type": "User" }, { "login": "altonius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6408196?v=4", "type": "User" }, { "login": "coolhome", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/700740?v=4", "type": "User" } ] }, { "repo": "alexandreborges/malwoverview", "name": "malwoverview", "owner": "alexandreborges", "url": "https://github.com/alexandreborges/malwoverview", "stars": 3948, "language": "Python", "description": "Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, Abu", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Alexandre Borges", "cardId": "09cb1fe88734c640", "avatar": "https://avatars.githubusercontent.com/u/13165245?v=4" }, "referencedBy": [ { "url": "https://exploitreversing.com/2021/11/02/malicious-document-analysis-example-1/", "title": "Malicious Document Analysis: Example 1", "person": "Alexandre Borges" } ], "referencedCount": 1, "id": "4133573d0413", "score": 51, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-06-26T16:12:44Z", "archived": false, "topContributors": [ { "login": "alexandreborges", "c": 576, "avatar": "https://avatars.githubusercontent.com/u/13165245?v=4", "type": "User" }, { "login": "Macmod", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/6147168?v=4", "type": "User" }, { "login": "digitalsleuth", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/62841822?v=4", "type": "User" }, { "login": "cclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/winpwn", "name": "winpwn", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/WinPwn", "stars": 3680, "language": "PowerShell", "description": "Automation for internal Windows Penetrationtest / AD-Security", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9f1609fb0002", "score": 51, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-08-28T13:07:26Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 321, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "web-flow", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/19864447?v=4", "type": "User" }, { "login": "0x23353435", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48300394?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" } ] }, { "repo": "klezvirus/syswhispers3", "name": "syswhispers3", "owner": "klezvirus", "url": "https://github.com/klezVirus/SysWhispers3", "stars": 1651, "language": "Python", "description": "SysWhispers on Steroids - AV/EDR evasion via direct system calls. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d4ba53042919", "score": 51, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 3, "contributors": [], "pushedAt": "2024-07-31T05:24:06Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "ScriptIdiot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21979646?v=4", "type": "User" } ] }, { "repo": "0xdea/exploits", "name": "exploits", "owner": "0xdea", "url": "https://github.com/0xdea/exploits", "id": "0687bbbdb92a", "stars": 676, "language": "C", "description": "A handy collection of my public exploits, all in one place.", "type": "tool", "pushedAt": "2026-01-06T08:37:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 209, "score": 51, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "dirkjanm/pkinittools", "name": "pkinittools", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/PKINITtools", "stars": 911, "language": "Python", "description": "Tools for Kerberos PKINIT and relaying to AD CS", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/", "title": "Relaying Kerberos over DNS using krbrelayx and mitm6", "person": "Dirk-jan Mollema" }, { "url": "https://0xdf.gitlab.io/2022/12/10/htb-outdated.html", "title": "HTB: Outdated", "person": "0xdf" }, { "url": "https://blog.tw1sm.io/p/keeping-up-with-the-ntlm-relay", "title": "Keeping Up with the NTLM Relay", "person": "Matt Creel" } ], "referencedCount": 3, "id": "5f3b5db2f310", "score": 50, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 3, "contributors": [ { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" } ], "pushedAt": "2025-01-03T14:25:52Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "MalwareMike88", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/126218162?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" } ] }, { "repo": "didierstevens/didierstevenssuite", "name": "didierstevenssuite", "owner": "didierstevens", "url": "https://github.com/DidierStevens/DidierStevensSuite", "stars": 2509, "language": "Python", "description": "Please no pull requests for this repository. Thanks!", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Didier Stevens", "cardId": "6e6419e4e6c26da2", "avatar": "https://avatars.githubusercontent.com/u/6815601?v=4" }, "referencedBy": [ { "url": "https://thomaspreece.com/2021/03/15/nathamcon-ctf-2021/", "title": "NathamCon - CTF 2021 - Thomas Preece", "person": "Thomas Preece" } ], "referencedCount": 1, "id": "3ae04a7e5157", "score": 50, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-14T16:36:29Z", "archived": false, "topContributors": [ { "login": "DidierStevens", "c": 445, "avatar": "https://avatars.githubusercontent.com/u/6815601?v=4", "type": "User" } ] }, { "repo": "nicocha30/ligolo-ng", "name": "ligolo-ng", "owner": "nicocha30", "url": "https://github.com/nicocha30/ligolo-ng", "stars": 4751, "language": "Go", "description": "An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "Nicolas Chatelain", "cardId": "304923d9c796913d", "avatar": "https://avatars.githubusercontent.com/u/31402213?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 14, "contributors": [], "id": "b3e13446c30e", "pushedAt": "2026-07-13T17:27:35Z", "archived": false, "topContributors": [ { "login": "nicocha30", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/31402213?v=4", "type": "User" }, { "login": "ElGrandeCha", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/177214494?v=4", "type": "User" }, { "login": "CarrotCultivator", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/104069328?v=4", "type": "User" }, { "login": "joehacksalot", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9135327?v=4", "type": "User" }, { "login": "virusvfv", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/41779447?v=4", "type": "User" }, { "login": "letmedr3am", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50459401?v=4", "type": "User" }, { "login": "jdholtz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/89617856?v=4", "type": "User" }, { "login": "jvinnedge", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/467803?v=4", "type": "User" }, { "login": "jinncoder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6900588?v=4", "type": "User" }, { "login": "dismantl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2007008?v=4", "type": "User" }, { "login": "TrixterTheTux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10120342?v=4", "type": "User" }, { "login": "mudhafarx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124092613?v=4", "type": "User" }, { "login": "noderaven", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/130021665?v=4", "type": "User" }, { "login": "magev0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91535529?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/pentest-tools", "name": "pentest-tools", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Pentest-Tools", "stars": 2403, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c639558e59f5", "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-10-06T16:56:36Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "jonaslejon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/190150?v=4", "type": "User" }, { "login": "nil0x42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3504393?v=4", "type": "User" }, { "login": "sophisticcitizen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54893524?v=4", "type": "User" } ] }, { "repo": "a13xp0p0v/linux-kernel-defence-map", "name": "linux-kernel-defence-map", "owner": "a13xp0p0v", "url": "https://github.com/a13xp0p0v/linux-kernel-defence-map", "id": "1f40597792f0", "stars": 2307, "language": null, "description": "Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies", "type": "tool", "pushedAt": "2026-05-24T19:22:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexander Popov", "cardId": "2327dd257a083e59", "avatar": "https://avatars.githubusercontent.com/u/1419667?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "a13xp0p0v", "c": 343, "avatar": "https://avatars.githubusercontent.com/u/1419667?v=4", "type": "User" }, { "login": "ramosian-glider", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/912627?v=4", "type": "User" }, { "login": "Self-Perfection", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3757038?v=4", "type": "User" }, { "login": "idl3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11041719?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/amsi-bypass-powershell", "name": "amsi-bypass-powershell", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell", "stars": 2181, "language": null, "description": "This repo contains some Amsi Bypass methods i found on different Blog Posts.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b05cdfc0b4d5", "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-28T10:31:15Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "klezvirus/silentmoonwalk", "name": "silentmoonwalk", "owner": "klezvirus", "url": "https://github.com/klezVirus/SilentMoonwalk", "stars": 974, "language": "C++", "description": "PoC Implementation of a fully dynamic call stack spoofer", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "17e54b60ac6f", "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-20T10:41:31Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "p0dalirius/ldapmonitor", "name": "ldapmonitor", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/LDAPmonitor", "stars": 944, "language": "C#", "description": "Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "792e49843c3e", "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 5, "contributors": [], "pushedAt": "2025-10-30T07:42:55Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "cclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "int3x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38261849?v=4", "type": "User" }, { "login": "lefayjey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25101526?v=4", "type": "User" }, { "login": "p4yl0ad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57832389?v=4", "type": "User" } ] }, { "repo": "garrettfoster13/sccmhunter", "name": "sccmhunter", "owner": "garrettfoster13", "url": "https://github.com/garrettfoster13/sccmhunter", "stars": 931, "language": "Python", "description": "SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e2ba131a7669", "score": 50, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 23, "contributors": [ { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" }, { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "login": "xpn" }, { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "login": "parzel" } ], "pushedAt": "2026-06-25T23:01:43Z", "archived": false, "topContributors": [ { "login": "garrettfoster13", "c": 189, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" }, { "login": "chryzsh", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" }, { "login": "Mayyhem", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" }, { "login": "onSec-fr", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/59887731?v=4", "type": "User" }, { "login": "bandrel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "mfdooom", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17692365?v=4", "type": "User" }, { "login": "Adamkadaban", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34610663?v=4", "type": "User" }, { "login": "RalphDesmangles", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35283608?v=4", "type": "User" }, { "login": "purpole", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/101905225?v=4", "type": "User" }, { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" }, { "login": "dirkjanm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "jsatest", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/164928626?v=4", "type": "User" }, { "login": "MrFey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56316531?v=4", "type": "User" }, { "login": "GheekyByt3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41960139?v=4", "type": "User" }, { "login": "TheToddLuci0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26094248?v=4", "type": "User" }, { "login": "Wyndoo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202446836?v=4", "type": "User" }, { "login": "i-am-not-an-ai", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54160721?v=4", "type": "User" }, { "login": "i128", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2417131?v=4", "type": "User" }, { "login": "l33tluigi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9909519?v=4", "type": "User" }, { "login": "n00py", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14309124?v=4", "type": "User" }, { "login": "null-cell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36705358?v=4", "type": "User" }, { "login": "parzel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" }, { "login": "v1stra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49531141?v=4", "type": "User" } ] }, { "repo": "fortra/nanodump", "name": "nanodump", "owner": "fortra", "url": "https://github.com/fortra/nanodump", "stars": 2127, "language": "C", "description": "The swiss army knife of LSASS dumping", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "fortra", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/117669217?v=4" }, "referencedBy": [ { "url": "https://code-white.com/blog/2022-09-attacks-on-sysmon-revisited-sysmonente/", "title": "CODE WHITE | Attacks on Sysmon Revisited - SysmonEnte", "person": "Sebastian Feldmann" }, { "url": "https://klezvirus.github.io/posts/NoSysWhispers/", "title": "SysWhispers is dead, long live SysWhispers!", "person": "klez" }, { "url": "https://trustedsec.com/blog/disabling-av-with-process-suspension", "title": "Disabling AV With Process Suspension", "person": "Christopher Paschen" } ], "referencedCount": 3, "adoptionOperators": 3, "score": 49, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 6, "contributors": [ { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "login": "antonioCoco" } ], "id": "9f494cd71018", "pushedAt": "2024-09-17T22:58:11Z", "archived": false, "topContributors": [ { "login": "S4ntiagoP", "c": 228, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "nurfed1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8027846?v=4", "type": "User" }, { "login": "5yn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25803146?v=4", "type": "User" }, { "login": "theogobinet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30470719?v=4", "type": "User" }, { "login": "antonioCoco", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "binarytrails", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5713600?v=4", "type": "User" } ] }, { "repo": "ropnop/kerbrute", "name": "kerbrute", "owner": "ropnop", "url": "https://github.com/ropnop/kerbrute", "stars": 3382, "language": "Go", "description": "A tool to perform Kerberos pre-auth bruteforcing", "type": "tool", "lanes": [ "1", "2", "curated" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2021/04/10/htb-apt.html", "title": "HTB: APT", "person": "0xdf" } ], "referencedCount": 1, "id": "ec88cbc0971b", "score": 49, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "canonical": true, "contributorCount": 2, "contributors": [], "pushedAt": "2024-08-20T10:56:06Z", "archived": false, "topContributors": [ { "login": "ropnop", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "audibleblink", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4605783?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/sprayingtoolkit", "name": "sprayingtoolkit", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/SprayingToolkit", "stars": 1576, "language": "Python", "description": "Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2021/03/13/htb-reel2.html", "title": "HTB: Reel2", "person": "0xdf" } ], "referencedCount": 1, "id": "1ef04c7dbdba", "score": 49, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 6, "contributors": [ { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" } ], "pushedAt": "2022-10-17T01:01:57Z", "archived": true, "topContributors": [ { "login": "byt3bl33d3r", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "alxbl", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/860411?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "Dave1840438", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9748380?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "MaxNad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3847037?v=4", "type": "User" } ] }, { "repo": "dirkjanm/cve-2020-1472", "name": "cve-2020-1472", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/CVE-2020-1472", "stars": 1311, "language": "Python", "description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2020/09/17/zerologon-owning-htb-machines-with-cve-2020-1472.html", "title": "ZeroLogon - Owning HTB machines with CVE-2020-1472", "person": "0xdf" } ], "referencedCount": 1, "id": "eee347299167", "score": 49, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-03T09:45:24Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" } ] }, { "repo": "rapid7/metasploit-framework", "name": "metasploit-framework", "owner": "rapid7", "url": "https://github.com/rapid7/metasploit-framework", "id": "4343acca1540", "stars": 38597, "language": "Ruby", "description": "Metasploit Framework", "type": "tool", "pushedAt": "2026-07-18T00:16:31Z", "archived": false, "lanes": [ "curated" ], "canonical": true, "author": { "name": "rapid7", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/1013671?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 100, "contributors": [ { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "login": "sfewer-r7" }, { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" }, { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "login": "qkaiser" }, { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "login": "shipcod3" }, { "name": "Steven Seeley", "cardId": "fde791457a7ce34d", "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "login": "stevenseeley" }, { "name": "András Kabai", "cardId": "82aa039ea4465e64", "avatar": "https://avatars.githubusercontent.com/u/3336678?v=4", "login": "andrewkabai" } ], "topContributors": [ { "login": "wvu", "c": 3648, "avatar": "https://avatars.githubusercontent.com/u/4551878?v=4", "type": "User" }, { "login": "msjenkins-r7", "c": 2912, "avatar": "https://avatars.githubusercontent.com/u/5332090?v=4", "type": "User" }, { "login": "h00die", "c": 1758, "avatar": "https://avatars.githubusercontent.com/u/752491?v=4", "type": "User" }, { "login": "gwillcox-r7", "c": 1451, "avatar": "https://avatars.githubusercontent.com/u/63261883?v=4", "type": "User" }, { "login": "jheysel-r7", "c": 1078, "avatar": "https://avatars.githubusercontent.com/u/23320005?v=4", "type": "User" }, { "login": "adfoster-r7", "c": 1044, "avatar": "https://avatars.githubusercontent.com/u/60357436?v=4", "type": "User" }, { "login": "bcoles", "c": 629, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "Chocapikk", "c": 543, "avatar": "https://avatars.githubusercontent.com/u/88535377?v=4", "type": "User" }, { "login": "jrobles-r7", "c": 413, "avatar": "https://avatars.githubusercontent.com/u/23102036?v=4", "type": "User" }, { "login": "sfewer-r7", "c": 379, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" }, { "login": "h00die-gr3y", "c": 311, "avatar": "https://avatars.githubusercontent.com/u/38109035?v=4", "type": "User" }, { "login": "Takahiro-Yoko", "c": 256, "avatar": "https://avatars.githubusercontent.com/u/70351033?v=4", "type": "User" }, { "login": "cgranleese-r7", "c": 255, "avatar": "https://avatars.githubusercontent.com/u/69522014?v=4", "type": "User" }, { "login": "smcintyre-r7", "c": 207, "avatar": "https://avatars.githubusercontent.com/u/58950994?v=4", "type": "User" }, { "login": "ErikWynter", "c": 159, "avatar": "https://avatars.githubusercontent.com/u/55885619?v=4", "type": "User" }, { "login": "rad10", "c": 158, "avatar": "https://avatars.githubusercontent.com/u/11878508?v=4", "type": "User" }, { "login": "cbrnrd", "c": 154, "avatar": "https://avatars.githubusercontent.com/u/16970798?v=4", "type": "User" }, { "login": "aushack", "c": 149, "avatar": "https://avatars.githubusercontent.com/u/1175434?v=4", "type": "User" }, { "login": "heyder", "c": 147, "avatar": "https://avatars.githubusercontent.com/u/1169692?v=4", "type": "User" }, { "login": "nixawk", "c": 146, "avatar": "https://avatars.githubusercontent.com/u/7352479?v=4", "type": "User" }, { "login": "red0xff", "c": 144, "avatar": "https://avatars.githubusercontent.com/u/8383836?v=4", "type": "User" }, { "login": "cn-kali-team", "c": 141, "avatar": "https://avatars.githubusercontent.com/u/30642514?v=4", "type": "User" }, { "login": "ebleiweiss-r7", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/41024958?v=4", "type": "User" }, { "login": "h4x-x0r", "c": 138, "avatar": "https://avatars.githubusercontent.com/u/152236528?v=4", "type": "User" }, { "login": "rbowes-r7", "c": 130, "avatar": "https://avatars.githubusercontent.com/u/104588115?v=4", "type": "User" }, { "login": "RootUp", "c": 127, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" }, { "login": "qkaiser", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" }, { "login": "Green-m", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/22535454?v=4", "type": "User" }, { "login": "pingport80", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/43883877?v=4", "type": "User" }, { "login": "shipcod3", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" } ] }, { "repo": "klezvirus/inceptor", "name": "inceptor", "owner": "klezvirus", "url": "https://github.com/klezVirus/inceptor", "stars": 1809, "language": "Assembly", "description": "Template-Driven AV/EDR Evasion Framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "566e284a19f3", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-03T09:33:21Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "chvancooten/maldev-for-dummies", "name": "maldev-for-dummies", "owner": "chvancooten", "url": "https://github.com/chvancooten/maldev-for-dummies", "stars": 1807, "language": "Nim", "description": "A workshop about Malware Development", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "42e2fb285e4b", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-06-02T08:09:33Z", "archived": false, "topContributors": [ { "login": "chvancooten", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "nodauf", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/7670696?v=4", "type": "User" }, { "login": "Knowa42", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3172679?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "byt3bl33d3r/deathstar", "name": "deathstar", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/DeathStar", "stars": 1618, "language": "Python", "description": "Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTP", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b4205f0564a7", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [ { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "login": "utkusen" } ], "pushedAt": "2024-01-23T10:24:34Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "m4st3rCh13f3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25395681?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "bandrel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "wikijm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10724809?v=4", "type": "User" }, { "login": "utkusen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" }, { "login": "th3gundy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6793697?v=4", "type": "User" } ] }, { "repo": "matterpreter/offensivecsharp", "name": "offensivecsharp", "owner": "matterpreter", "url": "https://github.com/matterpreter/OffensiveCSharp", "stars": 1472, "language": "C#", "description": "Collection of Offensive C# Tooling", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4fa82c120b72", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" } ], "pushedAt": "2023-02-06T14:56:26Z", "archived": false, "topContributors": [ { "login": "matterpreter", "c": 88, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" }, { "login": "djhohnstein", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "breakid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1446918?v=4", "type": "User" } ] }, { "repo": "chvancooten/osep-code-snippets", "name": "osep-code-snippets", "owner": "chvancooten", "url": "https://github.com/chvancooten/OSEP-Code-Snippets", "stars": 1456, "language": "C#", "description": "A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fe08fd3e0969", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-07-27T11:54:56Z", "archived": false, "topContributors": [ { "login": "chvancooten", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "Pal1Sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62672762?v=4", "type": "User" }, { "login": "carlmon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/450101?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/gcat", "name": "gcat", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/gcat", "stars": 1351, "language": "Python", "description": "A PoC backdoor that uses Gmail as a C&C server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a262fd40fcb4", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-11-16T13:43:15Z", "archived": true, "topContributors": [ { "login": "byt3bl33d3r", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/offensivevba", "name": "offensivevba", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/OffensiveVBA", "stars": 1275, "language": "VBA", "description": "This repo covers some code execution and AV Evasion methods for Macros in Office documents", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a993a4f0c743", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Samir", "cardId": "e4db282b511228b1", "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4", "login": "sbousseaden" } ], "pushedAt": "2022-01-27T20:42:21Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "sbousseaden", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4", "type": "User" }, { "login": "serkonda7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40118727?v=4", "type": "User" } ] }, { "repo": "tyranid/exploitremotingservice", "name": "exploitremotingservice", "owner": "tyranid", "url": "https://github.com/tyranid/ExploitRemotingService", "stars": 539, "language": "C#", "description": "A tool to exploit .NET Remoting Services", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2394393c9fc1", "score": 49, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 4, "contributors": [ { "name": "Markus Wulftange", "cardId": "47958d8bd725fdd0", "avatar": "https://avatars.githubusercontent.com/u/92552?v=4", "login": "mwulftange" } ], "pushedAt": "2024-07-31T09:25:52Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" }, { "login": "mwulftange", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/92552?v=4", "type": "User" }, { "login": "Meatballs1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "MyEyes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1470883?v=4", "type": "User" } ] }, { "repo": "peass-ng/peass-ng", "name": "peass-ng", "owner": "peass-ng", "url": "https://github.com/peass-ng/PEASS-ng", "stars": 20154, "language": "C#", "description": "PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "peass-ng", "cardId": null }, "referencedBy": [], "referencedCount": 0, "id": "0026ad451b7c", "score": 48, "signals": { "cited": false, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "canonical": true, "contributorCount": 100, "contributors": [ { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "login": "carlospolop" }, { "name": "Galoget Latorre", "cardId": "38fb4b9abe4642f1", "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "login": "galoget" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "login": "frkngksl" }, { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "login": "chvancooten" } ], "pushedAt": "2026-07-15T06:21:46Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 1510, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "makikvues", "c": 107, "avatar": "https://avatars.githubusercontent.com/u/76483053?v=4", "type": "User" }, { "login": "RandolphConley", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/66429499?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 16, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "galoget", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "type": "User" }, { "login": "shadowabi", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/50265741?v=4", "type": "User" }, { "login": "Esonhugh", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/32677240?v=4", "type": "User" }, { "login": "AidanFeess", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/145503050?v=4", "type": "User" }, { "login": "godylockz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/81207744?v=4", "type": "User" }, { "login": "Signum21", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "meme-lord", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17912559?v=4", "type": "User" }, { "login": "kkreiju", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/138178348?v=4", "type": "User" }, { "login": "DidierA", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1620015?v=4", "type": "User" }, { "login": "z0ug", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/33007420?v=4", "type": "User" }, { "login": "acmello", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1427086?v=4", "type": "User" }, { "login": "ThisLimn0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/67125885?v=4", "type": "User" }, { "login": "giveen", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1180939?v=4", "type": "User" }, { "login": "NonzeroExitCode", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9432266?v=4", "type": "User" }, { "login": "sttlr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/40246850?v=4", "type": "User" }, { "login": "tropkal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/48250542?v=4", "type": "User" }, { "login": "zoork11", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61117325?v=4", "type": "User" }, { "login": "wonda-tea-coffee", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39144575?v=4", "type": "User" }, { "login": "sw33tr0ll", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29440697?v=4", "type": "User" }, { "login": "smidgedy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32331364?v=4", "type": "User" }, { "login": "sammonsempes", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/245394132?v=4", "type": "User" }, { "login": "CravateRouge", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16681900?v=4", "type": "User" }, { "login": "gcorrall", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4834451?v=4", "type": "User" }, { "login": "JohannesLks", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/74617774?v=4", "type": "User" }, { "login": "deoxykev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/37129444?v=4", "type": "User" } ] }, { "repo": "maurosoria/dirsearch", "name": "dirsearch", "owner": "maurosoria", "url": "https://github.com/maurosoria/dirsearch", "stars": 14506, "language": "Python", "description": "Web path scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Soria", "cardId": "84ea6a56d15e6cfc", "avatar": "https://avatars.githubusercontent.com/u/1757675?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d8a384f8708", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 4, "contributorCount": 90, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" }, { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "login": "mazen160" }, { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "login": "infosec-au" } ], "pushedAt": "2026-07-01T03:25:55Z", "archived": false, "topContributors": [ { "login": "shelld3v", "c": 1234, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" }, { "login": "maurosoria", "c": 968, "avatar": "https://avatars.githubusercontent.com/u/1757675?v=4", "type": "User" }, { "login": "wdahlenburg", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/4451504?v=4", "type": "User" }, { "login": "zrquan", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/33086594?v=4", "type": "User" }, { "login": "drego85", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/2007233?v=4", "type": "User" }, { "login": "claude", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" }, { "login": "ricardojba", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/4868297?v=4", "type": "User" }, { "login": "GDATTACKER-RESEARCHER", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/37478652?v=4", "type": "User" }, { "login": "random-robbie", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "V-Rico", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5669698?v=4", "type": "User" }, { "login": "liamosaur", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2960928?v=4", "type": "User" }, { "login": "cclauss", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "Xib3rR4dAr", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/24238512?v=4", "type": "User" }, { "login": "chowmean", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5270622?v=4", "type": "User" }, { "login": "godspeedcurry", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/27125288?v=4", "type": "User" }, { "login": "XinRoom", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/32238570?v=4", "type": "User" }, { "login": "exploide", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "tkisason", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/577380?v=4", "type": "User" }, { "login": "Sjord", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/113030?v=4", "type": "User" }, { "login": "shahrilnet", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2675341?v=4", "type": "User" }, { "login": "noraj", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "huyphan", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/95884?v=4", "type": "User" }, { "login": "kosyan62", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55162485?v=4", "type": "User" }, { "login": "notdodo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6991986?v=4", "type": "User" }, { "login": "0x0d3ad", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18898977?v=4", "type": "User" }, { "login": "its0x08", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15280042?v=4", "type": "User" }, { "login": "valentijnscholten", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4426050?v=4", "type": "User" }, { "login": "partoneplay", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5189132?v=4", "type": "User" }, { "login": "HiitCat", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/54847071?v=4", "type": "User" }, { "login": "laxa", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" } ] }, { "repo": "ne0nd0g/go-shellcode", "name": "go-shellcode", "owner": "ne0nd0g", "url": "https://github.com/Ne0nd0g/go-shellcode", "stars": 1193, "language": "Go", "description": "A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "44093a138bcf", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-25T05:23:02Z", "archived": false, "topContributors": [ { "login": "Ne0nd0g", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/creds", "name": "creds", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Creds", "stars": 1171, "language": "PowerShell", "description": "Some usefull Scripts and Executables for Pentest & Forensics", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4b8be0c4329e", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 61, "contributorCount": 3, "contributors": [], "pushedAt": "2026-06-23T17:29:50Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 527, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "web-flow", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/19864447?v=4", "type": "User" }, { "login": "snovvcrash", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" } ] }, { "repo": "mrphrazer/reverser_ai", "name": "reverser_ai", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/reverser_ai", "id": "838435fb0b77", "stars": 1114, "language": "Python", "description": "Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.", "type": "tool", "pushedAt": "2026-05-20T11:24:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mrphrazer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" }, { "login": "L4ys", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5360374?v=4", "type": "User" } ] }, { "repo": "mgeeky/redwarden", "name": "redwarden", "owner": "mgeeky", "url": "https://github.com/mgeeky/RedWarden", "stars": 997, "language": "Python", "description": "Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9d8be0047459", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2022-10-07T14:05:25Z", "archived": true, "topContributors": [ { "login": "mgeeky", "c": 236, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "inaz2", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/2763888?v=4", "type": "User" }, { "login": "mre", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/175809?v=4", "type": "User" }, { "login": "ptr0x1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5557407?v=4", "type": "User" }, { "login": "eqn-grp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/81374084?v=4", "type": "User" } ] }, { "repo": "chvancooten/bugbountyscanner", "name": "BugBountyScanner", "owner": "chvancooten", "url": "https://github.com/chvancooten/BugBountyScanner", "id": "de200b142c43", "stars": 921, "language": "Shell", "description": "A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.", "type": "tool", "pushedAt": "2025-11-19T12:44:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "chvancooten", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" }, { "login": "theinit01", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/75197616?v=4", "type": "User" }, { "login": "denvera", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4190824?v=4", "type": "User" }, { "login": "iamrgroot", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8398505?v=4", "type": "User" }, { "login": "romanpeters", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16854957?v=4", "type": "User" }, { "login": "unstabl3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48474764?v=4", "type": "User" }, { "login": "uug4na", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65070195?v=4", "type": "User" } ] }, { "repo": "p0dalirius/apachetomcatscanner", "name": "ApacheTomcatScanner", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/ApacheTomcatScanner", "id": "9a5b0423647a", "stars": 892, "language": "Python", "description": "A python script to scan for Apache Tomcat server vulnerabilities. ", "type": "tool", "pushedAt": "2026-01-12T09:08:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "p0dalirius", "c": 116, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Darkiros", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/37926502?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "Sandr0x00", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12230153?v=4", "type": "User" }, { "login": "Skadiia", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19289551?v=4", "type": "User" }, { "login": "laxa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" }, { "login": "s0meguy1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25542926?v=4", "type": "User" }, { "login": "cosad3s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2116674?v=4", "type": "User" }, { "login": "tjni", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3806110?v=4", "type": "User" }, { "login": "romisfrag", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16926952?v=4", "type": "User" }, { "login": "tolfsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/121193704?v=4", "type": "User" } ] }, { "repo": "zyn3rgy/ldaprelayscan", "name": "ldaprelayscan", "owner": "zyn3rgy", "url": "https://github.com/zyn3rgy/LdapRelayScan", "stars": 531, "language": "Python", "description": "Check for LDAP protections regarding the relay of NTLM authentication", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Powers", "cardId": "080005eb8cc17cd7", "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "469ade2a5379", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 5, "contributors": [ { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "login": "subat0mik" } ], "pushedAt": "2024-11-19T21:11:53Z", "archived": false, "topContributors": [ { "login": "zyn3rgy", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4", "type": "User" }, { "login": "t94j0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5448134?v=4", "type": "User" }, { "login": "progShu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/57837911?v=4", "type": "User" }, { "login": "subat0mik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" }, { "login": "yofbalibump", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63809488?v=4", "type": "User" } ] }, { "repo": "zyn3rgy/relayinformer", "name": "relayinformer", "owner": "zyn3rgy", "url": "https://github.com/zyn3rgy/RelayInformer", "stars": 181, "language": "C", "description": "Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Powers", "cardId": "080005eb8cc17cd7", "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "08dc4257d6e2", "score": 48, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 2, "contributorCount": 3, "contributors": [ { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "pushedAt": "2026-05-31T03:26:43Z", "archived": false, "topContributors": [ { "login": "zyn3rgy", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4", "type": "User" }, { "login": "Tw1sm", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "Signum21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" } ] }, { "repo": "jpillora/chisel", "name": "chisel", "owner": "jpillora", "url": "https://github.com/jpillora/chisel", "stars": 16247, "language": "Go", "description": "A fast TCP/UDP tunnel over HTTP", "type": "tool", "lanes": [ "1", "curated" ], "author": { "name": "jpillora", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2019/04/15/commando-vm-lessons.html", "title": "Commando VM: Lessons Learned", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/05/03/htb-antique.html", "title": "HTB: Antique", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/cheatsheets/chisel", "title": "Tunneling with Chisel and SSF", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/06/01/htb-sizzle.html", "title": "HTB: Sizzle", "person": "0xdf" } ], "referencedCount": 4, "id": "853066720289", "score": 47, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 5, "canonical": true, "contributorCount": 38, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2026-07-17T15:13:04Z", "archived": false, "topContributors": [ { "login": "jpillora", "c": 133, "avatar": "https://avatars.githubusercontent.com/u/633843?v=4", "type": "User" }, { "login": "noahsbwilliams", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/28913089?v=4", "type": "User" }, { "login": "aus", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/549081?v=4", "type": "User" }, { "login": "sunshineco", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/163641?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Meteorite", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1032209?v=4", "type": "User" }, { "login": "xtyxtyx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/15033141?v=4", "type": "User" }, { "login": "Copilot", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "jinncoder", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6900588?v=4", "type": "User" }, { "login": "iineva", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16098184?v=4", "type": "User" }, { "login": "srueg", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1105286?v=4", "type": "User" }, { "login": "gambol99", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4280679?v=4", "type": "User" }, { "login": "astravexton", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3042219?v=4", "type": "User" }, { "login": "GuillaumeSmaha", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1287922?v=4", "type": "User" }, { "login": "pbstriker38", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5264240?v=4", "type": "User" }, { "login": "deviantony", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5485061?v=4", "type": "User" }, { "login": "zuzgon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12097542?v=4", "type": "User" }, { "login": "Taknok", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12498020?v=4", "type": "User" }, { "login": "maurerr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7603227?v=4", "type": "User" }, { "login": "c-f", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35263248?v=4", "type": "User" }, { "login": "testwill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8717479?v=4", "type": "User" }, { "login": "fsiegmund", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18666037?v=4", "type": "User" }, { "login": "codenoid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14269809?v=4", "type": "User" }, { "login": "andres-portainer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91705312?v=4", "type": "User" }, { "login": "shawnhwei", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7190278?v=4", "type": "User" }, { "login": "rajpratik71", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12658912?v=4", "type": "User" }, { "login": "Masterxilo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2378665?v=4", "type": "User" }, { "login": "patrick-othmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8964313?v=4", "type": "User" }, { "login": "anacrolix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/988750?v=4", "type": "User" }, { "login": "NitescuLucian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12897148?v=4", "type": "User" } ] }, { "repo": "decoder-it/localpotato", "name": "localpotato", "owner": "decoder-it", "url": "https://github.com/decoder-it/LocalPotato", "stars": 708, "language": "C++", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2023/02/13/localpotato-when-swapping-the-context-leads-you-to-system/", "title": "LocalPotato – When Swapping The Context Leads You To SYSTEM", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "3bb13ebf37b6", "score": 47, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "login": "antonioCoco" } ], "pushedAt": "2023-11-07T01:09:08Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "decoder-it", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "rwxstoned/ldrshuffle", "name": "ldrshuffle", "owner": "rwxstoned", "url": "https://github.com/RWXstoned/LdrShuffle", "stars": 286, "language": "C++", "description": "Code execution/injection technique using DLL PEB module structure manipulation", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Hugo Valette", "cardId": "cdc93769fee1169d", "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4" }, "referencedBy": [ { "url": "https://ipurple.team/2026/05/13/entrypoint-hijacking/", "title": "EntryPoint Hijacking", "person": "Panos Gkatziroulis 🦄" } ], "referencedCount": 1, "id": "c0247ed0a413", "score": 47, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-04T14:23:47Z", "archived": false, "topContributors": [ { "login": "RWXstoned", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4", "type": "User" } ] }, { "repo": "theevilbit/injection", "name": "injection", "owner": "theevilbit", "url": "https://github.com/theevilbit/injection", "stars": 831, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da57727a3d20", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-12-28T19:03:10Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" }, { "login": "brubakerjeff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6541166?v=4", "type": "User" } ] }, { "repo": "klezvirus/cve-2021-40444", "name": "cve-2021-40444", "owner": "klezvirus", "url": "https://github.com/klezVirus/CVE-2021-40444", "stars": 829, "language": "HTML", "description": "CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87c2ce5e43fb", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-11T18:44:51Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "dirkjanm/adconnectdump", "name": "adconnectdump", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/adconnectdump", "stars": 801, "language": "C#", "description": "Dump Azure AD Connect credentials for Azure AD and Active Directory", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d82a6fb63a9f", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2025-08-26T16:30:37Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "ofir286", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64558020?v=4", "type": "User" }, { "login": "BlWasp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35003340?v=4", "type": "User" }, { "login": "Paradoxis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6770124?v=4", "type": "User" }, { "login": "omrirefaeli", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30568019?v=4", "type": "User" }, { "login": "roaldnefs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6523325?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/itwasalladream", "name": "itwasalladream", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/ItWasAllADream", "stars": 801, "language": "Python", "description": "A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "426e0d0ada37", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "login": "eversinc33" } ], "pushedAt": "2024-05-19T16:25:52Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "VeryDampTowel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32224673?v=4", "type": "User" }, { "login": "eversinc33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "pyrotek3/powershell-ad-recon", "name": "powershell-ad-recon", "owner": "pyrotek3", "url": "https://github.com/PyroTek3/PowerShell-AD-Recon", "stars": 783, "language": null, "description": "PowerShell Scripts I find useful", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sean Metcalf", "cardId": "1c8ebf4f58f1a1a3", "avatar": "https://avatars.githubusercontent.com/u/8602144?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2fb217aaa4cb", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-18T07:35:05Z", "archived": false, "topContributors": [ { "login": "PyroTek3", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/8602144?v=4", "type": "User" } ] }, { "repo": "klezvirus/cheesetools", "name": "cheesetools", "owner": "klezvirus", "url": "https://github.com/klezVirus/CheeseTools", "stars": 724, "language": "C#", "description": "Self-developed tools for Lateral Movement/Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb6ad6dc7a3f", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-17T20:22:56Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "enigma0x3/generate-macro", "name": "generate-macro", "owner": "enigma0x3", "url": "https://github.com/enigma0x3/Generate-Macro", "stars": 688, "language": "PowerShell", "description": "This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a23ea07f1054", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2016-10-27T20:48:59Z", "archived": false, "topContributors": [ { "login": "enigma0x3", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "type": "User" }, { "login": "brimstone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/812795?v=4", "type": "User" } ] }, { "repo": "mrphrazer/obfuscation_detection", "name": "obfuscation_detection", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/obfuscation_detection", "id": "fb922cdc52e9", "stars": 666, "language": "Python", "description": "Binary Ninja plugin to identify obfuscated code and other interesting code constructs", "type": "tool", "pushedAt": "2026-05-21T17:10:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mrphrazer", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" }, { "login": "psifertex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/140215?v=4", "type": "User" }, { "login": "samrussell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1481279?v=4", "type": "User" }, { "login": "seekbytes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/102438368?v=4", "type": "User" } ] }, { "repo": "frichetten/cve-2019-5736-poc", "name": "cve-2019-5736-poc", "owner": "frichetten", "url": "https://github.com/Frichetten/CVE-2019-5736-PoC", "stars": 658, "language": "Go", "description": "PoC for CVE-2019-5736", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Frichette", "cardId": "7beb2b9170e5b0f7", "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ea493e3bcb6e", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-01-05T04:09:42Z", "archived": true, "topContributors": [ { "login": "Frichetten", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4", "type": "User" }, { "login": "0cat-r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49912303?v=4", "type": "User" } ] }, { "repo": "seanheelan/anamnesis-release", "name": "anamnesis-release", "owner": "seanheelan", "url": "https://github.com/SeanHeelan/anamnesis-release", "stars": 625, "language": "JavaScript", "description": "Automatic Exploit Generation with LLMs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1dac5ca9e969", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-30T12:37:54Z", "archived": false, "topContributors": [ { "login": "SeanHeelan", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4", "type": "User" } ] }, { "repo": "klezvirus/chameleon", "name": "chameleon", "owner": "klezVirus", "url": "https://github.com/klezVirus/chameleon", "id": "85e46ef538fc", "stars": 604, "language": "Python", "description": "PowerShell Script Obfuscator", "type": "tool", "pushedAt": "2023-11-02T13:09:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "klezVirus", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "p0dalirius/windows-coerced-authentication-methods", "name": "windows-coerced-authentication-methods", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/windows-coerced-authentication-methods", "id": "5254185484f1", "stars": 598, "language": "Python", "description": "A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols. ", "type": "tool", "pushedAt": "2025-01-31T14:24:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 592, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "zyn3rgy/smbtakeover", "name": "smbtakeover", "owner": "zyn3rgy", "url": "https://github.com/zyn3rgy/smbtakeover", "stars": 360, "language": "C++", "description": "BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Powers", "cardId": "080005eb8cc17cd7", "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c56e9a81774", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-19T21:08:19Z", "archived": false, "topContributors": [ { "login": "zyn3rgy", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4", "type": "User" } ] }, { "repo": "p0dalirius/sharehound", "name": "sharehound", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/ShareHound", "stars": 309, "language": "Go", "description": "A python tool to map the access rights of network shares into a BloodHound OpenGraphs easily", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1dc149b34efe", "score": 47, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 6, "contributors": [], "pushedAt": "2026-05-11T06:36:20Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "claude", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" }, { "login": "jazofra", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/33320493?v=4", "type": "User" }, { "login": "Brainmoustache", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32066865?v=4", "type": "User" }, { "login": "lefayjey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25101526?v=4", "type": "User" }, { "login": "bwpge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/114827766?v=4", "type": "User" } ] }, { "repo": "mazen160/bfac", "name": "bfac", "owner": "mazen160", "url": "https://github.com/mazen160/bfac", "stars": 566, "language": "Python", "description": "BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2025/02/01/htb-trickster.html", "title": "HTB: Trickster", "person": "0xdf" }, { "url": "https://mazinahmed.net/blog/backup-file-artifacts/", "title": "Backup-File Artifacts: The Underrated Web-Danger", "person": "Mazin Ahmed" } ], "referencedCount": 2, "id": "479c3bfbf6d8", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [ { "name": "EdOverflow", "cardId": "5ea61790652f7a1c", "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "login": "EdOverflow" }, { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "pushedAt": "2022-08-25T19:52:24Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "EdOverflow", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "type": "User" }, { "login": "Zeecka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24873615?v=4", "type": "User" }, { "login": "leesoh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1276654?v=4", "type": "User" }, { "login": "kanoonsantikul", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14271832?v=4", "type": "User" }, { "login": "random-robbie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "SolomonSklash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43149956?v=4", "type": "User" } ] }, { "repo": "mazen160/shennina", "name": "shennina", "owner": "mazen160", "url": "https://github.com/mazen160/shennina", "stars": 557, "language": "Python", "description": "Automating Host Exploitation with AI", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/shennina-exploitation-framework/", "title": "Shennina Framework - Automating Host Exploitation with AI", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "bff3f5bb73e5", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-08T08:29:40Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "mazen160/firefox-security-toolkit", "name": "firefox-security-toolkit", "owner": "mazen160", "url": "https://github.com/mazen160/Firefox-Security-Toolkit", "stars": 513, "language": "Shell", "description": "A tool that transforms Firefox browsers into a penetration testing suite", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/firefox-security-toolkit/", "title": "Why Prebuilt Security Browsers are Bad: Introducing Firefox Security Toolkit", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "8273ae48b209", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-05-14T08:39:49Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "spekulatius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8433587?v=4", "type": "User" }, { "login": "KernelPan1k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3338681?v=4", "type": "User" }, { "login": "xiaoxiaoleo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9813186?v=4", "type": "User" } ] }, { "repo": "decoder-it/psgetsystem", "name": "psgetsystem", "owner": "decoder-it", "url": "https://github.com/decoder-it/psgetsystem", "stars": 498, "language": "PowerShell", "description": "getsystem via parent process using ps1 & embeded c#", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2018/02/02/getting-system/", "title": "Getting SYSTEM", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "04b28880fc78", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-10-26T07:13:08Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" }, { "login": "phra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" } ] }, { "repo": "mazen160/server-status_pwn", "name": "server-status_pwn", "owner": "mazen160", "url": "https://github.com/mazen160/server-status_PWN", "stars": 444, "language": "Python", "description": "A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/exploiting-misconfigured-apache-server-status-instances/", "title": "Exploiting Misconfigured Apache server-status Instances with server-status_PWN", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "aec4de612610", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-09-19T10:31:11Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "c0dejump", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29504335?v=4", "type": "User" } ] }, { "repo": "mazen160/struts-pwn", "name": "struts-pwn", "owner": "mazen160", "url": "https://github.com/mazen160/struts-pwn", "stars": 444, "language": "Python", "description": "An exploit for Apache Struts CVE-2017-5638", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2025/02/01/htb-trickster.html", "title": "HTB: Trickster", "person": "0xdf" } ], "referencedCount": 1, "id": "4467bca6ed43", "score": 46, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2018-05-21T18:33:26Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "Reboare", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/981866?v=4", "type": "User" }, { "login": "cgsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1851656?v=4", "type": "User" } ] }, { "repo": "adnanekhan/gato-x", "name": "gato-x", "owner": "adnanekhan", "url": "https://github.com/AdnaneKhan/gato-x", "stars": 561, "language": "Python", "description": "GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adnan Khan", "cardId": "3d12002cf2cb67c0", "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8c6cd2874596", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 17, "contributors": [ { "name": "Mason Davis", "cardId": "9e3d8baec8bf2c7e", "avatar": "https://avatars.githubusercontent.com/u/31484153?v=4", "login": "mas0nd" }, { "name": "John Stawinski", "cardId": "672f8783bacd0658", "avatar": "https://avatars.githubusercontent.com/u/64742258?v=4", "login": "jstawinski" }, { "name": "Matthew Jackoski", "cardId": "48359776e3d7d716", "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "login": "DS-KoolAid" } ], "pushedAt": "2026-07-13T17:13:40Z", "archived": false, "topContributors": [ { "login": "AdnaneKhan", "c": 212, "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 54, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "mas0nd", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/31484153?v=4", "type": "User" }, { "login": "adrien-f", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/781688?v=4", "type": "User" }, { "login": "Dev11940518", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/235514460?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "Copilot", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "nilsreichardt", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24459435?v=4", "type": "User" }, { "login": "jstawinski", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64742258?v=4", "type": "User" }, { "login": "ankushgoel27", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10580970?v=4", "type": "User" }, { "login": "CyrilBaah", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82481611?v=4", "type": "User" }, { "login": "goncalo0domingos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72613550?v=4", "type": "User" }, { "login": "jimmyscchang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10868567?v=4", "type": "User" }, { "login": "DS-KoolAid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "type": "User" }, { "login": "pswalia2u", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20887270?v=4", "type": "User" }, { "login": "rtrompier", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2504924?v=4", "type": "User" }, { "login": "swarit-stepsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/208925350?v=4", "type": "User" } ] }, { "repo": "kingofthenops/cookie-monster", "name": "cookie-monster", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/cookie-monster", "stars": 548, "language": "C", "description": "BOF to steal browser cookies & credentials", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6eb15382cd76", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [ { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "pushedAt": "2026-03-04T18:18:56Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" }, { "login": "M1ndo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44820142?v=4", "type": "User" }, { "login": "aggr0cr4g", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/93880195?v=4", "type": "User" }, { "login": "Tw1sm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "au70ma70n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/168219140?v=4", "type": "User" }, { "login": "dis0rder0x00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53529507?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/offensivedlr", "name": "offensivedlr", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/OffensiveDLR", "stars": 528, "language": "PowerShell", "description": "Toolbox containing research notes & PoC code for weaponizing .NET's DLR", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "05d11156ce0b", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2022-01-21T19:45:54Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "physics-sec", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11247943?v=4", "type": "User" }, { "login": "RealHarshThakur", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38140305?v=4", "type": "User" }, { "login": "NotoriousRebel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36310667?v=4", "type": "User" } ] }, { "repo": "joelgmsec/psransom", "name": "psransom", "owner": "joelgmsec", "url": "https://github.com/JoelGMSec/PSRansom", "stars": 506, "language": "PowerShell", "description": "PowerShell Ransomware Simulator with C2 Server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "433b5f2fe1d9", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-01-02T11:08:16Z", "archived": false, "topContributors": [ { "login": "JoelGMSec", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" }, { "login": "IBRice101", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26672949?v=4", "type": "User" } ] }, { "repo": "chvancooten/nimpackt-v1", "name": "nimpackt-v1", "owner": "chvancooten", "url": "https://github.com/chvancooten/NimPackt-v1", "stars": 487, "language": "Nim", "description": "Nim-based assembly packer and shellcode loader for opsec & profit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "75a173a19db4", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-24T16:06:21Z", "archived": false, "topContributors": [ { "login": "chvancooten", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" } ] }, { "repo": "zeze-zeze/ioctlance", "name": "ioctlance", "owner": "zeze-zeze", "url": "https://github.com/zeze-zeze/ioctlance", "id": "6804b570d62e", "stars": 469, "language": "Python", "description": "A tool that is used to hunt vulnerabilities in x64 WDM drivers", "type": "tool", "pushedAt": "2026-06-18T02:44:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Zeze", "cardId": "a3a54606825e7474", "avatar": "https://avatars.githubusercontent.com/u/33378686?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "zeze-zeze", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/33378686?v=4", "type": "User" }, { "login": "davidenetti", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/112415562?v=4", "type": "User" }, { "login": "mnznndr97", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44756553?v=4", "type": "User" }, { "login": "R1perXNX", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/107111095?v=4", "type": "User" } ] }, { "repo": "darkoperator/mimikatz-missing-manual", "name": "mimikatz-missing-manual", "owner": "darkoperator", "url": "https://github.com/darkoperator/mimikatz-missing-manual", "stars": 454, "language": null, "description": "The Mimikatz Missing Manual", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a2ef58595b0d", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-05T23:51:42Z", "archived": false, "topContributors": [ { "login": "darkoperator", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" } ] }, { "repo": "klezvirus/vortex", "name": "vortex", "owner": "klezVirus", "url": "https://github.com/klezVirus/vortex", "id": "dfed14899137", "stars": 450, "language": "Python", "description": "VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit", "type": "tool", "pushedAt": "2023-11-02T13:21:21Z", "archived": false, "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "klezVirus", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/caro-kann", "name": "caro-kann", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Caro-Kann", "stars": 428, "language": "C", "description": "Encrypted shellcode Injection to avoid Kernel triggered memory scans ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3a45cb8aae25", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-12T08:31:50Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "a13xp0p0v/kernel-hack-drill", "name": "kernel-hack-drill", "owner": "a13xp0p0v", "url": "https://github.com/a13xp0p0v/kernel-hack-drill", "id": "53f1ce3213a9", "stars": 425, "language": "C", "description": "Linux kernel exploitation experiments", "type": "tool", "pushedAt": "2026-06-05T08:54:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexander Popov", "cardId": "2327dd257a083e59", "avatar": "https://avatars.githubusercontent.com/u/1419667?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "a13xp0p0v", "c": 192, "avatar": "https://avatars.githubusercontent.com/u/1419667?v=4", "type": "User" }, { "login": "d1sgr4c3", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/121037831?v=4", "type": "User" }, { "login": "Willenst", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/67371653?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/sharpimpersonation", "name": "sharpimpersonation", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/SharpImpersonation", "stars": 422, "language": "C#", "description": "A User Impersonation tool - via Token or Shellcode injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a2c567a6a04b", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-05-21T18:30:50Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "stryker2k2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18358246?v=4", "type": "User" } ] }, { "repo": "p0dalirius/ipsourcebypass", "name": "ipsourcebypass", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/ipsourcebypass", "stars": 403, "language": "Python", "description": "This Python script can be used to bypass IP source restrictions using HTTP headers.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5c49ad1c3d87", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-09-16T13:20:01Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Human1st", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/66437247?v=4", "type": "User" }, { "login": "fravoi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19416187?v=4", "type": "User" }, { "login": "kalidor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4737948?v=4", "type": "User" } ] }, { "repo": "p0dalirius/extractbitlockerkeys", "name": "ExtractBitlockerKeys", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/ExtractBitlockerKeys", "id": "68b1fa5fa5f8", "stars": 400, "language": "Python", "description": "A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.", "type": "tool", "pushedAt": "2026-01-20T20:09:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "p0dalirius", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "HCRitter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16746310?v=4", "type": "User" }, { "login": "lefayjey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25101526?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" } ] }, { "repo": "d00mfist/go4arun", "name": "go4arun", "owner": "d00mfist", "url": "https://github.com/D00MFist/Go4aRun", "stars": 227, "language": "Go", "description": "Shellcode runner in GO that incorporates shellcode encryption, remote process injection, block dlls, and spoofed parent process", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "03be18148f46", "score": 46, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-30T14:45:30Z", "archived": false, "topContributors": [ { "login": "D00MFist", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" } ] }, { "repo": "sqlmapproject/sqlmap", "name": "sqlmap", "owner": "sqlmapproject", "url": "https://github.com/sqlmapproject/sqlmap", "stars": 37925, "language": "Python", "description": "Automatic SQL injection and database takeover tool", "type": "tool", "lanes": [ "1" ], "author": { "name": "sqlmapproject", "cardId": null }, "referencedBy": [ { "url": "https://thomaspreece.com/2020/08/21/overthewire-natas/", "title": "OverTheWire - Natas - Thomas Preece", "person": "Thomas Preece" }, { "url": "https://0xdf.gitlab.io/2023/06/10/htb-soccer.html", "title": "HTB: Soccer", "person": "0xdf" } ], "referencedCount": 2, "id": "19d2ab3ab6dc", "score": 45, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 12, "mentionDistinct": 15, "contributorCount": 100, "contributors": [ { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "login": "shipcod3" }, { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" } ], "pushedAt": "2026-07-17T22:22:42Z", "archived": false, "topContributors": [ { "login": "stamparm", "c": 8726, "avatar": "https://avatars.githubusercontent.com/u/921555?v=4", "type": "User" }, { "login": "bdamele", "c": 1887, "avatar": "https://avatars.githubusercontent.com/u/675322?v=4", "type": "User" }, { "login": "guinslym", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/4588993?v=4", "type": "User" }, { "login": "Meatballs1", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "mdeous", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/393165?v=4", "type": "User" }, { "login": "flsf", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/2364135?v=4", "type": "User" }, { "login": "tanaydin", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/400388?v=4", "type": "User" }, { "login": "RicterZ", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5282759?v=4", "type": "User" }, { "login": "zakaria-zoulati", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/146139642?v=4", "type": "User" }, { "login": "daremon", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3486374?v=4", "type": "User" }, { "login": "RoARene317", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24410807?v=4", "type": "User" }, { "login": "za", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/409455?v=4", "type": "User" }, { "login": "neargle", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7868679?v=4", "type": "User" }, { "login": "arjunv", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/718092?v=4", "type": "User" }, { "login": "shelld3v", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" }, { "login": "tree-chtsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/68040445?v=4", "type": "User" }, { "login": "samogot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11226228?v=4", "type": "User" }, { "login": "jekil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1069119?v=4", "type": "User" }, { "login": "getcode2git", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16176349?v=4", "type": "User" }, { "login": "jasonsun1347", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8265155?v=4", "type": "User" }, { "login": "jakxx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1746973?v=4", "type": "User" }, { "login": "GH05T-HUNTER5", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/108191615?v=4", "type": "User" }, { "login": "igoreliasm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2879536?v=4", "type": "User" }, { "login": "shipcod3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" }, { "login": "viniciusmarangoni", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7467615?v=4", "type": "User" }, { "login": "TrinTragula", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21279788?v=4", "type": "User" }, { "login": "syedafzal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5674811?v=4", "type": "User" }, { "login": "stefanpejcic", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6408320?v=4", "type": "User" }, { "login": "rohitkumarankam", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/70012972?v=4", "type": "User" }, { "login": "boy-hack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18695984?v=4", "type": "User" } ] }, { "repo": "clearbluejar/pyghidra-mcp", "name": "pyghidra-mcp", "owner": "clearbluejar", "url": "https://github.com/clearbluejar/pyghidra-mcp", "stars": 383, "language": "Python", "description": "Python Command-Line Ghidra MCP", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "John McIntosh", "cardId": "27b3a1960aa36a0f", "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4" }, "referencedBy": [ { "url": "https://clearbluejar.github.io/posts/pyghidra-mcp-headless-ghidra-mcp-server-for-project-wide-multi-binary-analysis/", "title": "pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis", "person": "John McIntosh" }, { "url": "https://clearbluejar.github.io/posts/pyghidra-mcp-meets-ghidra-gui-drive-project-wide-re-with-local-ai/", "title": "pyghidra-mcp Meets Ghidra GUI: Drive Project-Wide RE with Local AI", "person": "John McIntosh" } ], "referencedCount": 2, "id": "624d6ce37b4d", "score": 45, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [ { "name": "Cedric Halbronn", "cardId": "0e9cf6d9bec332e9", "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "login": "saidelike" } ], "pushedAt": "2026-07-14T17:13:42Z", "archived": false, "topContributors": [ { "login": "clearbluejar", "c": 201, "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4", "type": "User" }, { "login": "unimpossible", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3935212?v=4", "type": "User" }, { "login": "heinosasshallik", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8057221?v=4", "type": "User" }, { "login": "saidelike", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "type": "User" }, { "login": "Trolldemorted", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10261186?v=4", "type": "User" }, { "login": "ctoth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/236552?v=4", "type": "User" }, { "login": "sassrf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53571982?v=4", "type": "User" } ] }, { "repo": "mazen160/tfquery", "name": "tfquery", "owner": "mazen160", "url": "https://github.com/mazen160/tfquery", "stars": 332, "language": "Python", "description": "tfquery: Run SQL queries on your Terraform infrastructure. Query resources and analyze its configuration using a SQL-powered framework.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/tfquery-project-release/", "title": "tfquery: Run SQL queries on your Terraform infrastructure", "person": "Mazin Ahmed" }, { "url": "https://mazinahmed.net/blog/tfplan-release/", "title": "Scan Terraform plans and changes with tfquery, an SQL-powered framework", "person": "Mazin Ahmed" } ], "referencedCount": 2, "id": "a3f312b34319", "score": 45, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-27T11:10:22Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "decoder-it/krbrelayex", "name": "krbrelayex", "owner": "decoder-it", "url": "https://github.com/decoder-it/KrbRelayEx", "stars": 389, "language": "C#", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2024/11/26/group-policy-nightmares-pt2/", "title": "Group Policy Security Nightmares pt2", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "91e60dbfc23f", "score": 45, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-17T07:17:41Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "mazen160/jwt-pwn", "name": "jwt-pwn", "owner": "mazen160", "url": "https://github.com/mazen160/jwt-pwn", "stars": 333, "language": "Python", "description": "Security Testing Scripts for JWT", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/breaking-jwt/", "title": "Practical Approaches for Testing and Breaking JWT Authentication", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "df023c878c75", "score": 45, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-13T22:21:02Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "harmj0y/damp", "name": "DAMP", "owner": "HarmJ0y", "url": "https://github.com/HarmJ0y/DAMP", "id": "ac104b6a0861", "stars": 385, "language": "PowerShell", "description": "The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification", "type": "tool", "pushedAt": "2019-07-25T21:18:37Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "seanheelan/o3_finds_cve-2025-37899", "name": "o3_finds_cve-2025-37899", "owner": "seanheelan", "url": "https://github.com/SeanHeelan/o3_finds_cve-2025-37899", "stars": 353, "language": null, "description": "Artefacts for blog post on finding CVE-2025-37899 with o3", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "534b7dc7c494", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-22T10:37:04Z", "archived": false, "topContributors": [ { "login": "SeanHeelan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/manuka", "name": "manuka", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/manuka", "stars": 348, "language": "Shell", "description": "A modular OSINT honeypot for blue teamers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "37e9cc0c6f35", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-02T11:30:14Z", "archived": false, "topContributors": [ { "login": "bernlim93", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/2088763?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/spamchannel", "name": "spamchannel", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/SpamChannel", "stars": 348, "language": "JavaScript", "description": "Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4a41edb018d0", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-21T12:25:03Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "api0cradle/cve-2023-23397-poc-powershell", "name": "cve-2023-23397-poc-powershell", "owner": "api0cradle", "url": "https://github.com/api0cradle/CVE-2023-23397-POC-Powershell", "stars": 346, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dc4df3efd287", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-03-17T07:47:40Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" }, { "login": "pwnf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54254701?v=4", "type": "User" } ] }, { "repo": "mazen160/xless", "name": "xless", "owner": "mazen160", "url": "https://github.com/mazen160/xless", "stars": 338, "language": "JavaScript", "description": "The Serverless Blind XSS App", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a3c974dbf02a", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-03-28T10:34:13Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" }, { "login": "rotemreiss", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9288082?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "felixmosh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9304194?v=4", "type": "User" } ] }, { "repo": "u1f383/software-security-2021-2022", "name": "software-security-2021-2022", "owner": "u1f383", "url": "https://github.com/u1f383/Software-Security-2021-2022", "stars": 307, "language": "C", "description": "2021 交大程式安全 binary exploit 課程教材", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pumpkin", "cardId": "5f13610453fd0dab", "avatar": "https://avatars.githubusercontent.com/u/34729870?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88520e61d1fa", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-04T09:43:37Z", "archived": false, "topContributors": [ { "login": "u1f383", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/34729870?v=4", "type": "User" } ] }, { "repo": "jfmaes/sharpziprunner", "name": "sharpziprunner", "owner": "jfmaes", "url": "https://github.com/jfmaes/SharpZipRunner", "stars": 304, "language": "C#", "description": "Executes position independent shellcode from an encrypted zip ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "12e4818f1643", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-22T10:37:58Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "mazen160/struts-pwn_cve-2018-11776", "name": "struts-pwn_cve-2018-11776", "owner": "mazen160", "url": "https://github.com/mazen160/struts-pwn_CVE-2018-11776", "stars": 303, "language": "Python", "description": " An exploit for Apache Struts CVE-2018-11776", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "76cd515dbefa", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-26T02:31:39Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "d00mfist/persistentjxa", "name": "PersistentJXA", "owner": "D00MFist", "url": "https://github.com/D00MFist/PersistentJXA", "id": "fcd8e0c7d754", "stars": 292, "language": "JavaScript", "description": "Collection of macOS persistence methods and miscellaneous tools in JXA", "type": "tool", "pushedAt": "2026-03-26T13:23:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "D00MFist", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" }, { "login": "tbennett6421", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6843296?v=4", "type": "User" }, { "login": "mattreduce", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66427?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/pymalleablec2", "name": "pymalleablec2", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/pyMalleableC2", "stars": 287, "language": "Python", "description": "Python interpreter for Cobalt Strike Malleable C2 Profiles. Allows you to parse, build and modify them programmatically.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1c685c704013", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-06-08T18:00:08Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "linuxkd", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20820120?v=4", "type": "User" }, { "login": "rxwx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" }, { "login": "Xenov-X", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62152036?v=4", "type": "User" } ] }, { "repo": "mrphrazer/agentic-malware-analysis", "name": "agentic-malware-analysis", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/agentic-malware-analysis", "stars": 279, "language": "YARA", "description": "Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows for Claude Code and Codex CLI.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bbf9df296c40", "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-22T23:28:55Z", "archived": false, "topContributors": [ { "login": "mrphrazer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" } ] }, { "repo": "werdhaihai/atlasreaper", "name": "AtlasReaper", "owner": "werdhaihai", "url": "https://github.com/werdhaihai/AtlasReaper", "id": "6711129f4db3", "stars": 273, "language": "C#", "description": "A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances. ", "type": "tool", "pushedAt": "2023-09-14T23:50:33Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Craig Wright", "cardId": "566c73c2eb67c6ea", "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 45, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "werdhaihai", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4", "type": "User" } ] }, { "repo": "netspooky/golfclub", "name": "golfclub", "owner": "netspooky", "url": "https://github.com/netspooky/golfclub", "stars": 261, "language": "Assembly", "description": "Binary Golf Examples and Resources", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4" }, "referencedBy": [ { "url": "https://n0.lol/binary-golfing-uefi-applications-recon2024/", "title": "Binary Golfing UEFI Applications (REcon 2024)", "person": "netspooky" }, { "url": "https://n0.lol/bggp2-pe-js-pdf-polyglot/", "title": "ns.bggp2021.asm", "person": "netspooky" }, { "url": "https://n0.lol/uefi420/", "title": "BGGP4: A 420 Byte Self-Replicating UEFI App For x64", "person": "netspooky" } ], "referencedCount": 3, "id": "e72a2af1ed1e", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-24T18:36:24Z", "archived": false, "topContributors": [ { "login": "netspooky", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "type": "User" }, { "login": "hauntedinc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124002651?v=4", "type": "User" } ] }, { "repo": "radareorg/radare2", "name": "radare2", "owner": "radareorg", "url": "https://github.com/radareorg/radare2", "stars": 24372, "language": "C", "description": "UNIX-like reverse engineering framework and command-line toolset", "type": "tool", "lanes": [ "1" ], "author": { "name": "radareorg", "cardId": null }, "referencedBy": [ { "url": "https://n0.lol/lemonade/", "title": "BGGP3: LEMONADE.BIN", "person": "netspooky" }, { "url": "https://mez0.cc/posts/citadel", "title": "Citadel: Binary Static Analysis Framework", "person": "Brandon McGrath" } ], "referencedCount": 2, "id": "bf55d14b62ae", "score": 44, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 15, "mentionDistinct": 16, "contributorCount": 100, "contributors": [ { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "login": "jduck" } ], "pushedAt": "2026-07-18T04:56:35Z", "archived": false, "topContributors": [ { "login": "radare", "c": 18109, "avatar": "https://avatars.githubusercontent.com/u/917142?v=4", "type": "User" }, { "login": "trufae", "c": 2619, "avatar": "https://avatars.githubusercontent.com/u/6431515?v=4", "type": "User" }, { "login": "condret", "c": 891, "avatar": "https://avatars.githubusercontent.com/u/5904302?v=4", "type": "User" }, { "login": "alvarofe", "c": 853, "avatar": "https://avatars.githubusercontent.com/u/3474042?v=4", "type": "User" }, { "login": "XVilka", "c": 841, "avatar": "https://avatars.githubusercontent.com/u/203261?v=4", "type": "User" }, { "login": "kazarmy", "c": 796, "avatar": "https://avatars.githubusercontent.com/u/12002672?v=4", "type": "User" }, { "login": "ret2libc", "c": 678, "avatar": "https://avatars.githubusercontent.com/u/562321?v=4", "type": "User" }, { "login": "jroimartin", "c": 651, "avatar": "https://avatars.githubusercontent.com/u/1223476?v=4", "type": "User" }, { "login": "jvoisin", "c": 468, "avatar": "https://avatars.githubusercontent.com/u/325724?v=4", "type": "User" }, { "login": "thestr4ng3r", "c": 430, "avatar": "https://avatars.githubusercontent.com/u/1460997?v=4", "type": "User" }, { "login": "Vane11ope", "c": 358, "avatar": "https://avatars.githubusercontent.com/u/29271244?v=4", "type": "User" }, { "login": "GustavoLCR", "c": 270, "avatar": "https://avatars.githubusercontent.com/u/23562137?v=4", "type": "User" }, { "login": "crowell", "c": 268, "avatar": "https://avatars.githubusercontent.com/u/616288?v=4", "type": "User" }, { "login": "mrmacete", "c": 251, "avatar": "https://avatars.githubusercontent.com/u/4139069?v=4", "type": "User" }, { "login": "devnexen", "c": 225, "avatar": "https://avatars.githubusercontent.com/u/4922778?v=4", "type": "User" }, { "login": "MaskRay", "c": 224, "avatar": "https://avatars.githubusercontent.com/u/416322?v=4", "type": "User" }, { "login": "deeso", "c": 219, "avatar": "https://avatars.githubusercontent.com/u/1205295?v=4", "type": "User" }, { "login": "Lazula", "c": 164, "avatar": "https://avatars.githubusercontent.com/u/26179473?v=4", "type": "User" }, { "login": "xarkes", "c": 163, "avatar": "https://avatars.githubusercontent.com/u/10772605?v=4", "type": "User" }, { "login": "eagleoflqj", "c": 150, "avatar": "https://avatars.githubusercontent.com/u/26783539?v=4", "type": "User" }, { "login": "Svenito", "c": 146, "avatar": "https://avatars.githubusercontent.com/u/31278?v=4", "type": "User" }, { "login": "sivaramaaa", "c": 138, "avatar": "https://avatars.githubusercontent.com/u/18589720?v=4", "type": "User" }, { "login": "wargio", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/561184?v=4", "type": "User" }, { "login": "cyanpencil", "c": 119, "avatar": "https://avatars.githubusercontent.com/u/3428362?v=4", "type": "User" }, { "login": "sylvainpelissier", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/7047419?v=4", "type": "User" }, { "login": "oddcoder", "c": 108, "avatar": "https://avatars.githubusercontent.com/u/10424605?v=4", "type": "User" }, { "login": "lowlyw", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/20349928?v=4", "type": "User" }, { "login": "yossizap", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/5659696?v=4", "type": "User" }, { "login": "rlaemmert", "c": 94, "avatar": "https://avatars.githubusercontent.com/u/4795767?v=4", "type": "User" }, { "login": "SrimantaBarua", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/8581292?v=4", "type": "User" } ] }, { "repo": "netspooky/protocols", "name": "protocols", "owner": "netspooky", "url": "https://github.com/netspooky/protocols", "stars": 227, "language": "Python", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4" }, "referencedBy": [ { "url": "https://n0.lol/protocol-re-talk-2023/", "title": "Protocol RE Talk", "person": "netspooky" }, { "url": "https://n0.lol/broadcast-brujeria/", "title": "Packets Remystified: Broadcast Brujería", "person": "netspooky" } ], "referencedCount": 2, "id": "f504db742f4b", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-24T22:36:26Z", "archived": false, "topContributors": [ { "login": "netspooky", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "type": "User" } ] }, { "repo": "chichou/sploits", "name": "sploits", "owner": "chichou", "url": "https://github.com/ChiChou/sploits", "stars": 212, "language": "Objective-C", "description": "PoC", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [ { "url": "https://codecolor.ist/posts/2020-05-28-x-site-escape-part-i-exploitation-of-and-old-corefoundation-sandbox-bug/", "title": "X Site eScape (Part I): Exploitation of An Old CoreFoundation Sandbox Bug", "person": "Zhi Zhou" }, { "url": "https://codecolor.ist/posts/2019-04-21-rootpipe-reborn-part-ii/", "title": "Rootpipe Reborn (Part II): CVE-2019-8565 Feedback Assistant Race Condition", "person": "Zhi Zhou" } ], "referencedCount": 2, "id": "66b59f96dca3", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-13T12:39:06Z", "archived": false, "topContributors": [ { "login": "ChiChou", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" }, { "login": "timwr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/684924?v=4", "type": "User" } ] }, { "repo": "decoder-it/adcscoercepotato", "name": "adcscoercepotato", "owner": "decoder-it", "url": "https://github.com/decoder-it/ADCSCoercePotato", "stars": 248, "language": "C++", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2024/02/26/hello-im-your-adcs-server-and-i-want-to-authenticate-against-you/", "title": "Hello: I’m your ADCS server and I want to authenticate against you", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "d9f4e5cca24e", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-05T14:42:23Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "dirkjanm/forest-trust-tools", "name": "forest-trust-tools", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/forest-trust-tools", "stars": 239, "language": "Python", "description": "Proof-of-concept tools for my AD Forest trust research", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://sapirxfed.com/2025/07/23/i-just-wanted-to-see-what-ssso-looks-like/", "title": "I just wanted to see what SSSO looks like", "person": "Sapir Federovsky" } ], "referencedCount": 1, "id": "93c137fddf7c", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-10T07:30:54Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" } ] }, { "repo": "matterpreter/shhmon", "name": "shhmon", "owner": "matterpreter", "url": "https://github.com/matterpreter/Shhmon", "stars": 238, "language": "C#", "description": "Silencing Sysmon via driver unload", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4" }, "referencedBy": [ { "url": "https://code-white.com/blog/2022-09-attacks-on-sysmon-revisited-sysmonente/", "title": "CODE WHITE | Attacks on Sysmon Revisited - SysmonEnte", "person": "Sebastian Feldmann" } ], "referencedCount": 1, "id": "8d09a84a81c9", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-10-13T16:56:41Z", "archived": false, "topContributors": [ { "login": "matterpreter", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" }, { "login": "v3r5ace", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12716538?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/vulnerability-spoiler-alert-action", "name": "vulnerability-spoiler-alert-action", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/vulnerability-spoiler-alert-action", "stars": 215, "language": "TypeScript", "description": "GitHub Action to alert on security patches before the CVE drops.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [ { "url": "https://spaceraccoon.dev/discovering-negative-days-llm-workflows/", "title": "Discovering Negative-Days with LLM Workflows", "person": "Eugene Lim" } ], "referencedCount": 1, "id": "4256ad2b9819", "score": 44, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-05T14:15:44Z", "archived": false, "topContributors": [ { "login": "spaceraccoon", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "GangGreenTemperTatum", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/104169244?v=4", "type": "User" } ] }, { "repo": "hashcat/hashcat", "name": "hashcat", "owner": "hashcat", "url": "https://github.com/hashcat/hashcat", "id": "cceb624e0c50", "stars": 26350, "language": "C", "description": "World's fastest and most advanced password recovery utility", "type": "tool", "pushedAt": "2026-02-20T11:54:48Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "hashcat", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 25, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "jsteube", "c": 7093, "avatar": "https://avatars.githubusercontent.com/u/10434361?v=4", "type": "User" }, { "login": "matrix", "c": 1055, "avatar": "https://avatars.githubusercontent.com/u/15381185?v=4", "type": "User" }, { "login": "philsmd", "c": 600, "avatar": "https://avatars.githubusercontent.com/u/921533?v=4", "type": "User" }, { "login": "hashcat-bot", "c": 183, "avatar": "https://avatars.githubusercontent.com/u/219974596?v=4", "type": "User" }, { "login": "neheb", "c": 115, "avatar": "https://avatars.githubusercontent.com/u/2918873?v=4", "type": "User" }, { "login": "Chick3nman", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/13440524?v=4", "type": "User" }, { "login": "jtojanen", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/555488?v=4", "type": "User" }, { "login": "roycewilliams", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/56157?v=4", "type": "User" }, { "login": "PenguinKeeper7", "c": 88, "avatar": "https://avatars.githubusercontent.com/u/64717060?v=4", "type": "User" }, { "login": "DoZ10", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/10178665?v=4", "type": "User" }, { "login": "s3inlc", "c": 83, "avatar": "https://avatars.githubusercontent.com/u/1167295?v=4", "type": "User" }, { "login": "gm4tr1x", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/22106827?v=4", "type": "User" }, { "login": "qasikfwn", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/51647241?v=4", "type": "User" }, { "login": "unix-ninja", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/6810409?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 42, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "mhasbini", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/8887221?v=4", "type": "User" }, { "login": "trounce1", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/20974336?v=4", "type": "User" }, { "login": "ventaquil", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/10523774?v=4", "type": "User" }, { "login": "dropdeadfu", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/10739106?v=4", "type": "User" }, { "login": "Naufragous", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/44146334?v=4", "type": "User" }, { "login": "AmmoniaAvenue", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/2420794?v=4", "type": "User" }, { "login": "Fist0urs", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/16529748?v=4", "type": "User" }, { "login": "magnumripper", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/1268598?v=4", "type": "User" }, { "login": "jfoug", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/1270024?v=4", "type": "User" }, { "login": "ahmed-alnassif", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/106261231?v=4", "type": "User" }, { "login": "stephengroat", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/1159138?v=4", "type": "User" }, { "login": "therealartifex", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/11967232?v=4", "type": "User" }, { "login": "Coontzy1", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/48108269?v=4", "type": "User" }, { "login": "fse-a", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/72440626?v=4", "type": "User" }, { "login": "cablethief", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/7942469?v=4", "type": "User" } ] }, { "repo": "drk1wi/Modlishka", "name": "Modlishka", "owner": "drk1wi", "url": "https://github.com/drk1wi/Modlishka", "id": "40afbcf741aa", "stars": 5367, "language": "Go", "description": "Modlishka. Reverse Proxy. ", "type": "tool", "pushedAt": "2026-07-03T13:21:57Z", "archived": false, "lanes": [ "curated" ], "canonical": true, "author": { "name": "drk1wi", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/2052966?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 13, "contributors": [], "topContributors": [ { "login": "drk1wi", "c": 110, "avatar": "https://avatars.githubusercontent.com/u/2052966?v=4", "type": "User" }, { "login": "0xflotus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "bordeux", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/784536?v=4", "type": "User" }, { "login": "defektive", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/438084?v=4", "type": "User" }, { "login": "bpsizemore", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11645898?v=4", "type": "User" }, { "login": "dzsibi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4534880?v=4", "type": "User" }, { "login": "infosecwatchman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26226268?v=4", "type": "User" }, { "login": "jbuhacoff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3509443?v=4", "type": "User" }, { "login": "ImpostorKeanu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11574161?v=4", "type": "User" }, { "login": "standerksen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8461154?v=4", "type": "User" }, { "login": "brainloop-ascemama", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14894220?v=4", "type": "User" }, { "login": "dan-sra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39499107?v=4", "type": "User" }, { "login": "testwill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8717479?v=4", "type": "User" } ] }, { "repo": "TheWover/donut", "name": "donut", "owner": "TheWover", "url": "https://github.com/TheWover/donut", "stars": 4666, "language": "C", "description": "Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "TheWover", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/17090738?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 21, "contributors": [ { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "login": "tijme" }, { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "login": "jackullrich" } ], "id": "769cecacc94f", "pushedAt": "2025-07-08T17:27:50Z", "archived": false, "topContributors": [ { "login": "odzhan", "c": 308, "avatar": "https://avatars.githubusercontent.com/u/19677456?v=4", "type": "User" }, { "login": "TheWover", "c": 162, "avatar": "https://avatars.githubusercontent.com/u/17090738?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "jarilaos", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/32414258?v=4", "type": "User" }, { "login": "soolidsnake", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24613200?v=4", "type": "User" }, { "login": "CaledoniaProject", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1357701?v=4", "type": "User" }, { "login": "MEhrn00", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13649965?v=4", "type": "User" }, { "login": "m4rvxpn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16485430?v=4", "type": "User" }, { "login": "grzryc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4489155?v=4", "type": "User" }, { "login": "kylewillmon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/616067?v=4", "type": "User" }, { "login": "majiru", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3579600?v=4", "type": "User" }, { "login": "jsf9k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5521725?v=4", "type": "User" }, { "login": "jabra-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/585965?v=4", "type": "User" }, { "login": "mark-s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/999307?v=4", "type": "User" }, { "login": "tijme", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "askme765cs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25508000?v=4", "type": "User" }, { "login": "awgh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/948127?v=4", "type": "User" }, { "login": "jackullrich", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" }, { "login": "physics-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11247943?v=4", "type": "User" }, { "login": "wwh1004", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27536652?v=4", "type": "User" } ] }, { "repo": "GhostPack/Seatbelt", "name": "Seatbelt", "owner": "GhostPack", "url": "https://github.com/GhostPack/Seatbelt", "stars": 4638, "language": "C#", "description": "Seatbelt is a C# project that performs a number of security oriented host-survey \"safety checks\" relevant from both offensive and defensive security perspectives.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "GhostPack", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/41304335?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 16, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "login": "tijme" }, { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "login": "matterpreter" }, { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "login": "subat0mik" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" } ], "id": "93917e5c8efd", "pushedAt": "2025-01-10T20:12:49Z", "archived": false, "topContributors": [ { "login": "HarmJ0y", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "leechristensen", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "cnotin", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "stufus", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12296344?v=4", "type": "User" }, { "login": "NotoriousRebel", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/36310667?v=4", "type": "User" }, { "login": "jonny-jhnson", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/29631806?v=4", "type": "User" }, { "login": "leftp", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9055652?v=4", "type": "User" }, { "login": "tijme", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "guervild", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11190755?v=4", "type": "User" }, { "login": "matterpreter", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" }, { "login": "gam4er", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3364155?v=4", "type": "User" }, { "login": "subat0mik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" }, { "login": "KinakoExE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37258384?v=4", "type": "User" }, { "login": "mgeeky", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "l0ss2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47308791?v=4", "type": "User" }, { "login": "Wra7h", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60988551?v=4", "type": "User" } ] }, { "repo": "tyranid/blackhat-usa-2022-demos", "name": "blackhat-usa-2022-demos", "owner": "tyranid", "url": "https://github.com/tyranid/blackhat-usa-2022-demos", "stars": 258, "language": "PowerShell", "description": "Demos for the Blackhat USA 2022 talk \"Taking Kerberos to the Next Level\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ff3718f1271", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-08-14T02:32:18Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" }, { "login": "monoxgas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1223016?v=4", "type": "User" } ] }, { "repo": "mrphrazer/obfuscation_analysis", "name": "obfuscation_analysis", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/obfuscation_analysis", "id": "e2a93958e088", "stars": 251, "language": "Python", "description": "Binary Ninja plugin to analyze and simplify obfuscated code", "type": "tool", "pushedAt": "2026-05-20T12:03:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mrphrazer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" }, { "login": "seekbytes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/102438368?v=4", "type": "User" } ] }, { "repo": "mazen160/struts-pwn_cve-2017-9805", "name": "struts-pwn_cve-2017-9805", "owner": "mazen160", "url": "https://github.com/mazen160/struts-pwn_CVE-2017-9805", "stars": 247, "language": "Python", "description": "An exploit for Apache Struts CVE-2017-9805", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "adb4264662de", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-07T19:24:00Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "tw1sm/sql-bof", "name": "sql-bof", "owner": "tw1sm", "url": "https://github.com/Tw1sm/SQL-BOF", "stars": 241, "language": "C", "description": "Library of BOFs to interact with SQL servers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "056bb3a44e9c", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" }, { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" }, { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" } ], "pushedAt": "2025-12-03T02:25:24Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "CCob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "bugch3ck", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" }, { "login": "martanne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5736493?v=4", "type": "User" }, { "login": "PraMiD", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12020624?v=4", "type": "User" }, { "login": "dejisec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66847551?v=4", "type": "User" }, { "login": "hunterino-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41126746?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/nimgetsyscallstub", "name": "nimgetsyscallstub", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/NimGetSyscallStub", "stars": 232, "language": "Nim", "description": "Get fresh Syscalls from a fresh ntdll.dll copy", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "085e683be6ad", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-28T20:18:35Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "klezvirus/moonwalk--", "name": "moonwalk--", "owner": "klezvirus", "url": "https://github.com/klezVirus/Moonwalk--", "stars": 231, "language": "C++", "description": "Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b2cba920244", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-17T12:41:05Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "theevilbit/shield", "name": "shield", "owner": "theevilbit", "url": "https://github.com/theevilbit/Shield", "stars": 228, "language": "Objective-C", "description": "An app to protect against process injection and suspicious file links on macOS", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ebd848e87c29", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-19T07:11:42Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "romainthomas/the-poor-mans-obfuscator", "name": "the-poor-mans-obfuscator", "owner": "romainthomas", "url": "https://github.com/romainthomas/the-poor-mans-obfuscator", "id": "46d85fa1993c", "stars": 228, "language": "Python", "description": "Binary & scripts associated with \"The Poor Man's Obfuscator\" presentation ", "type": "tool", "pushedAt": "2022-07-06T08:31:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Romain Thomas", "cardId": "3f2be7db48fe67f5", "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "romainthomas", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4", "type": "User" } ] }, { "repo": "infosec-au/enumxff", "name": "enumxff", "owner": "infosec-au", "url": "https://github.com/infosec-au/enumXFF", "stars": 226, "language": "Python", "description": "Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions", "type": "tool", "lanes": [ "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1c6603f1b6df", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-03-29T23:40:31Z", "archived": false, "topContributors": [ { "login": "infosec-au", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" }, { "login": "JonLittleIT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22354862?v=4", "type": "User" } ] }, { "repo": "mrphrazer/binary-ninja-headless-mcp", "name": "binary-ninja-headless-mcp", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/binary-ninja-headless-mcp", "id": "2dc4a4f7d1ab", "stars": 225, "language": "Python", "description": "Headless Binary Ninja MCP server — giving AI agents deep reverse-engineering capabilities via 180 tools.", "type": "tool", "pushedAt": "2026-05-20T10:45:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mrphrazer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" } ] }, { "repo": "tw1sm/spraycharles", "name": "spraycharles", "owner": "Tw1sm", "url": "https://github.com/Tw1sm/spraycharles", "id": "4fea98ad00f6", "stars": 223, "language": "Python", "description": "Low and slow password spraying tool, designed to spray on an interval over a long period of time", "type": "tool", "pushedAt": "2026-01-30T17:34:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "Tw1sm", "c": 163, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "puzzlepeaches", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/8538866?v=4", "type": "User" }, { "login": "NotDog", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50743662?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "Mortimus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1945569?v=4", "type": "User" } ] }, { "repo": "xpn/randomtsscripts", "name": "randomtsscripts", "owner": "xpn", "url": "https://github.com/xpn/RandomTSScripts", "stars": 214, "language": "C++", "description": "Collection of random RedTeam scripts.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f1cd6408b756", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-08T23:36:55Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "ne0nd0g/merlin-agent", "name": "merlin-agent", "owner": "Ne0nd0g", "url": "https://github.com/Ne0nd0g/merlin-agent", "id": "2acb7662f7ad", "stars": 214, "language": "Go", "description": "Post-exploitation agent for Merlin", "type": "tool", "pushedAt": "2025-04-16T14:12:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Ne0nd0g", "c": 235, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "paullj1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8845575?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "tw1sm/pysqlrecon", "name": "pysqlrecon", "owner": "tw1sm", "url": "https://github.com/Tw1sm/PySQLRecon", "stars": 211, "language": "Python", "description": "Offensive MSSQL toolkit written in Python, based off SQLRecon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb9f27f26d06", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-08T20:49:38Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" } ] }, { "repo": "theevilbit/exploit_generator", "name": "exploit_generator", "owner": "theevilbit", "url": "https://github.com/theevilbit/exploit_generator", "stars": 192, "language": "Python", "description": "Automated Exploit generation with WinDBG", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d2c3aaa7592", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-10-18T18:51:59Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "netspooky/inhale", "name": "inhale", "owner": "netspooky", "url": "https://github.com/netspooky/inhale", "stars": 191, "language": "Python", "description": "A malware analysis and classification tool.", "type": "tool", "lanes": [ "2" ], "author": { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4385237bd295", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-03T14:00:17Z", "archived": false, "topContributors": [ { "login": "netspooky", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "type": "User" } ] }, { "repo": "xpn/ssh-inject", "name": "ssh-inject", "owner": "xpn", "url": "https://github.com/xpn/ssh-inject", "stars": 190, "language": "C", "description": "A ptrace POC by hooking SSH to reveal provided passwords", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "18cd9b22595d", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-04-18T22:12:01Z", "archived": false, "topContributors": [] }, { "repo": "c0kernel/npmhound", "name": "npmhound", "owner": "c0kernel", "url": "https://github.com/C0KERNEL/NPMHound", "stars": 3, "language": "Go", "description": "BloodHound OpenGraph extension for NPM package dependencies", "type": "tool", "lanes": [ "2" ], "author": { "name": "JD Crandell", "cardId": "6a9621406329d340", "avatar": "https://avatars.githubusercontent.com/u/39346277?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f284e5d2a86d", "score": 44, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-23T14:03:23Z", "archived": false, "topContributors": [ { "login": "C0KERNEL", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/39346277?v=4", "type": "User" } ] }, { "repo": "senderend/ghostsurf", "name": "ghostsurf", "owner": "senderend", "url": "https://github.com/senderend/ghostsurf", "stars": 178, "language": "Python", "description": "NTLM HTTP relay tool with SOCKS proxy for browser session hijacking", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/04/02/ghostsurf-from-ntlm-relay-to-browser-session-hijacking/", "title": "ghostsurf: From NTLM Relay to Browser Session Hijacking", "person": "Allen DeMoura" } ], "referencedCount": 1, "id": "d504fbfee0de", "score": 43, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-06T18:19:24Z", "archived": false, "topContributors": [ { "login": "senderend", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" } ] }, { "repo": "api0cradle/poweral", "name": "poweral", "owner": "api0cradle", "url": "https://github.com/api0cradle/PowerAL", "stars": 174, "language": "PowerShell", "description": "A Powershell module that helps you identify AppLocker weaknesses", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [ { "url": "https://oddvar.moe/2018/10/06/temporary-constrained-language-mode-in-applocker/", "title": "%Temp%orary Constrained Language mode in AppLocker", "person": "Oddvar Moe" } ], "referencedCount": 1, "id": "ec168eb3466b", "score": 43, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 148, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-11T01:26:48Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "adnanekhan/cacheract", "name": "cacheract", "owner": "adnanekhan", "url": "https://github.com/AdnaneKhan/Cacheract", "stars": 167, "language": "TypeScript", "description": "GitHub Actions Cache Native Malware - for Educational and Research Purposes only.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Adnan Khan", "cardId": "3d12002cf2cb67c0", "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4" }, "referencedBy": [ { "url": "https://adnanthekhan.com/2024/12/21/cacheract-the-monster-in-your-build-cache/", "title": "Cacheract: The Monster in your Build Cache | Adnan Khan - Security Research", "person": "Adnan Khan" } ], "referencedCount": 1, "id": "d09cc8272f66", "score": 43, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-08T12:24:35Z", "archived": false, "topContributors": [ { "login": "AdnaneKhan", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4", "type": "User" } ] }, { "repo": "decoder-it/chgpass", "name": "chgpass", "owner": "decoder-it", "url": "https://github.com/decoder-it/ChgPass", "stars": 137, "language": "C", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2025/02/11/changing-windows-passwords-in-the-most-complex-way/", "title": "Changing Windows Passwords in the Most Complex Way", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "795494f9f7a2", "score": 43, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-11T14:12:14Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "decoder-it/networkserviceexploit", "name": "networkserviceexploit", "owner": "decoder-it", "url": "https://github.com/decoder-it/NetworkServiceExploit", "stars": 130, "language": "C", "description": "POC for NetworkService PrivEsc ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2020/05/04/from-network-service-to-system/", "title": "From NETWORK SERVICE to SYSTEM", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "0ec805979204", "score": 43, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-04T17:02:48Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "refirmlabs/binwalk", "name": "binwalk", "owner": "ReFirmLabs", "url": "https://github.com/ReFirmLabs/binwalk", "id": "e938d12a4a69", "stars": 14136, "language": "Rust", "description": "Firmware Analysis Tool", "type": "tool", "pushedAt": "2026-06-17T17:06:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ReFirmLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Stefan Viehböck", "cardId": "6587421211025ca4", "avatar": "https://avatars.githubusercontent.com/u/1294980?v=4", "login": "sviehb" }, { "name": "Matt Brown", "cardId": "bc22a79c210791dc", "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4", "login": "nmatt0" }, { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "login": "qkaiser" }, { "name": "Ben Gardiner", "cardId": "e3bd9e216e63b891", "avatar": "https://avatars.githubusercontent.com/u/243321?v=4", "login": "BenGardiner" }, { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" }, { "name": "Filippo Valsorda", "cardId": "9f10b11efbce4c69", "avatar": "https://avatars.githubusercontent.com/u/1225294?v=4", "login": "FiloSottile" } ], "adoptionOperators": 15, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 92, "topContributors": [ { "login": "devttys0", "c": 1468, "avatar": "https://avatars.githubusercontent.com/u/5703146?v=4", "type": "User" }, { "login": "eacmen", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/21159128?v=4", "type": "User" }, { "login": "sundhaug92", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/519283?v=4", "type": "User" }, { "login": "socketz", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/638274?v=4", "type": "User" }, { "login": "ddcc", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1108560?v=4", "type": "User" }, { "login": "impervius", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/63152795?v=4", "type": "User" }, { "login": "M1cha", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/878458?v=4", "type": "User" }, { "login": "clark-ja", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/37738506?v=4", "type": "User" }, { "login": "Flameeyes", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/74834?v=4", "type": "User" }, { "login": "sviehb", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1294980?v=4", "type": "User" }, { "login": "banditopazzo", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/31891976?v=4", "type": "User" }, { "login": "TobleMiner", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2042858?v=4", "type": "User" }, { "login": "LocutusOfBorg", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1227338?v=4", "type": "User" }, { "login": "Lekensteyn", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/164530?v=4", "type": "User" }, { "login": "SambasOnFire", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/55437461?v=4", "type": "User" }, { "login": "sorja", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5508251?v=4", "type": "User" }, { "login": "CoffeeExpress", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/34044521?v=4", "type": "User" }, { "login": "Manouchehri", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7232674?v=4", "type": "User" }, { "login": "santosh653", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/70637961?v=4", "type": "User" }, { "login": "nezza", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/208596?v=4", "type": "User" }, { "login": "m0sia", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/437850?v=4", "type": "User" }, { "login": "christopher-conley", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11824616?v=4", "type": "User" }, { "login": "bmaia", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2236746?v=4", "type": "User" }, { "login": "thesourcerer8", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6086693?v=4", "type": "User" }, { "login": "owl129", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11975423?v=4", "type": "User" }, { "login": "liske", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/372458?v=4", "type": "User" }, { "login": "rhilseth", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61148747?v=4", "type": "User" }, { "login": "P1tt1cus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30161177?v=4", "type": "User" }, { "login": "nmatt0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4", "type": "User" }, { "login": "jameshilliard", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3298484?v=4", "type": "User" } ] }, { "repo": "gallopsled/pwntools", "name": "pwntools", "owner": "Gallopsled", "url": "https://github.com/Gallopsled/pwntools", "id": "dee15a125c43", "stars": 13593, "language": "Python", "description": "CTF framework and exploit development library", "type": "tool", "pushedAt": "2026-07-05T21:47:24Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Gallopsled", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "bruce30262", "cardId": "04a6b32e757c4fc9", "avatar": "https://avatars.githubusercontent.com/u/4478350?v=4", "login": "bruce30262" }, { "name": "Connor Nelson", "cardId": "165241335daad83f", "avatar": "https://avatars.githubusercontent.com/u/5953003?v=4", "login": "ConnorNelson" } ], "adoptionOperators": 11, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "zachriggle", "c": 1779, "avatar": "https://avatars.githubusercontent.com/u/111640?v=4", "type": "User" }, { "login": "Arusekk", "c": 463, "avatar": "https://avatars.githubusercontent.com/u/25570059?v=4", "type": "User" }, { "login": "br0ns", "c": 403, "avatar": "https://avatars.githubusercontent.com/u/121501?v=4", "type": "User" }, { "login": "peace-maker", "c": 237, "avatar": "https://avatars.githubusercontent.com/u/1635147?v=4", "type": "User" }, { "login": "heapcrash", "c": 179, "avatar": "https://avatars.githubusercontent.com/u/66139157?v=4", "type": "User" }, { "login": "RobertLarsen", "c": 172, "avatar": "https://avatars.githubusercontent.com/u/795303?v=4", "type": "User" }, { "login": "kokjo", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/490102?v=4", "type": "User" }, { "login": "kristoff3r", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/160317?v=4", "type": "User" }, { "login": "TethysSvensson", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/4294434?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 24, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Haabb", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/765489?v=4", "type": "User" }, { "login": "narzeja", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/358564?v=4", "type": "User" }, { "login": "peter50216", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/891109?v=4", "type": "User" }, { "login": "patryk4815", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/3074260?v=4", "type": "User" }, { "login": "ZetaTwo", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/870392?v=4", "type": "User" }, { "login": "k4lizen", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/124312252?v=4", "type": "User" }, { "login": "disconnect3d", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10009354?v=4", "type": "User" }, { "login": "Kyle-Kyle", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/13167376?v=4", "type": "User" }, { "login": "RocketMaDev", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/48864431?v=4", "type": "User" }, { "login": "justinsteven", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1893909?v=4", "type": "User" }, { "login": "the-soloist", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/46804083?v=4", "type": "User" }, { "login": "cclauss", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "StevenVanAcker", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2060446?v=4", "type": "User" }, { "login": "152334H", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/54623771?v=4", "type": "User" }, { "login": "meithecatte", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/23580910?v=4", "type": "User" }, { "login": "clubby789", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13556931?v=4", "type": "User" }, { "login": "bannsec", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7632864?v=4", "type": "User" }, { "login": "klecko", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/30784034?v=4", "type": "User" }, { "login": "leommxj", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11194599?v=4", "type": "User" }, { "login": "tkmikan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36260601?v=4", "type": "User" } ] }, { "repo": "romainthomas/reverse-engineering-workshop", "name": "reverse-engineering-workshop", "owner": "romainthomas", "url": "https://github.com/romainthomas/reverse-engineering-workshop", "id": "0cd301e63bcd", "stars": 181, "language": null, "description": "Slides & Hands-on for the reverse engineering workshop", "type": "tool", "pushedAt": "2022-12-05T06:30:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Romain Thomas", "cardId": "3f2be7db48fe67f5", "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "romainthomas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4", "type": "User" } ] }, { "repo": "mayerdaniel/the-one-wsl-bof", "name": "the-one-wsl-bof", "owner": "mayerdaniel", "url": "https://github.com/MayerDaniel/the-one-wsl-bof", "stars": 178, "language": "C", "description": "One WSL BOF to rule them all", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e37e5693930", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-14T00:08:14Z", "archived": false, "topContributors": [ { "login": "harsh04081997", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/32217943?v=4", "type": "User" } ] }, { "repo": "chrismaddalena/sharpcloud", "name": "sharpcloud", "owner": "chrismaddalena", "url": "https://github.com/chrismaddalena/SharpCloud", "stars": 177, "language": "C#", "description": "Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e6def5ab6903", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-09-18T02:24:10Z", "archived": false, "topContributors": [ { "login": "chrismaddalena", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/nimdllsideload", "name": "nimdllsideload", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/NimDllSideload", "stars": 175, "language": "Nim", "description": "DLL sideloading/proxying with Nim!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8554e6d69917", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-04T21:52:49Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/dnschef-ng", "name": "dnschef-ng", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/dnschef-ng", "stars": 174, "language": "Python", "description": "DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "027dcd642a11", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-26T06:57:04Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "werdhaihai/msi_lateral_mv", "name": "msi_lateral_mv", "owner": "werdhaihai", "url": "https://github.com/werdhaihai/msi_lateral_mv", "stars": 172, "language": "C", "description": "Lateral Movement Bof with MSI ODBC Driver Install", "type": "tool", "lanes": [ "2" ], "author": { "name": "Craig Wright", "cardId": "566c73c2eb67c6ea", "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2a0adb839a98", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-30T20:19:05Z", "archived": false, "topContributors": [ { "login": "werdhaihai", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4", "type": "User" } ] }, { "repo": "netspooky/gtfoplus", "name": "gtfoplus", "owner": "netspooky", "url": "https://github.com/netspooky/gtfoplus", "stars": 166, "language": "Python", "description": "Linux Local Privesc Helper and Agent", "type": "tool", "lanes": [ "2" ], "author": { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1dcff1a01a3c", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2019-12-02T19:50:47Z", "archived": false, "topContributors": [] }, { "repo": "klezvirus/raiwhatevertrigger", "name": "RAIWhateverTrigger", "owner": "klezVirus", "url": "https://github.com/klezVirus/RAIWhateverTrigger", "id": "9e38a9f8615f", "stars": 159, "language": "C", "description": "Local SYSTEM auth trigger for relaying - X", "type": "tool", "pushedAt": "2025-07-23T13:44:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "klezVirus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "decoder-it/powershellveryless", "name": "powershellveryless", "owner": "decoder-it", "url": "https://github.com/decoder-it/powershellveryless", "stars": 155, "language": "C#", "description": "Constrained Language Mode + AMSI bypass all in one", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "78a7cc2e5b2b", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-29T07:34:42Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "api0cradle/redteamscripts", "name": "redteamscripts", "owner": "api0cradle", "url": "https://github.com/api0cradle/RedTeamScripts", "stars": 154, "language": "Python", "description": "Just some random Red Team Scripts that can be useful", "type": "tool", "lanes": [ "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bacac17e1c8d", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-12T11:59:10Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "clearbluejar/ghidrecomp", "name": "ghidrecomp", "owner": "clearbluejar", "url": "https://github.com/clearbluejar/ghidrecomp", "id": "9fe136bb7914", "stars": 154, "language": "Python", "description": "Python Command-Line Ghidra Decompiler", "type": "tool", "pushedAt": "2026-01-06T16:56:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "John McIntosh", "cardId": "27b3a1960aa36a0f", "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "clearbluejar", "c": 151, "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4", "type": "User" }, { "login": "unimpossible", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3935212?v=4", "type": "User" } ] }, { "repo": "klezvirus/sharpselfdelete", "name": "sharpselfdelete", "owner": "klezvirus", "url": "https://github.com/klezVirus/SharpSelfDelete", "stars": 150, "language": "C#", "description": "C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "69c2e9f16c09", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-25T17:10:09Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/vulnerability-spoiler-alert", "name": "vulnerability-spoiler-alert", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/vulnerability-spoiler-alert", "id": "cbdafe3c3909", "stars": 144, "language": "JavaScript", "description": "A monitoring hub that watches popular open-source repositories and uses AI to detect when commits are patching security vulnerabilities - often before a CVE is even assigned. Findings are published to", "type": "tool", "pushedAt": "2026-07-18T00:02:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "github-actions[bot]", "c": 3859, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "spaceraccoon", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4", "type": "User" } ] }, { "repo": "jfmaes/trustjack", "name": "trustjack", "owner": "jfmaes", "url": "https://github.com/jfmaes/TrustJack", "stars": 143, "language": "C#", "description": "Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ebb9161d3027", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-11T10:26:25Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "tyranid/ie11sandboxescapes", "name": "IE11SandboxEscapes", "owner": "tyranid", "url": "https://github.com/tyranid/IE11SandboxEscapes", "id": "1a421bf346f9", "stars": 142, "language": "Objective-C", "description": "Some example source code for fixed IE11 sandbox escapes.", "type": "tool", "pushedAt": "2014-08-21T15:28:33Z", "archived": false, "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tyranid", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "decalage2/balbuzard", "name": "balbuzard", "owner": "decalage2", "url": "https://github.com/decalage2/balbuzard", "stars": 141, "language": "YARA", "description": "Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can als", "type": "tool", "lanes": [ "2" ], "author": { "name": "Philippe Lagadec", "cardId": "2f01d6d832e70243", "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d24666178496", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-01-10T07:54:35Z", "archived": false, "topContributors": [ { "login": "decalage2", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4", "type": "User" }, { "login": "arothenhaeuser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7721288?v=4", "type": "User" } ] }, { "repo": "klezvirus/rpcproxyinvoke", "name": "rpcproxyinvoke", "owner": "klezvirus", "url": "https://github.com/klezVirus/RpcProxyInvoke", "stars": 139, "language": "C++", "description": "Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "86ce3f1f239c", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-10T15:50:44Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "darkoperator/vscode-language-aggressor", "name": "vscode-language-aggressor", "owner": "darkoperator", "url": "https://github.com/darkoperator/vscode-language-aggressor", "stars": 139, "language": null, "description": "Cobalt Strike Aggressor extension for Visual Studio Code", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8c2a683ae400", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-06-20T12:52:15Z", "archived": false, "topContributors": [ { "login": "darkoperator", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "am0nsec", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20334678?v=4", "type": "User" } ] }, { "repo": "tyranid/deviceguardbypasses", "name": "DeviceGuardBypasses", "owner": "tyranid", "url": "https://github.com/tyranid/DeviceGuardBypasses", "id": "93f1633c349a", "stars": 139, "language": "C#", "description": "A repository of some of my Windows 10 Device Guard Bypasses", "type": "tool", "pushedAt": "2017-08-03T21:22:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tyranid", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "infosec-au/little-doctor", "name": "little-doctor", "owner": "infosec-au", "url": "https://github.com/infosec-au/little-doctor", "stars": 135, "language": "JavaScript", "description": "🔥🔥🔥 Out of the Browser into the Fire - Cross platform XSS worm framework 🔥🔥🔥", "type": "tool", "lanes": [ "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c45da3f1cc6", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2016-11-17T01:31:09Z", "archived": false, "topContributors": [ { "login": "infosec-au", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" }, { "login": "shubs-bfox", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23492424?v=4", "type": "User" } ] }, { "repo": "p0dalirius/tomcat-webshell-application", "name": "Tomcat-webshell-application", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Tomcat-webshell-application", "id": "110d34db2a99", "stars": 133, "language": "Java", "description": "A webshell application and interactive shell for pentesting Apache Tomcat servers.", "type": "tool", "pushedAt": "2025-02-11T08:22:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "xpn/ntlmquic", "name": "ntlmquic", "owner": "xpn", "url": "https://github.com/xpn/ntlmquic", "stars": 132, "language": "C", "description": "POC tools for exploring SMB over QUIC protocol", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c0f4e73c990f", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-06T11:22:11Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "jfmaes/phisherman", "name": "phisherman", "owner": "jfmaes", "url": "https://github.com/jfmaes/phisherman", "id": "869a80051fe4", "stars": 130, "language": "JavaScript", "description": "A real fake social engineering app", "type": "tool", "pushedAt": "2025-07-13T22:16:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jfmaes", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "matterpreter/shapeshifter", "name": "shapeshifter", "owner": "matterpreter", "url": "https://github.com/matterpreter/SHAPESHIFTER", "stars": 128, "language": "C#", "description": "Companion PoC for the \"Adventures in Dynamic Evasion\" blog post", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Hand", "cardId": "950ad55ac31bdd3a", "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "97c9c43f2aba", "score": 43, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-25T17:42:40Z", "archived": false, "topContributors": [ { "login": "matterpreter", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/1756781?v=4", "type": "User" } ] }, { "repo": "frohoff/ysoserial", "name": "ysoserial", "owner": "frohoff", "url": "https://github.com/frohoff/ysoserial", "stars": 8981, "language": "Java", "description": "A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.", "type": "tool", "lanes": [ "1" ], "author": { "name": "frohoff", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2024/05/25/htb-bizness.html", "title": "HTB: Bizness", "person": "0xdf" }, { "url": "https://code-white.com/blog/2017-05-sap-customers-make-sure-your-sapjvm-is/", "title": "CODE WHITE | SAP Customers: Make sure your SAPJVM is up-to-date!", "person": "Sebastian Feldmann" }, { "url": "https://code-white.com/blog/2018-01-handcrafted-gadgets/", "title": "CODE WHITE | Handcrafted Gadgets", "person": "Sebastian Feldmann" } ], "referencedCount": 3, "id": "c41b668458d5", "score": 42, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 10, "mentionDistinct": 11, "contributorCount": 31, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Jonathan Leitschuh", "cardId": "dc3c42eee9426138", "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "login": "JLLeitschuh" } ], "pushedAt": "2025-12-04T04:07:31Z", "archived": false, "topContributors": [ { "login": "frohoff", "c": 99, "avatar": "https://avatars.githubusercontent.com/u/6477?v=4", "type": "User" }, { "login": "mbechler", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/4471061?v=4", "type": "User" }, { "login": "matthiaskaiser", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4790750?v=4", "type": "User" }, { "login": "jacob-baines", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/787916?v=4", "type": "User" }, { "login": "Alexandre-Bartel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/655248?v=4", "type": "User" }, { "login": "pwntester", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/125701?v=4", "type": "User" }, { "login": "drwetter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8036727?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "ltearno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/191069?v=4", "type": "User" }, { "login": "phra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" }, { "login": "gebl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3960479?v=4", "type": "User" }, { "login": "h0ng10", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1886150?v=4", "type": "User" }, { "login": "JackOfMostTrades", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1009310?v=4", "type": "User" }, { "login": "Jakobu5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32122722?v=4", "type": "User" }, { "login": "jasinner", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/950644?v=4", "type": "User" }, { "login": "JLLeitschuh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "type": "User" }, { "login": "artsploit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44605151?v=4", "type": "User" }, { "login": "NickstaDB", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1425835?v=4", "type": "User" }, { "login": "h3xstream", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/593130?v=4", "type": "User" }, { "login": "SkylarWatson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/182551?v=4", "type": "User" }, { "login": "DoctorDrive", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/106956963?v=4", "type": "User" }, { "login": "darryk10", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/77834235?v=4", "type": "User" }, { "login": "gitter-badger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8518239?v=4", "type": "User" }, { "login": "XinRoom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32238570?v=4", "type": "User" }, { "login": "yechielw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41305372?v=4", "type": "User" }, { "login": "chenzhang22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21978916?v=4", "type": "User" }, { "login": "aydinnyunus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52822869?v=4", "type": "User" }, { "login": "jax777", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15272113?v=4", "type": "User" }, { "login": "nikaiw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1255732?v=4", "type": "User" }, { "login": "scristalli", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7326295?v=4", "type": "User" } ] }, { "repo": "webkit/webkit", "name": "webkit", "owner": "webkit", "url": "https://github.com/WebKit/WebKit", "stars": 10002, "language": "JavaScript", "description": "Home of the WebKit project, the browser engine used by Safari, Mail, App Store and many other applications on macOS, iOS and Linux.", "type": "tool", "lanes": [ "1" ], "author": { "name": "webkit", "cardId": null }, "referencedBy": [ { "url": "https://varik.dev/blog/jsc/jsc-exploitation-primitives-part-1", "title": "JSC Exploitation Primitives - Part 1: From One OOB to Cage-Free Arbitrary R/W", "person": "Varik" }, { "url": "https://blog.calif.io/p/reverse-engineering-apples-silent", "title": "Reverse engineering Apple’s silent security fixes", "person": "calif" } ], "referencedCount": 2, "id": "6c57bc57da92", "score": 42, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 12, "mentionDistinct": 12, "contributorCount": 100, "contributors": [], "pushedAt": "2026-07-18T04:28:10Z", "archived": false, "topContributors": [ { "login": "cdumez", "c": 10794, "avatar": "https://avatars.githubusercontent.com/u/995975?v=4", "type": "User" }, { "login": "darinadler", "c": 6305, "avatar": "https://avatars.githubusercontent.com/u/33187212?v=4", "type": "User" }, { "login": "rniwa", "c": 6001, "avatar": "https://avatars.githubusercontent.com/u/285965?v=4", "type": "User" }, { "login": "alanbaradlay", "c": 5951, "avatar": "https://avatars.githubusercontent.com/u/9871613?v=4", "type": "User" }, { "login": "eseidel", "c": 5720, "avatar": "https://avatars.githubusercontent.com/u/478541?v=4", "type": "User" }, { "login": "webkit-commit-queue", "c": 5652, "avatar": "https://avatars.githubusercontent.com/u/77073439?v=4", "type": "User" }, { "login": "smfr", "c": 5523, "avatar": "https://avatars.githubusercontent.com/u/20968?v=4", "type": "User" }, { "login": "Constellation", "c": 4996, "avatar": "https://avatars.githubusercontent.com/u/9023?v=4", "type": "User" }, { "login": "youennf", "c": 4858, "avatar": "https://avatars.githubusercontent.com/u/5575980?v=4", "type": "User" }, { "login": "carlosgcampos", "c": 4202, "avatar": "https://avatars.githubusercontent.com/u/5434964?v=4", "type": "User" }, { "login": "aproskuryakov", "c": 3795, "avatar": "https://avatars.githubusercontent.com/u/5872842?v=4", "type": "User" }, { "login": "achristensen07", "c": 3586, "avatar": "https://avatars.githubusercontent.com/u/1481072?v=4", "type": "User" }, { "login": "whsieh", "c": 3156, "avatar": "https://avatars.githubusercontent.com/u/1448295?v=4", "type": "User" }, { "login": "philn", "c": 3089, "avatar": "https://avatars.githubusercontent.com/u/34114?v=4", "type": "User" }, { "login": "anttijk", "c": 3016, "avatar": "https://avatars.githubusercontent.com/u/23225331?v=4", "type": "User" }, { "login": "hortont424", "c": 2972, "avatar": "https://avatars.githubusercontent.com/u/118443?v=4", "type": "User" }, { "login": "geoffreygaren", "c": 2737, "avatar": "https://avatars.githubusercontent.com/u/6519785?v=4", "type": "User" }, { "login": "ryanhaddad", "c": 2590, "avatar": "https://avatars.githubusercontent.com/u/388916?v=4", "type": "User" }, { "login": "ossy-szeged", "c": 2533, "avatar": "https://avatars.githubusercontent.com/u/1391143?v=4", "type": "User" }, { "login": "jernoble", "c": 2502, "avatar": "https://avatars.githubusercontent.com/u/1557428?v=4", "type": "User" }, { "login": "JosephPecoraro", "c": 2472, "avatar": "https://avatars.githubusercontent.com/u/11351?v=4", "type": "User" }, { "login": "JonWBedard", "c": 2462, "avatar": "https://avatars.githubusercontent.com/u/6426975?v=4", "type": "User" }, { "login": "brentfulgham", "c": 2430, "avatar": "https://avatars.githubusercontent.com/u/44174109?v=4", "type": "User" }, { "login": "beidson", "c": 2363, "avatar": "https://avatars.githubusercontent.com/u/13395822?v=4", "type": "User" }, { "login": "pvollan", "c": 2314, "avatar": "https://avatars.githubusercontent.com/u/105022699?v=4", "type": "User" }, { "login": "aroben", "c": 2260, "avatar": "https://avatars.githubusercontent.com/u/917945?v=4", "type": "User" }, { "login": "zdobersek", "c": 2225, "avatar": "https://avatars.githubusercontent.com/u/555764?v=4", "type": "User" }, { "login": "graouts", "c": 2222, "avatar": "https://avatars.githubusercontent.com/u/49648?v=4", "type": "User" }, { "login": "xeenon", "c": 2196, "avatar": "https://avatars.githubusercontent.com/u/190589?v=4", "type": "User" }, { "login": "bdash", "c": 2167, "avatar": "https://avatars.githubusercontent.com/u/54825?v=4", "type": "User" } ] }, { "repo": "iagox86/dnscat2", "name": "dnscat2", "owner": "iagox86", "url": "https://github.com/iagox86/dnscat2", "stars": 3930, "language": "PHP", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Ron Bowes", "cardId": "06b5b8536124c5dc", "avatar": "https://avatars.githubusercontent.com/u/526412?v=4" }, "referencedBy": [ { "url": "https://in.security/2019/11/08/using-kibana-and-packetbeat-to-map-dns-queries/", "title": "Using Kibana and Packetbeat to map DNS queries - In.security", "person": "Owen Shearing" } ], "referencedCount": 1, "id": "6d24fd16398b", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 2, "contributorCount": 12, "contributors": [ { "name": "Azeria", "cardId": "16507922ba24d8df", "avatar": "https://avatars.githubusercontent.com/u/13849950?v=4", "login": "Fox0x01" } ], "pushedAt": "2024-03-14T11:17:49Z", "archived": false, "topContributors": [ { "login": "iagox86", "c": 859, "avatar": "https://avatars.githubusercontent.com/u/526412?v=4", "type": "User" }, { "login": "izhan", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4621962?v=4", "type": "User" }, { "login": "kost", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/68575?v=4", "type": "User" }, { "login": "FrankSpierings", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2954929?v=4", "type": "User" }, { "login": "bthaler", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6618967?v=4", "type": "User" }, { "login": "theel0ja", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5832930?v=4", "type": "User" }, { "login": "Fox0x01", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13849950?v=4", "type": "User" }, { "login": "Iorpim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22481687?v=4", "type": "User" }, { "login": "mrtolino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26986637?v=4", "type": "User" }, { "login": "lukebaggett", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3998892?v=4", "type": "User" }, { "login": "mdp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2868?v=4", "type": "User" }, { "login": "star26bsd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8288962?v=4", "type": "User" } ] }, { "repo": "itm4n/printspoofer", "name": "printspoofer", "owner": "itm4n", "url": "https://github.com/itm4n/PrintSpoofer", "stars": 2264, "language": "C", "description": "Abusing impersonation privileges through the \"Printer Bug\"", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/", "title": "PrintSpoofer - Abusing Impersonation Privileges on Windows 10 and Server 2019", "person": "Clément Labro" } ], "referencedCount": 1, "id": "47116e76e68c", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-10T17:49:41Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "mwnickerson/bloodhound_mcp", "name": "bloodhound_mcp", "owner": "mwnickerson", "url": "https://github.com/mwnickerson/bloodhound_mcp", "stars": 115, "language": "Python", "description": "A Model Context Protocol (MCP) server to converse with data in Bloodhound", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Matthew Nickerson", "cardId": "cbb0c9a7b3c8b4a2", "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/06/18/bloodhound-mcp-one-year-later-what-i-learned-about-mcps-models-and-context/", "title": "BloodHound MCP, One Year Later: What I Learned About MCPs, Models, and Context", "person": "Matthew Nickerson" } ], "referencedCount": 1, "id": "6a876b9610c6", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "pushedAt": "2026-06-01T16:21:36Z", "archived": false, "topContributors": [ { "login": "mwnickerson", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4", "type": "User" }, { "login": "5yn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25803146?v=4", "type": "User" }, { "login": "kyleavery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" }, { "login": "0xSultan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78733828?v=4", "type": "User" }, { "login": "samwmarsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74866556?v=4", "type": "User" } ] }, { "repo": "dirkjanm/roadtools_hybrid", "name": "roadtools_hybrid", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/roadtools_hybrid", "stars": 111, "language": "Python", "description": "Hybrid AD utilities for ROADtools", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://sapirxfed.com/2025/05/20/mini-quest-with-sync-api/", "title": "Mini quest with Sync API", "person": "Sapir Federovsky" } ], "referencedCount": 1, "id": "0f4e32b492c8", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-05-25T08:31:39Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "hugo-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "0x6d69636b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13913706?v=4", "type": "User" } ] }, { "repo": "synzack/ludus_sccm", "name": "ludus_sccm", "owner": "synzack", "url": "https://github.com/Synzack/ludus_sccm", "stars": 108, "language": "PowerShell", "description": "An Ansible collection that installs an SCCM deployment with optional configurations.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zach Stein", "cardId": "ed58244eaf4a39ed", "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/04/01/ludus-sccm-lab-expansion/", "title": "Ludus SCCM Lab Expansion", "person": "Chris Thompson" } ], "referencedCount": 1, "id": "7e77e02d53ae", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-08T14:59:17Z", "archived": false, "topContributors": [ { "login": "Synzack", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4", "type": "User" }, { "login": "kernel-sanders", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" } ] }, { "repo": "goichot/cve-2020-3153", "name": "cve-2020-3153", "owner": "goichot", "url": "https://github.com/goichot/CVE-2020-3153", "stars": 105, "language": "C#", "description": "Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Antoine Goichot", "cardId": "1b233373e0937e12", "avatar": "https://avatars.githubusercontent.com/u/8002862?v=4" }, "referencedBy": [ { "url": "https://www.goichot.fr/posts/cve-2020-3153/", "title": "Writing an exploit for CVE-2020-3153", "person": "Antoine Goichot" } ], "referencedCount": 1, "id": "8539db042a63", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-25T08:33:24Z", "archived": false, "topContributors": [ { "login": "goichot", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8002862?v=4", "type": "User" } ] }, { "repo": "souhailhammou/drivers", "name": "drivers", "owner": "souhailhammou", "url": "https://github.com/SouhailHammou/Drivers", "stars": 100, "language": "C", "description": "Windows Drivers", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Souhail Hammou", "cardId": "37d332f6bfa0a624", "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4" }, "referencedBy": [ { "url": "http://rce4fun.blogspot.com/2019/04/circumventing-windows-defender-atps.html", "title": "Circumventing Windows Defender ATP's user-mode APC Injection sensor from Kernel-mode", "person": "Souhail Hammou" } ], "referencedCount": 1, "id": "8e2b30f632ba", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-06T18:24:13Z", "archived": false, "topContributors": [ { "login": "SouhailHammou", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4", "type": "User" } ] }, { "repo": "enigma0x3/messagebox", "name": "messagebox", "owner": "enigma0x3", "url": "https://github.com/enigma0x3/MessageBox", "stars": 94, "language": "C++", "description": "PoC dlls for Task Scheduler COM Hijacking", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4" }, "referencedBy": [ { "url": "https://oddvar.moe/2017/12/13/applocker-case-study-how-insecure-is-it-really-part-1/", "title": "AppLocker – Case study – How insecure is it really? – Part 1", "person": "Oddvar Moe" } ], "referencedCount": 1, "id": "943ed93c7fa5", "score": 42, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 14, "contributorCount": 1, "contributors": [], "pushedAt": "2016-07-20T21:47:18Z", "archived": false, "topContributors": [ { "login": "enigma0x3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "type": "User" } ] }, { "repo": "pwndbg/pwndbg", "name": "pwndbg", "owner": "pwndbg", "url": "https://github.com/pwndbg/pwndbg", "id": "080024f4cb30", "stars": 10666, "language": "Python", "description": "Exploit Development and Reverse Engineering with GDB & LLDB Made Easy", "type": "tool", "pushedAt": "2026-07-17T01:42:37Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "pwndbg", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" } ], "adoptionOperators": 11, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "disconnect3d", "c": 503, "avatar": "https://avatars.githubusercontent.com/u/10009354?v=4", "type": "User" }, { "login": "zachriggle", "c": 498, "avatar": "https://avatars.githubusercontent.com/u/111640?v=4", "type": "User" }, { "login": "gsingh93", "c": 244, "avatar": "https://avatars.githubusercontent.com/u/1012677?v=4", "type": "User" }, { "login": "patryk4815", "c": 244, "avatar": "https://avatars.githubusercontent.com/u/3074260?v=4", "type": "User" }, { "login": "k4lizen", "c": 200, "avatar": "https://avatars.githubusercontent.com/u/124312252?v=4", "type": "User" }, { "login": "OBarronCS", "c": 144, "avatar": "https://avatars.githubusercontent.com/u/55004530?v=4", "type": "User" }, { "login": "mbrla0", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/4922458?v=4", "type": "User" }, { "login": "lebr0nli", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/61896187?v=4", "type": "User" }, { "login": "CptGibbon", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/16000770?v=4", "type": "User" }, { "login": "anthraxx", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/203012?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 53, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "jxuanli", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/65455765?v=4", "type": "User" }, { "login": "jackmisbach", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/183796460?v=4", "type": "User" }, { "login": "peace-maker", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/1635147?v=4", "type": "User" }, { "login": "fidgetingbits", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "c0rydoras", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/110528300?v=4", "type": "User" }, { "login": "nikoshell", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/150354584?v=4", "type": "User" }, { "login": "Aplet123", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/16807306?v=4", "type": "User" }, { "login": "cebrusfs", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/2252236?v=4", "type": "User" }, { "login": "lonnywong", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/20320324?v=4", "type": "User" }, { "login": "bet4it", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/16643669?v=4", "type": "User" }, { "login": "GrosQuildu", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/6371919?v=4", "type": "User" }, { "login": "clark-ja", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/37738506?v=4", "type": "User" }, { "login": "navytuner", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/102791272?v=4", "type": "User" }, { "login": "stnevans", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/19600162?v=4", "type": "User" }, { "login": "bog2n", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/84835312?v=4", "type": "User" }, { "login": "ntsleep", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/22474710?v=4", "type": "User" }, { "login": "jetchirag", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/15169678?v=4", "type": "User" }, { "login": "alufers", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5400940?v=4", "type": "User" }, { "login": "syheliel", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/45957390?v=4", "type": "User" } ] }, { "repo": "GhostPack/Certify", "name": "Certify", "owner": "GhostPack", "url": "https://github.com/GhostPack/Certify", "stars": 2011, "language": "C#", "description": "Active Directory certificate abuse.", "type": "tool", "lanes": [ "curated" ], "canonical": true, "author": { "name": "GhostPack", "cardId": null, "avatar": "https://avatars.githubusercontent.com/u/41304335?v=4" }, "referencedBy": [], "referencedCount": 0, "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": true }, "contributorCount": 14, "contributors": [ { "name": "Valdemar Carøe", "cardId": "0839557c496b21a7", "avatar": "https://avatars.githubusercontent.com/u/11381503?v=4", "login": "bytewreck" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" }, { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "id": "9819f0260be2", "pushedAt": "2026-03-30T16:13:27Z", "archived": false, "topContributors": [ { "login": "bytewreck", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/11381503?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "leechristensen", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "IsaPeter", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/63068320?v=4", "type": "User" }, { "login": "5tuk0v", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/90915844?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "TheWover", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17090738?v=4", "type": "User" }, { "login": "bchurchill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/640745?v=4", "type": "User" }, { "login": "CCob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "JonasBK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "ll1a4x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/73677016?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "daem0nc0re", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33651482?v=4", "type": "User" }, { "login": "michiellemmens", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28683856?v=4", "type": "User" } ] }, { "repo": "1n3/privesc", "name": "privesc", "owner": "1n3", "url": "https://github.com/1N3/PrivEsc", "stars": 994, "language": "C", "description": "A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b4714dc6ff9", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 16, "mentionDistinct": 16, "contributorCount": 3, "contributors": [], "pushedAt": "2017-12-13T20:09:28Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "Oderu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20214901?v=4", "type": "User" }, { "login": "giaurbs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16688885?v=4", "type": "User" } ] }, { "repo": "kingofthenops/cdp-enable-bof", "name": "cdp-enable-bof", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/CDP-Enable-BOF", "stars": 116, "language": "Python", "description": "Beacon Object File to Enable Chrome DevTools Protocol (CDP)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c6e8e0ba583", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Antero Guy", "cardId": "5b0f29ad7b712129", "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4", "login": "antroguy" } ], "pushedAt": "2026-07-01T14:51:03Z", "archived": false, "topContributors": [ { "login": "antroguy", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4", "type": "User" }, { "login": "KingOfTheNOPs", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" }, { "login": "beune", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47817451?v=4", "type": "User" } ] }, { "repo": "enigma0x3/powershell-payload-excel-delivery", "name": "powershell-payload-excel-delivery", "owner": "enigma0x3", "url": "https://github.com/enigma0x3/Powershell-Payload-Excel-Delivery", "stars": 115, "language": "PowerShell", "description": "Uses Invoke-Shellcode to execute a payload and persist on the system.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "039315088405", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-01-13T10:55:58Z", "archived": false, "topContributors": [] }, { "repo": "p0dalirius/cve-2022-36446-webmin-software-package-updates-rce", "name": "cve-2022-36446-webmin-software-package-updates-rce", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE", "stars": 115, "language": "Python", "description": "A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "42e8e5e91e63", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-31T09:36:30Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "p0dalirius/wordpress-webshell-plugin", "name": "Wordpress-webshell-plugin", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Wordpress-webshell-plugin", "id": "3d46ba45643e", "stars": 115, "language": "Python", "description": "A webshell plugin and interactive shell for pentesting a WordPress website. ", "type": "tool", "pushedAt": "2026-01-30T08:58:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "p0dalirius", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Goultarde", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/117078126?v=4", "type": "User" } ] }, { "repo": "iann0036/aws-leastprivilege", "name": "aws-leastprivilege", "owner": "iann0036", "url": "https://github.com/iann0036/aws-leastprivilege", "stars": 110, "language": "Python", "description": "Generates an IAM policy for the CloudFormation service role that adheres to least privilege.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ian Mckay", "cardId": "db14efc1267250d5", "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5b9d2c1277d9", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2023-08-27T23:07:52Z", "archived": false, "topContributors": [ { "login": "iann0036", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4", "type": "User" }, { "login": "andrew-kline", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65789862?v=4", "type": "User" }, { "login": "LaurenceWarne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17688577?v=4", "type": "User" }, { "login": "mgmarino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124705?v=4", "type": "User" }, { "login": "PatMyron", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7014355?v=4", "type": "User" } ] }, { "repo": "klezvirus/threadpoolexecchain", "name": "threadpoolexecchain", "owner": "klezvirus", "url": "https://github.com/klezVirus/ThreadPoolExecChain", "stars": 109, "language": "C++", "description": "A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "29fd368abd9d", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-25T11:34:07Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/spring-boot-actuator-h2-rce", "name": "spring-boot-actuator-h2-rce", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/spring-boot-actuator-h2-rce", "stars": 109, "language": "Java", "description": "Sample Spring Boot App Demonstrating RCE via Exposed env Actuator and H2 Database", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "94a2a3a26622", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-01-26T08:06:46Z", "archived": false, "topContributors": [] }, { "repo": "s3cur3th1ssh1t/excel-phish", "name": "excel-phish", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Excel-Phish", "stars": 109, "language": "VBA", "description": "Phish password protected Excel-Files", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7c97ce82b7eb", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-17T10:30:11Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "xpn/rpcenum", "name": "RpcEnum", "owner": "xpn", "url": "https://github.com/xpn/RpcEnum", "id": "a1e49ab4ae1d", "stars": 108, "language": "C++", "description": "An command-line RPC method enumerator, born out of RPCView's awesomeness", "type": "tool", "pushedAt": "2019-07-31T21:29:46Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "mrphrazer/ghidra-headless-mcp", "name": "ghidra-headless-mcp", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/ghidra-headless-mcp", "id": "1cb0ecc13fb9", "stars": 102, "language": "Python", "description": "Headless Ghidra MCP server — giving AI agents deep reverse-engineering capabilities.", "type": "tool", "pushedAt": "2026-06-30T05:44:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mrphrazer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" } ] }, { "repo": "seanheelan/heaplayout", "name": "HeapLayout", "owner": "SeanHeelan", "url": "https://github.com/SeanHeelan/HeapLayout", "id": "52671560d592", "stars": 101, "language": "C", "description": "Source code for paper 'Automatic Heap Layout Manipulation for Exploitation'", "type": "tool", "pushedAt": "2019-11-24T18:39:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "mayerdaniel/profiler-lateral-movement", "name": "profiler-lateral-movement", "owner": "mayerdaniel", "url": "https://github.com/MayerDaniel/profiler-lateral-movement", "stars": 100, "language": "C++", "description": "Lateral Movement via the .NET Profiler", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5a4b3cb7c36a", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-21T16:57:35Z", "archived": false, "topContributors": [ { "login": "MayerDaniel", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "type": "User" } ] }, { "repo": "stevenseeley/heaper", "name": "heaper", "owner": "stevenseeley", "url": "https://github.com/stevenseeley/heaper", "stars": 99, "language": "Python", "description": "heaper, an advanced heap analysis plugin for Immunity Debugger ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Steven Seeley", "cardId": "fde791457a7ce34d", "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "90c63a6081df", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2012-10-03T08:18:36Z", "archived": false, "topContributors": [ { "login": "stevenseeley", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "type": "User" } ] }, { "repo": "xpn/powershell-postexploitation", "name": "Powershell-PostExploitation", "owner": "xpn", "url": "https://github.com/xpn/Powershell-PostExploitation", "id": "f2d299ce22b8", "stars": 98, "language": "PowerShell", "description": "Scripts created to help with post exploitation of a Windows host", "type": "tool", "pushedAt": "2021-02-01T19:39:29Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "pn-tester/appxpotato", "name": "appxpotato", "owner": "pn-tester", "url": "https://github.com/PN-Tester/AppxPotato", "stars": 93, "language": "C#", "description": "AppX RPC Local Privilege Escalation - Windows 10/11 ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pierre Nicolas Allard Coutu", "cardId": "d7d4eaa8ecdead31", "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "13951a507ad5", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-21T15:38:47Z", "archived": false, "topContributors": [ { "login": "PN-Tester", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4", "type": "User" } ] }, { "repo": "tyranid/exploitdotnetdcom", "name": "exploitdotnetdcom", "owner": "tyranid", "url": "https://github.com/tyranid/ExploitDotNetDCOM", "stars": 92, "language": "C++", "description": "A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "29fcd90d65a4", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-10-14T22:56:28Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "theevilbit/exploits", "name": "exploits", "owner": "theevilbit", "url": "https://github.com/theevilbit/exploits", "id": "6c6c6cdef81a", "stars": 90, "language": "Python", "description": "", "type": "tool", "pushedAt": "2024-09-27T08:19:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "theevilbit", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "tw1sm/aeskrbkeygen", "name": "aeskrbkeygen", "owner": "tw1sm", "url": "https://github.com/Tw1sm/aesKrbKeyGen", "stars": 88, "language": "Python", "description": "Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3fae2780ddfc", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-01T16:16:13Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/rdpthiefinject", "name": "rdpthiefinject", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/RDPThiefInject", "stars": 88, "language": "C#", "description": "RDPThief donut shellcode inject into mstsc", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "708f8fd61b09", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-05-24T18:00:58Z", "archived": false, "topContributors": [] }, { "repo": "werdhaihai/sharpaltshellcodeexec", "name": "sharpaltshellcodeexec", "owner": "werdhaihai", "url": "https://github.com/werdhaihai/SharpAltShellCodeExec", "stars": 87, "language": "C#", "description": "Alternative Shellcode Execution Via Callbacks in C# with P/Invoke", "type": "tool", "lanes": [ "2" ], "author": { "name": "Craig Wright", "cardId": "566c73c2eb67c6ea", "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b8fadbf9d83", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-26T03:06:19Z", "archived": false, "topContributors": [ { "login": "werdhaihai", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/dhcpshock", "name": "DHCPShock", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/DHCPShock", "id": "5580b8aafd59", "stars": 86, "language": "Python", "description": "Spoofs a DHCP server and exploits all clients vulnerable to the 'ShellShock' bug", "type": "tool", "pushedAt": "2019-03-27T20:13:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "byt3bl33d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/bof-nim", "name": "bof-nim", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/BOF-Nim", "stars": 85, "language": "Nim", "description": "Cobalt Strike BOF Files with Nim!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "90c175441003", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-10T22:12:10Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2021-43008-adminerread", "name": "cve-2021-43008-adminerread", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2021-43008-AdminerRead", "stars": 85, "language": "Python", "description": "Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c394782fd95", "score": 42, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-16T08:25:52Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "xpn/ouroboros", "name": "ouroboros", "owner": "xpn", "url": "https://github.com/xpn/Ouroboros", "stars": 66, "language": "Rust", "description": "A POC tool for exploring dev-tunnels", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/05/06/dev-tunnels-the-accidental-c2/", "title": "The Accidental C2: Exploring Dev Tunnels for Remote Access", "person": "Adam Chester" }, { "url": "https://blog.xpnsec.com/accidental-c2/", "title": "The Accidental C2 - Exploring Dev Tunnels for Remote Access", "person": "Adam Chester" } ], "referencedCount": 2, "id": "6b030f9eeb8f", "score": 41, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-05T22:20:46Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "itm4n/privesccheck", "name": "privesccheck", "owner": "itm4n", "url": "https://github.com/itm4n/PrivescCheck", "stars": 3880, "language": "PowerShell", "description": "Privilege Escalation Enumeration Script for Windows", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/windows-registry-rpceptmapper-eop/", "title": "Windows RpcEptMapper Service Insecure Registry Permissions EoP", "person": "Clément Labro" } ], "referencedCount": 1, "id": "86df65c17de9", "score": 41, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-15T13:16:18Z", "archived": false, "topContributors": [ { "login": "itm4n", "c": 614, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" }, { "login": "AdrianVollmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26064811?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" } ] }, { "repo": "dirkjanm/bloodhound-azuread", "name": "bloodhound-azuread", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/BloodHound-AzureAD", "stars": 82, "language": "PowerShell", "description": "BloodHound with a twist of cloud", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [ { "url": "https://dirkjanm.io/introducing-roadtools-and-roadrecon-azure-ad-exploration-framework/", "title": "Introducing ROADtools - The Azure AD exploration framework", "person": "Dirk-jan Mollema" } ], "referencedCount": 1, "id": "e7609b53da68", "score": 41, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 24, "contributors": [ { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Tom Porter", "cardId": "fec0a09412335bcf", "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "login": "porterhau5" } ], "pushedAt": "2020-07-28T08:04:53Z", "archived": false, "topContributors": [ { "login": "rvazarkar", "c": 764, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "andyrobbins", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "cnotin", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "dirkjanm", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "Scoubi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7934465?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "sundhaug92", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/519283?v=4", "type": "User" }, { "login": "Hackndo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "qlemaire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29045289?v=4", "type": "User" }, { "login": "digininja", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117081?v=4", "type": "User" }, { "login": "awsmhacks", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2059326?v=4", "type": "User" }, { "login": "twinvega", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2187021?v=4", "type": "User" }, { "login": "porterhau5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "type": "User" }, { "login": "bismark-foofus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1953780?v=4", "type": "User" }, { "login": "nil0x42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3504393?v=4", "type": "User" }, { "login": "ttwye", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29230120?v=4", "type": "User" }, { "login": "peterhgombos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1403395?v=4", "type": "User" }, { "login": "mbrancato", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8493275?v=4", "type": "User" }, { "login": "ktwombley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1236182?v=4", "type": "User" }, { "login": "jesseflorig", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2729384?v=4", "type": "User" }, { "login": "cbrnrd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16970798?v=4", "type": "User" }, { "login": "Beercow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10360919?v=4", "type": "User" }, { "login": "mohemiv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5724896?v=4", "type": "User" } ] }, { "repo": "netspooky/dissectors", "name": "dissectors", "owner": "netspooky", "url": "https://github.com/netspooky/dissectors", "stars": 68, "language": "Lua", "description": "random dissectors", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4" }, "referencedBy": [ { "url": "https://n0.lol/applecontinuitydissector/", "title": "acble - Apple Continuity Dissector", "person": "netspooky" } ], "referencedCount": 1, "id": "f9c5fbc9d9a5", "score": 41, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 6, "contributorCount": 2, "contributors": [], "pushedAt": "2023-04-29T17:12:23Z", "archived": false, "topContributors": [ { "login": "netspooky", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "type": "User" }, { "login": "insidegui", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67184?v=4", "type": "User" } ] }, { "repo": "romainthomas/pgsharp", "name": "pgsharp", "owner": "romainthomas", "url": "https://github.com/romainthomas/pgsharp", "stars": 63, "language": "Java", "description": "Script & materials associated with the PGSharp reverse engineering ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Romain Thomas", "cardId": "3f2be7db48fe67f5", "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4" }, "referencedBy": [ { "url": "https://www.romainthomas.fr/post/21-11-pgsharp-analysis/", "title": "PGSharp: Analysis of a Cheating App for PokemonGO | Romain Thomas", "person": "Romain Thomas" } ], "referencedCount": 1, "id": "00780be60a7a", "score": 41, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-01T07:40:59Z", "archived": false, "topContributors": [ { "login": "romainthomas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4", "type": "User" } ] }, { "repo": "devanshbatham/paramspider", "name": "ParamSpider", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/ParamSpider", "id": "cd754a6a7fb0", "stars": 3136, "language": "Python", "description": " Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing ", "type": "tool", "pushedAt": "2026-03-07T16:16:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "devanshbatham", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" }, { "login": "vzamanillo", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10209695?v=4", "type": "User" }, { "login": "RoninNakomoto", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/76064954?v=4", "type": "User" }, { "login": "rotemreiss", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9288082?v=4", "type": "User" }, { "login": "Vincebye", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19506728?v=4", "type": "User" }, { "login": "CowlingBanana", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51919963?v=4", "type": "User" }, { "login": "storenth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18244131?v=4", "type": "User" }, { "login": "rotemplay", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54853320?v=4", "type": "User" } ] }, { "repo": "jaredcatkinson/malwaremorphology", "name": "MalwareMorphology", "owner": "jaredcatkinson", "url": "https://github.com/jaredcatkinson/MalwareMorphology", "id": "c38bb821e583", "stars": 84, "language": "C++", "description": "", "type": "tool", "pushedAt": "2024-11-21T16:45:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jared Atkinson", "cardId": "b74077f8734cc496", "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jaredcatkinson", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4", "type": "User" }, { "login": "jonny-jhnson", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/29631806?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2022-21907-http.sys", "name": "cve-2022-21907-http.sys", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2022-21907-http.sys", "stars": 83, "language": "Python", "description": "Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7a7482f4119f", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-16T08:26:06Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "cxiao/rust-reversing-workshop-recon-2024", "name": "rust-reversing-workshop-recon-2024", "owner": "cxiao", "url": "https://github.com/cxiao/rust-reversing-workshop-recon-2024", "stars": 81, "language": "Rust", "description": "Slides and files for the Reversing Rust Binaries: One step beyond strings workshop at REcon 2024, presented on June 28, 2024.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cindy Xiao", "cardId": "4d7f692404086cb1", "avatar": "https://avatars.githubusercontent.com/u/1661230?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf8bdb8b38b9", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-30T15:47:41Z", "archived": false, "topContributors": [ { "login": "cxiao", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1661230?v=4", "type": "User" } ] }, { "repo": "leechristensen/dotnetdeserializationscanner", "name": "DotNetDeserializationScanner", "owner": "leechristensen", "url": "https://github.com/leechristensen/DotNetDeserializationScanner", "id": "c8ed372ac140", "stars": 81, "language": "C#", "description": "Scans for .NET Deserialization Bugs in .NET Assemblies", "type": "tool", "pushedAt": "2024-11-21T17:50:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "leechristensen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" } ] }, { "repo": "kingofthenops/get-netntlm", "name": "get-netntlm", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/Get-NetNTLM", "stars": 80, "language": "C", "description": "Internal Monologue BOF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9ae0af8ff0c", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-28T03:26:24Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "jfmaes/backdoorplz", "name": "Backdoorplz", "owner": "jfmaes", "url": "https://github.com/jfmaes/Backdoorplz", "id": "bc5661acfd1f", "stars": 80, "language": "C++", "description": "adding a backdooruser using win32api", "type": "tool", "pushedAt": "2020-09-03T17:00:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jfmaes", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "klezvirus/koppeling-p", "name": "koppeling-p", "owner": "klezvirus", "url": "https://github.com/klezVirus/koppeling-p", "stars": 79, "language": "Python", "description": "Adaptive DLL hijacking / dynamic export forwarding - EAT preserve", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e1967829568", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-05T21:20:53Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "antroguy/locklessbof", "name": "locklessbof", "owner": "antroguy", "url": "https://github.com/antroguy/LocklessBof", "stars": 79, "language": "C++", "description": "Lockless BOF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antero Guy", "cardId": "5b0f29ad7b712129", "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f23f080574d2", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-05-02T15:42:28Z", "archived": false, "topContributors": [ { "login": "antroguy", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4", "type": "User" }, { "login": "n0pe-sled", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11933250?v=4", "type": "User" } ] }, { "repo": "xpn/blockchainc2", "name": "blockchainc2", "owner": "xpn", "url": "https://github.com/xpn/BlockchainC2", "stars": 79, "language": "Go", "description": "A POC C2 server and agent to explore just if/how the Ethereum blockchain can be used for C2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "997fa0f0cc66", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-05T10:52:56Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "xpn/mythic_mcp", "name": "mythic_mcp", "owner": "xpn", "url": "https://github.com/xpn/mythic_mcp", "stars": 78, "language": "Python", "description": "A simple POC to expose Mythic as a MCP server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f5ae451597e", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-20T22:20:01Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "p0dalirius/lfidump", "name": "LFIDump", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/LFIDump", "id": "2e94616246f1", "stars": 78, "language": "Python", "description": "A simple python script to dump remote files through a local file read or local file inclusion web vulnerability.", "type": "tool", "pushedAt": "2024-03-16T08:21:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "p0dalirius", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Syzik", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7074501?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/nimshellcodefluctuation", "name": "nimshellcodefluctuation", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/NimShellcodeFluctuation", "stars": 77, "language": "Nim", "description": "ShellcodeFluctuation PoC ported to Nim", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ad2f9fd4335f", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-14T06:48:13Z", "archived": false, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "dirkjanm/scepreq", "name": "scepreq", "owner": "dirkjanm", "url": "https://github.com/dirkjanm/scepreq", "stars": 77, "language": "Python", "description": "SCEP request tool for AD CS and Intune", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6d4c0f8afc40", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-24T07:58:29Z", "archived": false, "topContributors": [ { "login": "dirkjanm", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "aquinn-r7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/121982963?v=4", "type": "User" } ] }, { "repo": "xpn/dotnetdebug", "name": "dotnetdebug", "owner": "xpn", "url": "https://github.com/xpn/DotNetDebug", "stars": 74, "language": "C++", "description": "A simple POC to demonstrate the power of .NET debugging for injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "227c4b2567d1", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-11T00:14:19Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "mrphrazer/binary-cartography", "name": "binary-cartography", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/binary-cartography", "stars": 74, "language": "Dockerfile", "description": "Technical webinars on reverse engineering, malware analysis, and software protection.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d771f9ea3e59", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-02T22:30:37Z", "archived": false, "topContributors": [ { "login": "mrphrazer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" } ] }, { "repo": "harmj0y/impdump", "name": "impdump", "owner": "harmj0y", "url": "https://github.com/HarmJ0y/ImpDump", "stars": 70, "language": "Python", "description": "This is a simple parser for/decrypter for Impacket's esentutl.py utility. It assists with decrypting hashes and hash histories from ntds.dit databases.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7534188627d3", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2016-12-05T14:26:00Z", "archived": false, "topContributors": [ { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "itscooper", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7916070?v=4", "type": "User" }, { "login": "taherio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3180480?v=4", "type": "User" } ] }, { "repo": "harmj0y/cortana", "name": "cortana", "owner": "HarmJ0y", "url": "https://github.com/HarmJ0y/cortana", "id": "7ae58f2d2f1c", "stars": 70, "language": "PowerShell", "description": "This is a pack of Cortana scripts commonly used on our pentests.", "type": "tool", "pushedAt": "2014-11-25T05:38:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "rwxstoned/gimmeshelter", "name": "GimmeShelter", "owner": "RWXstoned", "url": "https://github.com/RWXstoned/GimmeShelter", "id": "76d5a94589b0", "stars": 70, "language": "Python", "description": "Situational Awareness script to identify how and where to run implants", "type": "tool", "pushedAt": "2024-12-06T15:42:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Hugo Valette", "cardId": "cdc93769fee1169d", "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "RWXstoned", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4", "type": "User" } ] }, { "repo": "p0dalirius/remotemouse-3.008-exploit", "name": "remotemouse-3.008-exploit", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/RemoteMouse-3.008-Exploit", "stars": 66, "language": "Python", "description": "This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fae5a03923c1", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2025-02-11T12:48:27Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "bigoper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7744385?v=4", "type": "User" }, { "login": "Digheads", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14194947?v=4", "type": "User" }, { "login": "h4rithd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23568388?v=4", "type": "User" }, { "login": "rivalsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50343281?v=4", "type": "User" }, { "login": "nokn0wthing", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53658504?v=4", "type": "User" } ] }, { "repo": "jfmaes/red-ec2", "name": "red-ec2", "owner": "jfmaes", "url": "https://github.com/jfmaes/Red-EC2", "stars": 64, "language": null, "description": "Spin up RedTeam infrastructure on AWS via Ansible", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8940269b1ded", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-25T13:59:10Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "p0dalirius/bhopengraph", "name": "bhopengraph", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/bhopengraph", "stars": 64, "language": "Python", "description": "A python library to create BloodHound OpenGraphs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f75f3a4b84ff", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-23T07:53:36Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Mojo8898", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60802390?v=4", "type": "User" } ] }, { "repo": "chrismaddalena/fox", "name": "fox", "owner": "chrismaddalena", "url": "https://github.com/chrismaddalena/Fox", "stars": 64, "language": "Python", "description": "A companion tool for BloodHound offering Active Directory statistics and number crunching", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "204ada987ac1", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2018-06-26T02:12:19Z", "archived": false, "topContributors": [] }, { "repo": "zeze-zeze/hitcon-2023-demo-cve-2023-20562", "name": "hitcon-2023-demo-cve-2023-20562", "owner": "zeze-zeze", "url": "https://github.com/zeze-zeze/HITCON-2023-Demo-CVE-2023-20562", "stars": 62, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zeze", "cardId": "a3a54606825e7474", "avatar": "https://avatars.githubusercontent.com/u/33378686?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "547badfcf5ab", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-21T00:33:08Z", "archived": false, "topContributors": [ { "login": "zeze-zeze", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/33378686?v=4", "type": "User" } ] }, { "repo": "byt3bl33d3r/invoke-autoit", "name": "invoke-autoit", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/Invoke-AutoIt", "stars": 62, "language": "PowerShell", "description": "Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ed4b00db320f", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-07-08T15:14:05Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "harmj0y/encryptedstore", "name": "encryptedstore", "owner": "harmj0y", "url": "https://github.com/HarmJ0y/EncryptedStore", "stars": 61, "language": "PowerShell", "description": "Offensive Data Storage", "type": "tool", "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9f4cea82371", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-09-01T00:01:22Z", "archived": false, "topContributors": [ { "login": "HarmJ0y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "s3cur3th1ssh1t/nim_cbt_shellcode", "name": "nim_cbt_shellcode", "owner": "s3cur3th1ssh1t", "url": "https://github.com/S3cur3Th1sSh1t/Nim_CBT_Shellcode", "stars": 61, "language": "Nim", "description": "CallBack-Techniques for Shellcode execution ported to Nim", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5fe2117bc61c", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-03-19T10:36:14Z", "archived": false, "topContributors": [] }, { "repo": "souhailhammou/exploits", "name": "Exploits", "owner": "SouhailHammou", "url": "https://github.com/SouhailHammou/Exploits", "id": "6af5f53ec595", "stars": 61, "language": "C", "description": "Exploits I've authored", "type": "tool", "pushedAt": "2019-08-13T15:59:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Souhail Hammou", "cardId": "37d332f6bfa0a624", "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "SouhailHammou", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4", "type": "User" } ] }, { "repo": "samwcyo/cve-2021-27651-poc", "name": "cve-2021-27651-poc", "owner": "samwcyo", "url": "https://github.com/samwcyo/CVE-2021-27651-PoC", "stars": 60, "language": null, "description": "RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sam Curry", "cardId": "a807e62fc1e2c0f8", "avatar": "https://avatars.githubusercontent.com/u/16300489?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "774b5e5f844f", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-16T05:54:07Z", "archived": false, "topContributors": [ { "login": "samwcyo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16300489?v=4", "type": "User" } ] }, { "repo": "frichetten/aws_stealth_perm_enum", "name": "aws_stealth_perm_enum", "owner": "Frichetten", "url": "https://github.com/Frichetten/aws_stealth_perm_enum", "id": "5e3a206ecdd8", "stars": 60, "language": "Python", "description": "Research on the enumeration of IAM permissions without logging to CloudTrail", "type": "tool", "pushedAt": "2021-06-11T11:38:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nick Frichette", "cardId": "7beb2b9170e5b0f7", "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Frichetten", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4", "type": "User" } ] }, { "repo": "chrismaddalena/cooper", "name": "Cooper", "owner": "chrismaddalena", "url": "https://github.com/chrismaddalena/Cooper", "id": "7de2e4e75d57", "stars": 60, "language": "Python", "description": "A Python tool for ingesting HTML and producing HTML source suitable for phishing campaigns.", "type": "tool", "pushedAt": "2026-07-11T01:32:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "chrismaddalena", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" }, { "login": "pyup-bot", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/16239342?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "ninjasl0th", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/222115704?v=4", "type": "User" } ] }, { "repo": "leechristensen/tgscrack", "name": "tgscrack", "owner": "leechristensen", "url": "https://github.com/leechristensen/tgscrack", "stars": 58, "language": "Go", "description": "Kerberos TGS_REP cracker written in Golang", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "07810bb517cf", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-11-18T19:49:30Z", "archived": false, "topContributors": [ { "login": "leechristensen", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" } ] }, { "repo": "garrettfoster13/fustercluck", "name": "fustercluck", "owner": "garrettfoster13", "url": "https://github.com/garrettfoster13/fustercluck", "stars": 57, "language": "Python", "description": "POC tool to abuse windows server failover clusters", "type": "tool", "lanes": [ "2" ], "author": { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "02dfb54964be", "score": 41, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-07T16:40:22Z", "archived": false, "topContributors": [ { "login": "garrettfoster13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" } ] }, { "repo": "decoder-it/impacket-partial-mic", "name": "impacket-partial-mic", "owner": "decoder-it", "url": "https://github.com/decoder-it/impacket-partial-mic", "stars": 46, "language": "Python", "description": "Impacket with --remove-mic-partial", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2026/04/04/htb-darkzero.html", "title": "HTB: DarkZero", "person": "0xdf" } ], "referencedCount": 1, "id": "4092d0b0c1bf", "score": 40, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "login": "ropnop" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "login": "mxrch" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "pushedAt": "2026-01-08T15:09:20Z", "archived": false, "topContributors": [ { "login": "asolino", "c": 1333, "avatar": "https://avatars.githubusercontent.com/u/11577828?v=4", "type": "User" }, { "login": "0xdeaddood", "c": 192, "avatar": "https://avatars.githubusercontent.com/u/56035084?v=4", "type": "User" }, { "login": "dirkjanm", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "mohemiv", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/5724896?v=4", "type": "User" }, { "login": "anadrianmanrique", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/60896207?v=4", "type": "User" }, { "login": "gabrielg5", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/1108902?v=4", "type": "User" }, { "login": "kacpern", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/1493775?v=4", "type": "User" }, { "login": "snovvcrash", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "alexisbalbachan", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/8486486?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "franferrax", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/8713657?v=4", "type": "User" }, { "login": "rmaksimov", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "cnotin", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "p0dalirius", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "MrAnde7son", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/15673250?v=4", "type": "User" }, { "login": "NtAlexio2", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/110637492?v=4", "type": "User" }, { "login": "cclauss", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "rdubourguais", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/12847917?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "martinuy", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/22035856?v=4", "type": "User" }, { "login": "cube0x0", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/39370848?v=4", "type": "User" }, { "login": "UNC1739", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "exploide", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "Sanmopre", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/40120264?v=4", "type": "User" }, { "login": "zexusx26", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/35561605?v=4", "type": "User" }, { "login": "contactr2m", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13003246?v=4", "type": "User" }, { "login": "mpgn", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "Dramelac", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/10145128?v=4", "type": "User" }, { "login": "ThePirateWhoSmellsOfSunflowers", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/18633286?v=4", "type": "User" }, { "login": "zblurx", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" } ] }, { "repo": "kingofthenops/tailscalehound", "name": "tailscalehound", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/TailscaleHound", "stars": 43, "language": "Python", "description": "OpenGraph Collector for Tailscale", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/05/21/tailscalehound/", "title": "Introducing TailscaleHound: Mapping Tailscale Attack Paths in BloodHound", "person": "Andrew Luke, Andrew Gomez" } ], "referencedCount": 1, "id": "9f8a106e3728", "score": 40, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 2, "contributors": [ { "name": "Logan MacLaren", "cardId": "ff71881656dfe598", "avatar": "https://avatars.githubusercontent.com/u/21298298?v=4", "login": "maclarel" } ], "pushedAt": "2026-07-09T23:25:18Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" }, { "login": "maclarel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21298298?v=4", "type": "User" } ] }, { "repo": "goichot/cve-2020-3433", "name": "cve-2020-3433", "owner": "goichot", "url": "https://github.com/goichot/CVE-2020-3433", "stars": 42, "language": "C#", "description": "PoCs and technical analysis of three vulnerabilities found on Cisco AnyConnect for Windows: CVE-2020-3433, CVE-2020-3434 and CVE-2020-3435 ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Antoine Goichot", "cardId": "1b233373e0937e12", "avatar": "https://avatars.githubusercontent.com/u/8002862?v=4" }, "referencedBy": [ { "url": "https://www.goichot.fr/posts/cve-2020-3433/", "title": "Discovering new vulnerabilities in Cisco AnyConnect Secure Mobility Client for Windows", "person": "Antoine Goichot" } ], "referencedCount": 1, "id": "bde1aa10f763", "score": 40, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-25T20:55:17Z", "archived": false, "topContributors": [ { "login": "goichot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8002862?v=4", "type": "User" } ] }, { "repo": "lockfale/osint-framework", "name": "osint-framework", "owner": "lockfale", "url": "https://github.com/lockfale/OSINT-Framework", "stars": 11713, "language": "JavaScript", "description": "OSINT Framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1551744eafb9", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [ { "name": "Pedram Amini", "cardId": "86facb212b158550", "avatar": "https://avatars.githubusercontent.com/u/1253573?v=4", "login": "pedramamini" }, { "name": "Omar Ωr Santos", "cardId": "4ce13817e29c7cf0", "avatar": "https://avatars.githubusercontent.com/u/1690898?v=4", "login": "santosomar" }, { "name": "Giuseppe Criscione", "cardId": "26e85b3e45120301", "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4", "login": "Datalux" } ], "pushedAt": "2026-06-20T08:37:09Z", "archived": false, "topContributors": [ { "login": "s0lray", "c": 602, "avatar": "https://avatars.githubusercontent.com/u/16158727?v=4", "type": "User" }, { "login": "mrpnkt", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/2102625?v=4", "type": "User" }, { "login": "Giddlers", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/212430952?v=4", "type": "User" }, { "login": "scanpatch", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/3992998?v=4", "type": "User" }, { "login": "bcoles", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "treefort", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1132492?v=4", "type": "User" }, { "login": "rl1987", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1080220?v=4", "type": "User" }, { "login": "opabravo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/21262207?v=4", "type": "User" }, { "login": "lord2eak", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/107469245?v=4", "type": "User" }, { "login": "Akshit-Chilkoti", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/86488967?v=4", "type": "User" }, { "login": "0x4rk0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/43980696?v=4", "type": "User" }, { "login": "funwarex64", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16835547?v=4", "type": "User" }, { "login": "Seanstoppable", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1523955?v=4", "type": "User" }, { "login": "pedramamini", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1253573?v=4", "type": "User" }, { "login": "ppfeister", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/33327613?v=4", "type": "User" }, { "login": "theahmadov", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/88781785?v=4", "type": "User" }, { "login": "Drumrrr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/148267185?v=4", "type": "User" }, { "login": "simonbear213", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/176830394?v=4", "type": "User" }, { "login": "ranlo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3043854?v=4", "type": "User" }, { "login": "synapsint", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10632508?v=4", "type": "User" }, { "login": "Atuldlld", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/166880563?v=4", "type": "User" }, { "login": "MakhrovVyacheslav", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/98040523?v=4", "type": "User" }, { "login": "Skalfaro", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49519019?v=4", "type": "User" }, { "login": "ffr4nz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1634830?v=4", "type": "User" }, { "login": "sempf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/383722?v=4", "type": "User" }, { "login": "spmedia", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1646728?v=4", "type": "User" }, { "login": "josamontiel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91287801?v=4", "type": "User" }, { "login": "Nishant-Sagar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/66466895?v=4", "type": "User" }, { "login": "alievinfo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4084014?v=4", "type": "User" }, { "login": "0xSebin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56429311?v=4", "type": "User" } ] }, { "repo": "toniblyx/my-arsenal-of-aws-security-tools", "name": "my-arsenal-of-aws-security-tools", "owner": "toniblyx", "url": "https://github.com/toniblyx/my-arsenal-of-aws-security-tools", "stars": 9482, "language": "Shell", "description": "List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Toni de la Fuente", "cardId": "e540dfcd97c39db6", "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "24058f1417f8", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 65, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "login": "christophetd" }, { "name": "Madhu Akula", "cardId": "3af4d17ee0a1e27a", "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4", "login": "madhuakula" } ], "pushedAt": "2026-07-07T14:45:14Z", "archived": false, "topContributors": [ { "login": "toniblyx", "c": 216, "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4", "type": "User" }, { "login": "michael-kirchner-at", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/115816510?v=4", "type": "User" }, { "login": "schosterbarak", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6033501?v=4", "type": "User" }, { "login": "damienjburks", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20100558?v=4", "type": "User" }, { "login": "xen0l", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1426772?v=4", "type": "User" }, { "login": "Hechtov", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19705543?v=4", "type": "User" }, { "login": "GenAIGator", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55202293?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "bnugent", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/766459?v=4", "type": "User" }, { "login": "briandbecker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2085521?v=4", "type": "User" }, { "login": "gabrielsoltz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8935378?v=4", "type": "User" }, { "login": "nicdoye", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59195?v=4", "type": "User" }, { "login": "philipmeadows", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6839305?v=4", "type": "User" }, { "login": "varunirv", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32100874?v=4", "type": "User" }, { "login": "z0ph", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20846187?v=4", "type": "User" }, { "login": "akittana", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20178912?v=4", "type": "User" }, { "login": "ihamburglar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5925087?v=4", "type": "User" }, { "login": "gebalamariusz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8866425?v=4", "type": "User" }, { "login": "ramimac", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13310971?v=4", "type": "User" }, { "login": "seisvelas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44826516?v=4", "type": "User" }, { "login": "andreacavagna01", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17701428?v=4", "type": "User" }, { "login": "anirudhbiyani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72013890?v=4", "type": "User" }, { "login": "ansorren", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25956692?v=4", "type": "User" }, { "login": "christophetd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "type": "User" }, { "login": "begimher", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33900922?v=4", "type": "User" }, { "login": "dlorch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43927?v=4", "type": "User" }, { "login": "udondan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6443408?v=4", "type": "User" }, { "login": "DannyBen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2405099?v=4", "type": "User" }, { "login": "FireballDWF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19273?v=4", "type": "User" }, { "login": "dgwhited", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4472883?v=4", "type": "User" } ] }, { "repo": "jofpin/trape", "name": "trape", "owner": "jofpin", "url": "https://github.com/jofpin/trape", "stars": 8896, "language": "Python", "description": "People tracker on the Internet: OSINT analysis and research tool by Jose Pino", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "13aa985d7671", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 16, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2024-06-20T19:04:00Z", "archived": false, "topContributors": [ { "login": "eljotache", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/275303157?v=4", "type": "User" }, { "login": "tdenisenko", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5215665?v=4", "type": "User" }, { "login": "captain-woof", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/72122026?v=4", "type": "User" }, { "login": "cclauss", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "ChrisTheCoolHut", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10480015?v=4", "type": "User" }, { "login": "aaronjanse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16829510?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "brandomr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5840199?v=4", "type": "User" }, { "login": "harshitm98", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21971569?v=4", "type": "User" }, { "login": "ianket", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12576303?v=4", "type": "User" }, { "login": "jct94", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57451922?v=4", "type": "User" }, { "login": "jpyamamoto", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18181672?v=4", "type": "User" }, { "login": "Glitchfix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6094496?v=4", "type": "User" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "Uday-Wahi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54672486?v=4", "type": "User" }, { "login": "jerjet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63897210?v=4", "type": "User" } ] }, { "repo": "antonio-morales/fuzzing101", "name": "Fuzzing101", "owner": "antonio-morales", "url": "https://github.com/antonio-morales/Fuzzing101", "id": "5b55c55586a4", "stars": 3807, "language": null, "description": "An step by step fuzzing tutorial. A GitHub Security Lab initiative ", "type": "tool", "pushedAt": "2026-06-16T09:38:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Antonio Morales", "cardId": "82c53420e78c6b2b", "avatar": "https://avatars.githubusercontent.com/u/55253029?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "antonio-morales", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/55253029?v=4", "type": "User" }, { "login": "Mundi-Xu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43680784?v=4", "type": "User" }, { "login": "dkm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/87603?v=4", "type": "User" }, { "login": "ogianatiempo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19715640?v=4", "type": "User" }, { "login": "vanhauser-thc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7396244?v=4", "type": "User" } ] }, { "repo": "bats3c/shad0w", "name": "shad0w", "owner": "bats3c", "url": "https://github.com/bats3c/shad0w", "id": "5a777fbb904a", "stars": 2176, "language": "C", "description": "A post exploitation framework designed to operate covertly on heavily monitored environments", "type": "tool", "pushedAt": "2021-09-29T00:15:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "bats3c", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" }, { "login": "leebaird", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "Flangvik", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" }, { "login": "HashtagMarkus", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/11844344?v=4", "type": "User" }, { "login": "eqn-grp", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/81374084?v=4", "type": "User" }, { "login": "L1ghtn1ng", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "KoelhoSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76797762?v=4", "type": "User" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "nfp-improsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72806600?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/sherlock", "name": "sherlock", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/Sherlock", "stars": 2017, "language": "PowerShell", "description": "PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9f0bdc1fd479", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2018-10-10T09:10:45Z", "archived": true, "topContributors": [ { "login": "rasta-mouse", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "recrudesce", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6450799?v=4", "type": "User" } ] }, { "repo": "itm4n/ppldump", "name": "ppldump", "owner": "itm4n", "url": "https://github.com/itm4n/PPLdump", "stars": 893, "language": "C", "description": "Dump the memory of a PPL with a userland exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dbc912eddc95", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-24T14:03:14Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "decoder-it/hyper-v-admin-eop", "name": "hyper-v-admin-eop", "owner": "decoder-it", "url": "https://github.com/decoder-it/Hyper-V-admin-EOP", "stars": 56, "language": "PowerShell", "description": "Small POC in powershell exploiting hardlinks during the VM deletion process", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dcdc64213a4b", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-01-18T16:56:56Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "ne0nd0g/merlin-agent-dll", "name": "merlin-agent-dll", "owner": "ne0nd0g", "url": "https://github.com/Ne0nd0g/merlin-agent-dll", "stars": 56, "language": "Go", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c13e6a00f6c0", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-04-17T14:01:36Z", "archived": false, "topContributors": [ { "login": "Ne0nd0g", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "HuskyHacks", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/57866415?v=4", "type": "User" } ] }, { "repo": "eatonz/badstorage", "name": "badstorage", "owner": "eatonz", "url": "https://github.com/EatonZ/BadStorage", "stars": 56, "language": "C", "description": "Bad Storage is a project for unlocking up to 2 TB internal storage for those using the Xbox 360 Bad Update exploit.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eaton Zveare", "cardId": "da95efe81f779bf9", "avatar": "https://avatars.githubusercontent.com/u/3020941?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9c8d428281ae", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-13T20:05:20Z", "archived": false, "topContributors": [ { "login": "EatonZ", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3020941?v=4", "type": "User" } ] }, { "repo": "senderend/hackbook", "name": "hackbook", "owner": "senderend", "url": "https://github.com/senderend/hackbook", "id": "c70706e4d43d", "stars": 56, "language": "PowerShell", "description": "useful stuff for pentesting", "type": "tool", "pushedAt": "2025-03-18T04:17:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "senderend", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/cve-2020-10665", "name": "cve-2020-10665", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/CVE-2020-10665", "stars": 53, "language": "C++", "description": "POC for CVE-2020-10665 Docker Desktop Local Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "36423f1ee656", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-06-25T07:49:34Z", "archived": false, "topContributors": [] }, { "repo": "curi0usjack/ansible-redelk", "name": "ansible-redelk", "owner": "curi0usjack", "url": "https://github.com/curi0usJack/ansible-redelk", "stars": 52, "language": null, "description": "Ansible playbooks for instrumenting a Red Team environment with RedElk", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "546680d8efea", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-10-06T12:21:00Z", "archived": false, "topContributors": [ { "login": "curi0usJack", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4", "type": "User" }, { "login": "w4rr4nt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2612553?v=4", "type": "User" } ] }, { "repo": "icemoonhsv/portscanner", "name": "portscanner", "owner": "icemoonhsv", "url": "https://github.com/IceMoonHSV/PortScanner", "stars": 51, "language": "C#", "description": "C# Port Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Hope Walker", "cardId": "49a0d4dc712d301f", "avatar": "https://avatars.githubusercontent.com/u/62567946?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cff9386803e3", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-06T13:28:47Z", "archived": false, "topContributors": [ { "login": "IceMoonHSV", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/62567946?v=4", "type": "User" } ] }, { "repo": "enigma0x3/powershell-c2", "name": "powershell-c2", "owner": "enigma0x3", "url": "https://github.com/enigma0x3/Powershell-C2", "stars": 51, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1b15ec6d224", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2014-02-05T03:41:41Z", "archived": false, "topContributors": [] }, { "repo": "chichou/urlschemes", "name": "urlschemes", "owner": "ChiChou", "url": "https://github.com/ChiChou/urlschemes", "id": "7385ffdab6d9", "stars": 51, "language": "Python", "description": "Enumerate URL schemes on macOS and Windows", "type": "tool", "pushedAt": "2025-11-07T13:53:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ChiChou", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" }, { "login": "0xmachos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30755149?v=4", "type": "User" } ] }, { "repo": "p0dalirius/microsoft-rpc-fuzzing-tools", "name": "microsoft-rpc-fuzzing-tools", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/microsoft-rpc-fuzzing-tools", "id": "e8fbed9bd296", "stars": 51, "language": "Python", "description": " This repository contains a list of python scripts to work with Microsoft RPC for research purposes. ", "type": "tool", "pushedAt": "2025-01-31T14:14:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/npm-scan", "name": "npm-scan", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/npm-scan", "id": "590767552438", "stars": 50, "language": "JavaScript", "description": "An extensible, heuristic-based vulnerability scanning tool for installed npm packages", "type": "tool", "pushedAt": "2021-08-10T20:50:13Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "bernlim93", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/2088763?v=4", "type": "User" }, { "login": "mforcexvi", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/32938571?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "slyd0g/sk8rat", "name": "sk8rat", "owner": "slyd0g", "url": "https://github.com/slyd0g/SK8RAT", "stars": 49, "language": "C++", "description": "C++ implant that interfaces with a SK8PARK server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Bui", "cardId": "42e80323dda31196", "avatar": "https://avatars.githubusercontent.com/u/22451367?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1e7874f457a", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-06-28T19:51:14Z", "archived": false, "topContributors": [] }, { "repo": "pn-tester/firststrike", "name": "firststrike", "owner": "pn-tester", "url": "https://github.com/PN-Tester/FirstStrike", "stars": 49, "language": "C", "description": "PCILeech module to exploit Windows 10 from UEFI when OS DMA protection is enabled", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pierre Nicolas Allard Coutu", "cardId": "d7d4eaa8ecdead31", "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9db658c159f1", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-02T13:41:50Z", "archived": false, "topContributors": [ { "login": "PN-Tester", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4", "type": "User" } ] }, { "repo": "jfmaes/aws_mini_ad", "name": "aws_mini_ad", "owner": "jfmaes", "url": "https://github.com/jfmaes/aws_mini_ad", "stars": 48, "language": "Shell", "description": "An Infrastructure as code proof of concept to deploy a bare minimum AD environment in AWS.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0dffce83f7dd", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-18T13:29:03Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "slyd0g/objcshellcodeloader", "name": "objcshellcodeloader", "owner": "slyd0g", "url": "https://github.com/slyd0g/ObjCShellcodeLoader", "stars": 48, "language": "Objective-C", "description": "macOS shellcode loader written in Objective-C", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Bui", "cardId": "42e80323dda31196", "avatar": "https://avatars.githubusercontent.com/u/22451367?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "af0eab05454f", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2022-07-15T19:37:46Z", "archived": false, "topContributors": [] }, { "repo": "p0dalirius/robotstester", "name": "robotstester", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/robotstester", "id": "434dd1a30835", "stars": 48, "language": "Python", "description": "This Python script can enumerate all URLs present in robots.txt files, and test whether they can be accessed or not.", "type": "tool", "pushedAt": "2025-02-11T07:43:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "clearbluejar/cve-markdown-charts", "name": "cve-markdown-charts", "owner": "clearbluejar", "url": "https://github.com/clearbluejar/cve-markdown-charts", "stars": 47, "language": "Python", "description": "A simple tool to create mermaid js markdown charts from CVE IDs and CVE keyword searches.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John McIntosh", "cardId": "27b3a1960aa36a0f", "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "92747c95ad1d", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-05T21:37:06Z", "archived": false, "topContributors": [ { "login": "clearbluejar", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2022-45771-pwndoc-lfi-to-rce", "name": "cve-2022-45771-pwndoc-lfi-to-rce", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE", "stars": 47, "language": "Python", "description": "Pwndoc local file inclusion to remote code execution of Node.js code on the server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ed23efcb8e4e", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-31T09:58:14Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "Zephons", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16463604?v=4", "type": "User" } ] }, { "repo": "garrettfoster13/mssqlkaren", "name": "mssqlkaren", "owner": "garrettfoster13", "url": "https://github.com/garrettfoster13/mssqlkaren", "stars": 47, "language": "Python", "description": "modified mssqlclient from impacket to extract policies from the SCCM database", "type": "tool", "lanes": [ "2" ], "author": { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5349cc952c4e", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-24T15:23:48Z", "archived": false, "topContributors": [ { "login": "garrettfoster13", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" }, { "login": "5tuk0v", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90915844?v=4", "type": "User" } ] }, { "repo": "p0dalirius/argon2cracker", "name": "Argon2Cracker", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Argon2Cracker", "id": "dd2dbba3410a", "stars": 46, "language": "Python", "description": " A multithreaded bruteforcer of argon2 hashes. ", "type": "tool", "pushedAt": "2025-06-04T16:17:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "p0dalirius", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "juergenhoetzel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52547?v=4", "type": "User" }, { "login": "wanne32", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43016518?v=4", "type": "User" } ] }, { "repo": "seanheelan/funserialize", "name": "funserialize", "owner": "SeanHeelan", "url": "https://github.com/SeanHeelan/funserialize", "id": "d2e9013aa21e", "stars": 45, "language": "Shell", "description": "Scripts and auxiliary files for fuzzing PHP's unserialize function", "type": "tool", "pushedAt": "2017-08-13T20:04:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "SeanHeelan", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4", "type": "User" } ] }, { "repo": "adnanekhan/actionstoctou", "name": "ActionsTOCTOU", "owner": "AdnaneKhan", "url": "https://github.com/AdnaneKhan/ActionsTOCTOU", "id": "8ae047a14374", "stars": 44, "language": "Python", "description": "Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)", "type": "tool", "pushedAt": "2026-01-25T20:30:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adnan Khan", "cardId": "3d12002cf2cb67c0", "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "AdnaneKhan", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4", "type": "User" }, { "login": "Roni-Carta", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36815504?v=4", "type": "User" } ] }, { "repo": "p0dalirius/moodle-webshell-plugin", "name": "Moodle-webshell-plugin", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Moodle-webshell-plugin", "id": "8310af60843b", "stars": 43, "language": "PHP", "description": "A webshell plugin and interactive shell for pentesting a Moodle instance. ", "type": "tool", "pushedAt": "2025-02-11T08:03:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "klezvirus/evilginx-collection", "name": "evilginx-collection", "owner": "klezVirus", "url": "https://github.com/klezVirus/evilginx-collection", "id": "8e66c3b47bb5", "stars": 42, "language": null, "description": "Public repo of some woking evilginx phishlets", "type": "tool", "pushedAt": "2024-11-04T10:53:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "klezVirus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "tw1sm/sharpinjector", "name": "sharpinjector", "owner": "tw1sm", "url": "https://github.com/Tw1sm/SharpInjector", "stars": 40, "language": "C#", "description": "Flexible C# shellcode runner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5bb32112e43b", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-18T17:58:33Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" } ] }, { "repo": "jfmaes/csharpreflectionworkshop", "name": "csharpreflectionworkshop", "owner": "jfmaes", "url": "https://github.com/jfmaes/CSharpReflectionWorkshop", "stars": 40, "language": "C#", "description": "The repository that complements the From zero to hero: creating a reflective loader in C# workshop", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b11639c80ab4", "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-06T15:34:38Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "chrismaddalena/redteammemory", "name": "RedTeamMemory", "owner": "chrismaddalena", "url": "https://github.com/chrismaddalena/RedTeamMemory", "id": "8f48afe34539", "stars": 40, "language": null, "description": "A repo for holding cheat sheets for myself that cover various penetration testing tools and commands.", "type": "tool", "pushedAt": "2018-05-21T18:03:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 40, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "0xacb/recollapse", "name": "recollapse", "owner": "0xacb", "url": "https://github.com/0xacb/recollapse", "stars": 1366, "language": "Python", "description": "REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andre Baptista", "cardId": "ca3c2b1401da319e", "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4" }, "referencedBy": [ { "url": "https://0xacb.com/projects/", "title": "Projects", "person": "Andre Baptista" }, { "url": "https://0xacb.com/2022/11/21/recollapse/", "title": "Till REcollapse", "person": "Andre Baptista" } ], "referencedCount": 2, "id": "d9bb2f902df1", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-08-07T19:23:50Z", "archived": false, "topContributors": [ { "login": "0xacb", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4", "type": "User" }, { "login": "w9w", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38838852?v=4", "type": "User" }, { "login": "rcbarnett", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64236081?v=4", "type": "User" } ] }, { "repo": "tokyoneon/chimera", "name": "chimera", "owner": "tokyoneon", "url": "https://github.com/tokyoneon/Chimera", "stars": 1588, "language": "PowerShell", "description": "Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "tokyoneon", "cardId": "e2f68312160147fa", "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4" }, "referencedBy": [ { "url": "https://tokyoneon.github.io/0x10", "title": "Bypass VirusTotal & AMSI Detection Signatures with Chimera | tokyoneon", "person": "tokyoneon" } ], "referencedCount": 1, "id": "e32fcd3f21fe", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-09T12:39:59Z", "archived": false, "topContributors": [ { "login": "tokyoneon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4", "type": "User" } ] }, { "repo": "viralmaniar/bigbountyrecon", "name": "bigbountyrecon", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/BigBountyRecon", "stars": 1558, "language": "C#", "description": "BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [ { "url": "https://viralmaniar.github.io/osint/reconnaissance/BigBountyRecon/", "title": "BigBountyRecon - Reconnaissance Tool", "person": "Viral Maniar" } ], "referencedCount": 1, "id": "8d25d7b25770", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-29T21:44:06Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "antoniococo/runascs", "name": "runascs", "owner": "antoniococo", "url": "https://github.com/antonioCoco/RunasCs", "stars": 1411, "language": "C#", "description": "RunasCs - Csharp and open version of windows builtin runas.exe", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/windows-server-netman-dll-hijacking/", "title": "Windows Server 2008R2-2019 NetMan DLL Hijacking", "person": "Clément Labro" } ], "referencedCount": 1, "id": "3766ea634c83", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 3, "contributorCount": 2, "contributors": [ { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "login": "qtc-de" } ], "pushedAt": "2024-07-12T23:31:35Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "qtc-de", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" } ] }, { "repo": "devanshbatham/favfreak", "name": "favfreak", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/FavFreak", "stars": 1294, "language": "Python", "description": "Making Favicon.ico based Recon Great again ! ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [ { "url": "https://dw1.io/blog/2020/07/06/weaponizes-nuclei/", "title": "Weaponizes nuclei Workflows to Pwn All the Things", "person": "Dwi Siswanto" } ], "referencedCount": 1, "id": "af6114023f24", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2023-08-29T16:38:07Z", "archived": false, "topContributors": [ { "login": "devanshbatham", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" }, { "login": "payloadartist", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41829660?v=4", "type": "User" }, { "login": "malacupa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44790129?v=4", "type": "User" }, { "login": "tzmWW", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47693671?v=4", "type": "User" }, { "login": "xaeroborg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33274680?v=4", "type": "User" } ] }, { "repo": "decoder-it/badbackupoperator", "name": "badbackupoperator", "owner": "decoder-it", "url": "https://github.com/decoder-it/BadBackupOperator", "stars": 37, "language": "C++", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2018/02/12/the-power-of-backup-operatos/", "title": "The power of backup operators", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "314068fe5b93", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-02-12T20:07:30Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "souhailhammou/panda-antivirus-lpe", "name": "panda-antivirus-lpe", "owner": "souhailhammou", "url": "https://github.com/SouhailHammou/Panda-Antivirus-LPE", "stars": 37, "language": "C", "description": "The exploit for Panda AV LPE", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Souhail Hammou", "cardId": "37d332f6bfa0a624", "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4" }, "referencedBy": [ { "url": "http://rce4fun.blogspot.com/2019/05/panda-antivirus-local-privilege.html", "title": "Panda Antivirus - Local Privilege Escalation (CVE-2019-12042)", "person": "Souhail Hammou" } ], "referencedCount": 1, "id": "c425fbfb36ab", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-05-22T11:01:12Z", "archived": false, "topContributors": [ { "login": "SouhailHammou", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/5301567?v=4", "type": "User" } ] }, { "repo": "mazen160/llmquery", "name": "llmquery", "owner": "mazen160", "url": "https://github.com/mazen160/llmquery", "stars": 36, "language": "Python", "description": "Powerful LLM Query Framework with YAML Prompt Templates. Made for Automation", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/llmquery-project/", "title": "Introducing LLMQuery Framework: Scaling GenAI Automation with Prompt Templates", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "fb25df3c5c93", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-20T21:02:00Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "mazen160/public", "name": "public", "owner": "mazen160", "url": "https://github.com/mazen160/public", "stars": 35, "language": "PHP", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/ohmyzsh-dotenv-rce/", "title": "OhMyZsh dotenv Remote Code Execution", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "1199537e5267", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-22T20:51:03Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "theevilbit/macos", "name": "macos", "owner": "theevilbit", "url": "https://github.com/theevilbit/macos", "stars": 34, "language": "Objective-C", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [ { "url": "https://codecolor.ist/posts/2019-11-21-two-macos-persistence-tricks-abusing-plugins/", "title": "Two macOS Persistence Tricks Abusing Plugins", "person": "Zhi Zhou" } ], "referencedCount": 1, "id": "baaef7f43c8c", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-12T13:18:25Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "aall86/minikvm_public", "name": "minikvm_public", "owner": "aall86", "url": "https://github.com/AaLl86/MiniKvm_public", "stars": 33, "language": "C#", "description": "This repro contains all the code and documentation for the MiniKvm project and the CH9329 controller", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Allievi", "cardId": "0377e8aaefca447f", "avatar": "https://avatars.githubusercontent.com/u/7136006?v=4" }, "referencedBy": [ { "url": "https://www.andrea-allievi.com/blog/a-minikvm-to-rule-all-machines-remotely/", "title": "A MiniKvm to rule all machines … remotely :-)", "person": "Andrea Allievi" } ], "referencedCount": 1, "id": "2d00f3fa24bb", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-27T06:49:43Z", "archived": false, "topContributors": [ { "login": "AaLl86", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7136006?v=4", "type": "User" } ] }, { "repo": "qkaiser/cottontail", "name": "cottontail", "owner": "qkaiser", "url": "https://github.com/qkaiser/cottontail", "stars": 32, "language": "Python", "description": "Capture all RabbitMQ messages being sent through a broker.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4" }, "referencedBy": [ { "url": "https://quentinkaiser.be/security/tool/2017/08/28/cottontail-release/", "title": "How to silently capture RabbitMQ messages", "person": "Quentin Kaiser" } ], "referencedCount": 1, "id": "7ffb73cba5e0", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-13T09:38:25Z", "archived": false, "topContributors": [ { "login": "qkaiser", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" } ] }, { "repo": "decoder-it/diaghub_exploit", "name": "diaghub_exploit", "owner": "decoder-it", "url": "https://github.com/decoder-it/diaghub_exploit", "stars": 31, "language": "C", "description": "Simplified version of Forshaw's Diaghub Collector Exploit", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2019/04/29/combinig-luafv-postluafvpostreadwrite-race-condition-pe-with-diaghub-collector-exploit-from-standard-user-to-system/", "title": "Combinig LUAFV PostLuafvPostReadWrite Race Condition PE with DiagHub collector exploit -> from standard user to SYSTEM", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "14ea887c7459", "score": 39, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-29T12:59:34Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "yogeshojha/rengine", "name": "rengine", "owner": "yogeshojha", "url": "https://github.com/yogeshojha/rengine", "stars": 8743, "language": "HTML", "description": "reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous mon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yogesh Ojha", "cardId": "276b5af7f5d02ef2", "avatar": "https://avatars.githubusercontent.com/u/17223002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a548ddd125aa", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 90, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" }, { "name": "David B.", "cardId": "03d8b7e3e9fc8e79", "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4", "login": "TH3xACE" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Galoget Latorre", "cardId": "38fb4b9abe4642f1", "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "login": "galoget" } ], "pushedAt": "2026-07-13T02:47:39Z", "archived": false, "topContributors": [ { "login": "yogeshojha", "c": 3266, "avatar": "https://avatars.githubusercontent.com/u/17223002?v=4", "type": "User" }, { "login": "psyray", "c": 138, "avatar": "https://avatars.githubusercontent.com/u/1230954?v=4", "type": "User" }, { "login": "ocervell", "c": 130, "avatar": "https://avatars.githubusercontent.com/u/9629314?v=4", "type": "User" }, { "login": "AnonymousWP", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/50231698?v=4", "type": "User" }, { "login": "shirishupadhyay", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/97308640?v=4", "type": "User" }, { "login": "Ph33rr", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/77519024?v=4", "type": "User" }, { "login": "Creased", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/8843222?v=4", "type": "User" }, { "login": "SeanOverton", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/59163024?v=4", "type": "User" }, { "login": "iuime", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/41294179?v=4", "type": "User" }, { "login": "jalvarezit", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/47305925?v=4", "type": "User" }, { "login": "ErdemOzgen", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/14043035?v=4", "type": "User" }, { "login": "metehan-arslan", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/44465987?v=4", "type": "User" }, { "login": "C0wnuts", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22750213?v=4", "type": "User" }, { "login": "m00tiny", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/42702437?v=4", "type": "User" }, { "login": "Suprita-25", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/50537247?v=4", "type": "User" }, { "login": "micr0seft", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9291922?v=4", "type": "User" }, { "login": "0x71rex", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/64193086?v=4", "type": "User" }, { "login": "Talanor", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2121473?v=4", "type": "User" }, { "login": "Serizao", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11671895?v=4", "type": "User" }, { "login": "random-robbie", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "TH3xACE", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4", "type": "User" }, { "login": "sa7mon", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3712226?v=4", "type": "User" }, { "login": "shelbyc", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5782553?v=4", "type": "User" }, { "login": "SiddharthBharadwaj", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45765901?v=4", "type": "User" }, { "login": "bin-maker", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/77133486?v=4", "type": "User" }, { "login": "pbehnke-ep", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/180995207?v=4", "type": "User" }, { "login": "phil-behnke", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58744452?v=4", "type": "User" }, { "login": "raimonte", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10503954?v=4", "type": "User" }, { "login": "dontclickthelink", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/73623652?v=4", "type": "User" }, { "login": "0xtejas", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47889755?v=4", "type": "User" } ] }, { "repo": "xairy/linux-kernel-exploitation", "name": "linux-kernel-exploitation", "owner": "xairy", "url": "https://github.com/xairy/linux-kernel-exploitation", "id": "fbb56a5e8095", "stars": 6570, "language": null, "description": "A collection of links related to Linux kernel security and exploitation", "type": "tool", "pushedAt": "2026-07-06T20:13:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrey Konovalov", "cardId": "248dd96652a047b6", "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "willsroot", "cardId": "36e6cec409f2fb19", "avatar": "https://avatars.githubusercontent.com/u/8272056?v=4", "login": "BitsByWill" } ], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 27, "topContributors": [ { "login": "xairy", "c": 117, "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "type": "User" }, { "login": "0n3t04ll", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/16186219?v=4", "type": "User" }, { "login": "bcoles", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "hwkim301", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/103125145?v=4", "type": "User" }, { "login": "raminfp", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10054759?v=4", "type": "User" }, { "login": "0xdevil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52781556?v=4", "type": "User" }, { "login": "officialcjunior", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29057155?v=4", "type": "User" }, { "login": "BitsByWill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8272056?v=4", "type": "User" }, { "login": "brant-ruan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13882906?v=4", "type": "User" }, { "login": "gymgit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14157972?v=4", "type": "User" }, { "login": "jinbpark", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/130542621?v=4", "type": "User" }, { "login": "Kyle-Kyle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13167376?v=4", "type": "User" }, { "login": "f0rm2l1n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37041372?v=4", "type": "User" }, { "login": "martinclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51541424?v=4", "type": "User" }, { "login": "noahShinabarger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19710489?v=4", "type": "User" }, { "login": "PaulCher", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7088706?v=4", "type": "User" }, { "login": "bsauce", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37901452?v=4", "type": "User" }, { "login": "eukabuka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/123277760?v=4", "type": "User" }, { "login": "ftabarie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6246773?v=4", "type": "User" }, { "login": "he1001", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58590386?v=4", "type": "User" }, { "login": "houjingyi233", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20239840?v=4", "type": "User" }, { "login": "idl3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11041719?v=4", "type": "User" }, { "login": "Larryxi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10859040?v=4", "type": "User" }, { "login": "ret2p4nda", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35515427?v=4", "type": "User" }, { "login": "3qch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25943525?v=4", "type": "User" }, { "login": "yuchengs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38407281?v=4", "type": "User" }, { "login": "ichinose-chiya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/133616122?v=4", "type": "User" } ] }, { "repo": "dafthack/mailsniper", "name": "MailSniper", "owner": "dafthack", "url": "https://github.com/dafthack/MailSniper", "id": "f52690f2bfb4", "stars": 3258, "language": "PowerShell", "description": "MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can b", "type": "tool", "pushedAt": "2025-08-07T01:58:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "login": "S3cur3Th1sSh1t" }, { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" } ], "adoptionOperators": 1, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "dafthack", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" }, { "login": "L1ghtn1ng", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "leebaird", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "S3cur3Th1sSh1t", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "cnotin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "YanIllusive", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/73822969?v=4", "type": "User" }, { "login": "fullmetalcache", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11990044?v=4", "type": "User" }, { "login": "1nfosecs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8602390?v=4", "type": "User" }, { "login": "NinjaStyle82", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10945042?v=4", "type": "User" }, { "login": "Signum21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "fugawi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18270543?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/watson", "name": "watson", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/Watson", "stars": 1680, "language": "C#", "description": "Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b159788ec233", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 6, "contributorCount": 4, "contributors": [], "pushedAt": "2020-11-28T07:35:51Z", "archived": true, "topContributors": [ { "login": "rasta-mouse", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "mark-s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/999307?v=4", "type": "User" }, { "login": "Reelix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/289404?v=4", "type": "User" }, { "login": "exploide", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/crlfuzz", "name": "crlfuzz", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/crlfuzz", "id": "214c94357741", "stars": 1554, "language": "Go", "description": "A fast tool to scan CRLF vulnerability written in Go", "type": "tool", "pushedAt": "2026-07-16T12:32:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "dwisiswant0", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 17, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "adilsoybali", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76052370?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/litterbox", "name": "LitterBox", "owner": "BlackSnufkin", "url": "https://github.com/BlackSnufkin/LitterBox", "id": "18ce2facdd2c", "stars": 1488, "language": "YARA", "description": "A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.", "type": "tool", "pushedAt": "2026-05-05T13:02:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "BlackSnufkin", "c": 176, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" }, { "login": "som3canadian", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/67294917?v=4", "type": "User" }, { "login": "carved4", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/117873275?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/paper_collection", "name": "paper_collection", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/paper_collection", "stars": 1360, "language": "Python", "description": "Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "72fe023f147b", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2025-02-21T10:02:19Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" }, { "login": "m3lixir", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15850452?v=4", "type": "User" }, { "login": "addisoncrump", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10711159?v=4", "type": "User" }, { "login": "enkomio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3680388?v=4", "type": "User" }, { "login": "numairmansur", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4897599?v=4", "type": "User" }, { "login": "S0uthP0le", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/131353517?v=4", "type": "User" } ] }, { "repo": "viralmaniar/passhunt", "name": "Passhunt", "owner": "Viralmaniar", "url": "https://github.com/Viralmaniar/Passhunt", "id": "9a5b209a5218", "stars": 1303, "language": "Python", "description": "Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.", "type": "tool", "pushedAt": "2018-12-23T06:58:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Viralmaniar", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/go-dork", "name": "go-dork", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/go-dork", "stars": 1289, "language": "Go", "description": "The fastest dork scanner written in Go.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5e79d2f93954", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-02-04T08:28:00Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "adilsoybali", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76052370?v=4", "type": "User" }, { "login": "Rishang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30040885?v=4", "type": "User" } ] }, { "repo": "antoniococo/roguepotato", "name": "roguepotato", "owner": "antoniococo", "url": "https://github.com/antonioCoco/RoguePotato", "stars": 1175, "language": "C", "description": "Another Windows Local Privilege Escalation from Service Account to System", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b91f0f4af655", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-09T20:43:07Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" } ] }, { "repo": "romainthomas/tencent_packer", "name": "tencent_packer", "owner": "romainthomas", "url": "https://github.com/romainthomas/tencent_packer", "stars": 38, "language": "C++", "description": "Utility to read custom structure from Tencent's libshell packer", "type": "tool", "lanes": [ "2" ], "author": { "name": "Romain Thomas", "cardId": "3f2be7db48fe67f5", "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "671dd1b3b015", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-12-15T10:27:32Z", "archived": false, "topContributors": [ { "login": "romainthomas", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7450402?v=4", "type": "User" } ] }, { "repo": "dillonfranke/protoburp", "name": "protoburp", "owner": "dillonfranke", "url": "https://github.com/dillonfranke/protoburp", "stars": 38, "language": "Python", "description": "Encode and Fuzz Custom Protobuf Messages in Burp Suite", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dillon Franke", "cardId": "91bca2a4221985e3", "avatar": "https://avatars.githubusercontent.com/u/24629515?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e84711777c8", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-03-04T20:47:59Z", "archived": false, "topContributors": [ { "login": "dillonfranke", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/24629515?v=4", "type": "User" }, { "login": "In3tinct", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18059590?v=4", "type": "User" } ] }, { "repo": "harmj0y/arya", "name": "Arya", "owner": "HarmJ0y", "url": "https://github.com/HarmJ0y/Arya", "id": "36f73926bc47", "stars": 37, "language": "Python", "description": "Arya is a simple obfuscator for .NET binaries.", "type": "tool", "pushedAt": "2017-12-11T21:16:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "infosec-au/webappsec-toolkit", "name": "webappsec-toolkit", "owner": "infosec-au", "url": "https://github.com/infosec-au/webappsec-toolkit", "id": "7a67d07307b9", "stars": 37, "language": "Python", "description": "Web Application Security related tools. Includes backdoors, proof of concepts and tricks", "type": "tool", "pushedAt": "2014-10-21T10:07:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "infosec-au", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" } ] }, { "repo": "slyd0g/sk8park", "name": "sk8park", "owner": "slyd0g", "url": "https://github.com/slyd0g/SK8PARK", "stars": 36, "language": "Python", "description": "Python 3 server used to control SK8RAT implant", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Bui", "cardId": "42e80323dda31196", "avatar": "https://avatars.githubusercontent.com/u/22451367?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "efa89ae7c00d", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-01-05T21:18:37Z", "archived": false, "topContributors": [] }, { "repo": "hotnops/remotedebugview", "name": "remotedebugview", "owner": "hotnops", "url": "https://github.com/hotnops/RemoteDebugView", "stars": 35, "language": "C++", "description": "A DLL that serves OutputDebugString content over a TCP connection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Heinsen", "cardId": "01fd4923819babdd", "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b2c565e1a619", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-23T19:10:21Z", "archived": false, "topContributors": [ { "login": "hotnops", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "type": "User" } ] }, { "repo": "leechristensen/offensivepowershelltasking", "name": "OffensivePowerShellTasking", "owner": "leechristensen", "url": "https://github.com/leechristensen/OffensivePowerShellTasking", "id": "da5c86ae59df", "stars": 35, "language": "C#", "description": "Run multiple PowerShell scripts concurrently in different app domains!", "type": "tool", "pushedAt": "2015-12-24T19:16:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "leechristensen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" } ] }, { "repo": "infosec-au/phishjs", "name": "phishJS", "owner": "infosec-au", "url": "https://github.com/infosec-au/phishJS", "id": "8cc21cb5863c", "stars": 35, "language": "JavaScript", "description": "Abusing trust boundaries to deliver effective phishing payloads", "type": "tool", "pushedAt": "2015-12-08T20:35:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "infosec-au", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" } ] }, { "repo": "tw1sm/redteamtl", "name": "redteamtl", "owner": "tw1sm", "url": "https://github.com/Tw1sm/redteamtl", "stars": 32, "language": "TypeScript", "description": "Dockerized nginx app used to create high-level timeline visuals for red team assessments", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fa4ed8f0b072", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-25T00:58:13Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "RedHeadSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42355245?v=4", "type": "User" } ] }, { "repo": "klezvirus/titanldr-ng", "name": "titanldr-ng", "owner": "klezvirus", "url": "https://github.com/klezVirus/titanldr-ng", "stars": 32, "language": null, "description": "A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8135cf089750", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-20T17:23:28Z", "archived": false, "topContributors": [ { "login": "realoriginal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/118862626?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2020-14144-gitea-git-hooks-rce", "name": "cve-2020-14144-gitea-git-hooks-rce", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2020-14144-GiTea-git-hooks-rce", "stars": 32, "language": "Python", "description": "A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7af6401b605a", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-17T12:42:02Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "yogehi/cve-2024-4406-xiaomi13pro-exploit-files", "name": "cve-2024-4406-xiaomi13pro-exploit-files", "owner": "yogehi", "url": "https://github.com/Yogehi/cve-2024-4406-xiaomi13pro-exploit-files", "stars": 32, "language": "JavaScript", "description": "Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ken Gannon", "cardId": "cda1ad1ab035b0f5", "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4678b61de544", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-14T09:43:53Z", "archived": false, "topContributors": [ { "login": "Yogehi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4", "type": "User" } ] }, { "repo": "xpn/warbird_exploit", "name": "warbird_exploit", "owner": "xpn", "url": "https://github.com/xpn/warbird_exploit", "stars": 31, "language": "C++", "description": "https://blog.xpnsec.com/windows-warbird-privesc/", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54cff45d2e49", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-27T13:54:54Z", "archived": false, "topContributors": [ { "login": "xpn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "p0dalirius/msrprn-coerce", "name": "MSRPRN-Coerce", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/MSRPRN-Coerce", "id": "5c7b43f41559", "stars": 31, "language": "Python", "description": "A python script to force authentication using MS-RPRN RemoteFindFirstPrinterChangeNotificationEx function (opnum 65). ", "type": "tool", "pushedAt": "2025-02-11T08:13:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p0dalirius", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "kazmatw/kazma-reverse-engineering-course", "name": "Kazma-Reverse-Engineering-Course", "owner": "kazmatw", "url": "https://github.com/kazmatw/Kazma-Reverse-Engineering-Course", "id": "682b0f7e1458", "stars": 31, "language": "JavaScript", "description": "", "type": "tool", "pushedAt": "2025-04-14T07:40:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dong-Yi Ye", "cardId": "cc0df1e8bfc683eb", "avatar": "https://avatars.githubusercontent.com/u/61039945?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "kazmatw", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/61039945?v=4", "type": "User" }, { "login": "moon-jam", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54764038?v=4", "type": "User" } ] }, { "repo": "senderend/azureblob", "name": "azureblob", "owner": "senderend", "url": "https://github.com/senderend/azureBlob", "stars": 30, "language": "Python", "description": "Azure Blob Storage C2 Profile for Mythic", "type": "tool", "lanes": [ "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "40ef3aafc2d8", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 4, "contributors": [ { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "login": "its-a-feature" }, { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "login": "KingOfTheNOPs" } ], "pushedAt": "2026-01-30T20:04:06Z", "archived": false, "topContributors": [ { "login": "senderend", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" }, { "login": "its-a-feature", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" }, { "login": "SpecterUser", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/211723520?v=4", "type": "User" }, { "login": "KingOfTheNOPs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "joernchen/devisedoor", "name": "devisedoor", "owner": "joernchen", "url": "https://github.com/joernchen/DeviseDoor", "stars": 29, "language": "Ruby", "description": "RoR / Devise PoC in memory Backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joernchen", "cardId": "f6bb8abb77bc86d6", "avatar": "https://avatars.githubusercontent.com/u/1334559?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "78da5057d013", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-12-14T09:55:23Z", "archived": false, "topContributors": [ { "login": "joernchen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1334559?v=4", "type": "User" } ] }, { "repo": "enigma0x3/old-powershell-payload-excel-delivery", "name": "old-powershell-payload-excel-delivery", "owner": "enigma0x3", "url": "https://github.com/enigma0x3/Old-Powershell-payload-Excel-Delivery", "stars": 28, "language": "Visual Basic", "description": "This version touches disk for registry persistence. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7a48845b959a", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2015-10-06T19:48:58Z", "archived": false, "topContributors": [] }, { "repo": "frichetten/cve-2020-11108-poc", "name": "cve-2020-11108-poc", "owner": "frichetten", "url": "https://github.com/Frichetten/CVE-2020-11108-PoC", "stars": 27, "language": "Python", "description": "PoCs for CVE-2020-11108; an RCE and priv esc in Pi-hole", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Frichette", "cardId": "7beb2b9170e5b0f7", "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "75132d32eb34", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-10T22:35:46Z", "archived": false, "topContributors": [ { "login": "Frichetten", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4", "type": "User" } ] }, { "repo": "p0dalirius/docker-volatility2", "name": "docker-volatility2", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/docker-volatility2", "stars": 26, "language": "Makefile", "description": "A volatility 2 docker for forensic investigations", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ed34c72c3f7", "score": 39, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-09-10T13:20:00Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "YoursSto", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/122735785?v=4", "type": "User" } ] }, { "repo": "danielbohannon/invoke-obfuscation", "name": "invoke-obfuscation", "owner": "danielbohannon", "url": "https://github.com/danielbohannon/Invoke-Obfuscation", "stars": 4295, "language": "PowerShell", "description": "PowerShell Obfuscator", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Daniel Bohannon", "cardId": "db10af0f1bbb1ec3", "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2020/02/01/htb-re.html", "title": "HTB: RE", "person": "0xdf" }, { "url": "https://viralmaniar.github.io/internal%20pentest/internal%20infrastructure%20pentest/network%20pentest/Interesting-Repos-for-Internal-Pentest/", "title": "Internal Infrastructure Pentest - Repos For Internal Pentest", "person": "Viral Maniar" } ], "referencedCount": 2, "id": "6e2b6493312d", "score": 38, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "login": "cobbr" } ], "pushedAt": "2023-08-10T23:49:06Z", "archived": false, "topContributors": [ { "login": "cobbr", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "4d4c", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1427046?v=4", "type": "User" }, { "login": "danielbohannon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4", "type": "User" }, { "login": "mvle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9408668?v=4", "type": "User" } ] }, { "repo": "antoniococo/roguewinrm", "name": "roguewinrm", "owner": "antoniococo", "url": "https://github.com/antonioCoco/RogueWinRM", "stars": 958, "language": "C++", "description": "Windows Local Privilege Escalation from Service Account to System", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/printspoofer-abusing-impersonate-privileges/", "title": "PrintSpoofer - Abusing Impersonation Privileges on Windows 10 and Server 2019", "person": "Clément Labro" } ], "referencedCount": 1, "id": "5758fcbc5b7b", "score": 38, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 3, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-23T19:26:41Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" } ] }, { "repo": "logangoins/sharpsuccessor", "name": "sharpsuccessor", "owner": "logangoins", "url": "https://github.com/logangoins/SharpSuccessor", "stars": 418, "language": "C#", "description": "SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [ { "url": "https://ipurple.team/2025/07/28/badsuccessor/", "title": "BadSuccessor", "person": "Panos Gkatziroulis 🦄" } ], "referencedCount": 1, "id": "ca8ca86c277d", "score": 38, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-26T23:21:51Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" } ] }, { "repo": "api0cradle/applocker-stuff", "name": "applocker-stuff", "owner": "api0cradle", "url": "https://github.com/api0cradle/AppLocker-Stuff", "stars": 18, "language": null, "description": "Just some random stuff for AppLocker", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [ { "url": "https://oddvar.moe/2019/02/01/bypassing-applocker-as-an-admin/", "title": "Bypassing AppLocker as an admin", "person": "Oddvar Moe" } ], "referencedCount": 1, "id": "a2091312279e", "score": 38, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-30T08:42:32Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "apurvsinghgautam/robin", "name": "robin", "owner": "apurvsinghgautam", "url": "https://github.com/apurvsinghgautam/robin", "stars": 5953, "language": "Python", "description": "AI-Powered Dark Web OSINT Tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Apurv Singh Gautam", "cardId": "e17347a79dfabe2b", "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "be6c88bb6667", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 11, "contributors": [], "pushedAt": "2026-07-15T21:37:11Z", "archived": false, "topContributors": [ { "login": "apurvsinghgautam", "c": 129, "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4", "type": "User" }, { "login": "Chintanpatel24", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/216989679?v=4", "type": "User" }, { "login": "aditya-dl", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/64709773?v=4", "type": "User" }, { "login": "muneebwanee", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/43923614?v=4", "type": "User" }, { "login": "Octozu", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/129053412?v=4", "type": "User" }, { "login": "7kevin49", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25989199?v=4", "type": "User" }, { "login": "ayuugoyal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/104688146?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" }, { "login": "MANOJ-80", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/151185569?v=4", "type": "User" }, { "login": "laheurt31u", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/195745187?v=4", "type": "User" }, { "login": "vardan-developer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/187987885?v=4", "type": "User" } ] }, { "repo": "madhuakula/kubernetes-goat", "name": "kubernetes-goat", "owner": "madhuakula", "url": "https://github.com/madhuakula/kubernetes-goat", "id": "339a4c0bbe0d", "stars": 5719, "language": "HTML", "description": "Kubernetes Goat is a \"Vulnerable by Design\" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀", "type": "tool", "pushedAt": "2026-04-16T22:11:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Madhu Akula", "cardId": "3af4d17ee0a1e27a", "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kumar Ashwin", "cardId": "a326da662fab743b", "avatar": "https://avatars.githubusercontent.com/u/77858203?v=4", "login": "0xCardinal" } ], "adoptionOperators": 0, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 37, "topContributors": [ { "login": "madhuakula", "c": 197, "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4", "type": "User" }, { "login": "phpsystems", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/6594322?v=4", "type": "User" }, { "login": "adamhurm", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/13396996?v=4", "type": "User" }, { "login": "za", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/409455?v=4", "type": "User" }, { "login": "malwareowl", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/44069301?v=4", "type": "User" }, { "login": "0xCardinal", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/77858203?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "davi-cruz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1941328?v=4", "type": "User" }, { "login": "mkcn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7307955?v=4", "type": "User" }, { "login": "bykvaadm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22855445?v=4", "type": "User" }, { "login": "rewanthtammana", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22347290?v=4", "type": "User" }, { "login": "SumoSumir", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/75212845?v=4", "type": "User" }, { "login": "samriggs", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2112396?v=4", "type": "User" }, { "login": "nayanballa08", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/93637007?v=4", "type": "User" }, { "login": "gvoden", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13051959?v=4", "type": "User" }, { "login": "avicoder", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2093260?v=4", "type": "User" }, { "login": "macagr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2797772?v=4", "type": "User" }, { "login": "commjoen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1457214?v=4", "type": "User" }, { "login": "ravenium", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/670285?v=4", "type": "User" }, { "login": "BlaiseOfGlory", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5067183?v=4", "type": "User" }, { "login": "llaltxll", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11542112?v=4", "type": "User" }, { "login": "hexachordanu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19929881?v=4", "type": "User" }, { "login": "bzd111", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18071885?v=4", "type": "User" }, { "login": "William-LP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10053686?v=4", "type": "User" }, { "login": "wurstbrot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/955192?v=4", "type": "User" }, { "login": "B1TC0R3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/77125551?v=4", "type": "User" }, { "login": "suneshgovind", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7311057?v=4", "type": "User" }, { "login": "smoyer64", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/328333?v=4", "type": "User" }, { "login": "pichuang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5253671?v=4", "type": "User" }, { "login": "pankitdubal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23030367?v=4", "type": "User" } ] }, { "repo": "rocky/python-uncompyle6", "name": "python-uncompyle6", "owner": "rocky", "url": "https://github.com/rocky/python-uncompyle6", "id": "e5aa0177ad30", "stars": 4315, "language": "Python", "description": "A cross-version Python bytecode decompiler", "type": "tool", "pushedAt": "2026-04-24T15:24:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 30, "topContributors": [ { "login": "rocky", "c": 3379, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "moagstar", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/879561?v=4", "type": "User" }, { "login": "Mysterie", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/140181?v=4", "type": "User" }, { "login": "andrem-eberle", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13336663?v=4", "type": "User" }, { "login": "jameshilliard", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3298484?v=4", "type": "User" }, { "login": "gdesmar", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/75089569?v=4", "type": "User" }, { "login": "thedrow", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48936?v=4", "type": "User" }, { "login": "wangym5106", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4111676?v=4", "type": "User" }, { "login": "byehack", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26390254?v=4", "type": "User" }, { "login": "grkov90", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1639876?v=4", "type": "User" }, { "login": "cclauss", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "c10udlnk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/73152692?v=4", "type": "User" }, { "login": "willschlitzer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29518865?v=4", "type": "User" }, { "login": "htgoebel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/784161?v=4", "type": "User" }, { "login": "tangboxuan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/67381570?v=4", "type": "User" }, { "login": "skyfion", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/964796?v=4", "type": "User" }, { "login": "lostbeta", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9974657?v=4", "type": "User" }, { "login": "lelicopter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7682951?v=4", "type": "User" }, { "login": "jlugjb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7426462?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "Tey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/646444?v=4", "type": "User" }, { "login": "elfring", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/660477?v=4", "type": "User" }, { "login": "jbremer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1148773?v=4", "type": "User" }, { "login": "kernelsmith", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/620129?v=4", "type": "User" }, { "login": "jwilk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/141546?v=4", "type": "User" }, { "login": "trengri", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53753844?v=4", "type": "User" }, { "login": "supervirus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/177580?v=4", "type": "User" }, { "login": "bloerwald", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2866005?v=4", "type": "User" }, { "login": "Berbe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4251220?v=4", "type": "User" } ] }, { "repo": "samyk/magspoof", "name": "magspoof", "owner": "samyk", "url": "https://github.com/samyk/magspoof", "stars": 4132, "language": "C", "description": "A portable device that can spoof/emulate any magnetic stripe, credit card or hotel card \"wirelessly\", even on standard magstripe (non-NFC/RFID) readers. It can disable Chip&PIN and predict AMEX card n", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samy Kamkar", "cardId": "4ce772bcaaa08c07", "avatar": "https://avatars.githubusercontent.com/u/411832?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "555a18b5c5e7", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [], "pushedAt": "2022-07-03T07:23:15Z", "archived": false, "topContributors": [ { "login": "samyk", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/411832?v=4", "type": "User" }, { "login": "sabas1080", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2874292?v=4", "type": "User" }, { "login": "tamsky", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/96978?v=4", "type": "User" }, { "login": "goofwear", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6278976?v=4", "type": "User" }, { "login": "aowie1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1012966?v=4", "type": "User" }, { "login": "tablatronix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/807787?v=4", "type": "User" }, { "login": "xkey10x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57377849?v=4", "type": "User" } ] }, { "repo": "viralmaniar/powershell-rat", "name": "powershell-rat", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Powershell-RAT", "stars": 1202, "language": "Python", "description": "Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen c", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "519c14d41956", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-20T04:36:26Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "viralmaniar/i-see-you", "name": "I-See-You", "owner": "Viralmaniar", "url": "https://github.com/Viralmaniar/I-See-You", "id": "8330957de366", "stars": 1181, "language": "Shell", "description": "ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary re", "type": "tool", "pushedAt": "2019-04-05T14:04:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Viralmaniar", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/pywhisker", "name": "pywhisker", "owner": "ShutdownRepo", "url": "https://github.com/ShutdownRepo/pywhisker", "id": "d24297c14883", "stars": 914, "language": "Python", "description": "Python version of the C# tool for \"Shadow Credentials\" attacks", "type": "tool", "pushedAt": "2026-06-17T14:51:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "login": "EvanMcBroom" } ], "adoptionOperators": 2, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "ShutdownRepo", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "p0dalirius", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "snovvcrash", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "stzifkas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48880353?v=4", "type": "User" }, { "login": "azoxlpf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/213314124?v=4", "type": "User" }, { "login": "Zamanry", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28152647?v=4", "type": "User" }, { "login": "AetherBlack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52674895?v=4", "type": "User" }, { "login": "cclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "D7EAD", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42398281?v=4", "type": "User" }, { "login": "EvanMcBroom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" }, { "login": "mitchmoser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15603451?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" }, { "login": "rb-x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47902351?v=4", "type": "User" }, { "login": "TahiTi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3107859?v=4", "type": "User" }, { "login": "jvinnedge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/467803?v=4", "type": "User" } ] }, { "repo": "wetw0rk/sickle-pdk", "name": "sickle-pdk", "owner": "wetw0rk", "url": "https://github.com/wetw0rk/sickle-pdk", "stars": 872, "language": "Python", "description": "Sickle - Payload Development Kit", "type": "tool", "lanes": [ "2" ], "author": { "name": "wetw0rk", "cardId": "cca3bc4f07b32950", "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9f56770abe0", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "login": "epi052" } ], "pushedAt": "2026-07-05T16:49:11Z", "archived": false, "topContributors": [ { "login": "wetw0rk", "c": 362, "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "type": "User" }, { "login": "fuzzlove", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44779781?v=4", "type": "User" }, { "login": "hvictor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1229400?v=4", "type": "User" }, { "login": "herrcykel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1936757?v=4", "type": "User" }, { "login": "epi052", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" } ] }, { "repo": "logangoins/krueger", "name": "krueger", "owner": "logangoins", "url": "https://github.com/logangoins/Krueger", "stars": 437, "language": "C#", "description": "Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "20d339594a92", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2025-09-29T19:38:13Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" }, { "login": "HullaBrian", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/62084657?v=4", "type": "User" } ] }, { "repo": "specterops/presentations", "name": "presentations", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/presentations", "id": "15bfc554e5c7", "stars": 227, "language": null, "description": "SpecterOps Presentations", "type": "tool", "pushedAt": "2026-06-03T17:24:13Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "login": "chrismaddalena" }, { "name": "Jared Atkinson", "cardId": "b74077f8734cc496", "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4", "login": "jaredcatkinson" }, { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "login": "cobbr" }, { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "login": "D00MFist" }, { "name": "Joshua Prager", "cardId": "f3698930f9521adb", "avatar": "https://avatars.githubusercontent.com/u/47512472?v=4", "login": "bouj33boy" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Daniel Heinsen", "cardId": "01fd4923819babdd", "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "login": "hotnops" } ], "adoptionOperators": 184, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 14, "topContributors": [ { "login": "chrismaddalena", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" }, { "login": "andrewchiles", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/12104886?v=4", "type": "User" }, { "login": "jaredcatkinson", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13278210?v=4", "type": "User" }, { "login": "cobbr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "v3r5ace", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12716538?v=4", "type": "User" }, { "login": "StephenHinck", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12970156?v=4", "type": "User" }, { "login": "nc3pt0r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30734734?v=4", "type": "User" }, { "login": "D00MFist", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" }, { "login": "eladshamir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8843083?v=4", "type": "User" }, { "login": "bouj33boy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47512472?v=4", "type": "User" }, { "login": "P1CKLES", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8922879?v=4", "type": "User" }, { "login": "djhohnstein", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "hotnops", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "type": "User" } ] }, { "repo": "1n3/exploits", "name": "Exploits", "owner": "1N3", "url": "https://github.com/1N3/Exploits", "id": "4cb8a7843468", "stars": 208, "language": "Python", "description": "Exploits by 1N3 @CrowdShield @xer0dayz @XeroSecurity", "type": "tool", "pushedAt": "2021-09-27T01:48:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 209, "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "1N3", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/dcshadow", "name": "dcshadow", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/dcshadow", "stars": 162, "language": "Python", "description": "Python alternative to Mimikatz lsadump::dcshadow", "type": "tool", "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2177a6433d44", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 4, "mentionDistinct": 4, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-24T21:44:12Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" } ] }, { "repo": "jfmaes/cmdll", "name": "cmdll", "owner": "jfmaes", "url": "https://github.com/jfmaes/CMDLL", "stars": 25, "language": "C++", "description": "the most basic DLL ever to pop a cmd.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60b70e9dbc8a", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-11T10:24:46Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "kingofthenops/enablewebdavclient-bof", "name": "enablewebdavclient-bof", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/EnableWebDAVClient-BOF", "stars": 25, "language": "C", "description": "Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a5d7e630ee1b", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-15T17:41:06Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2018-16763-fuelcms-1.4.1-rce", "name": "cve-2018-16763-fuelcms-1.4.1-rce", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2018-16763-FuelCMS-1.4.1-RCE", "stars": 25, "language": "PHP", "description": "Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "579a1f78c8c3", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-31T09:32:53Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "garrettfoster13/cve-2025-59501", "name": "cve-2025-59501", "owner": "garrettfoster13", "url": "https://github.com/garrettfoster13/CVE-2025-59501", "stars": 25, "language": "Python", "description": "CVE-2025-59501 POC code", "type": "tool", "lanes": [ "2" ], "author": { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "61d364748ed0", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-20T21:20:17Z", "archived": false, "topContributors": [ { "login": "garrettfoster13", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" } ] }, { "repo": "api0cradle/narrator-dll", "name": "narrator-dll", "owner": "api0cradle", "url": "https://github.com/api0cradle/Narrator-dll", "stars": 24, "language": "C++", "description": "Example code on how to use a custom dll during dll hijack on Narrator.exe as a persistence", "type": "tool", "lanes": [ "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2d6db28664ff", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-27T09:17:50Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "kingofthenops/cdp-toolkit", "name": "cdp-toolkit", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/CDP-Toolkit", "stars": 23, "language": "Python", "description": "Post-ex tool to interact with chromium browser when CDP is enabled", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d8e71f070c6", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Antero Guy", "cardId": "5b0f29ad7b712129", "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4", "login": "antroguy" } ], "pushedAt": "2026-05-15T19:55:51Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" }, { "login": "antroguy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46616092?v=4", "type": "User" } ] }, { "repo": "p0dalirius/pwndocapi", "name": "pwndocapi", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/pwndocapi", "stars": 23, "language": "Python", "description": "A python library to interact with Pwndoc instances for pentest reports generation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aef483c90877", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2025-05-19T07:28:58Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "romisfrag", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16926952?v=4", "type": "User" }, { "login": "d-woosley", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/115438340?v=4", "type": "User" }, { "login": "sawyerf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22857002?v=4", "type": "User" }, { "login": "polyur", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63857467?v=4", "type": "User" }, { "login": "albert-brm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/188588214?v=4", "type": "User" } ] }, { "repo": "d00mfist/dylib-hijack-scanner", "name": "dylib-hijack-scanner", "owner": "d00mfist", "url": "https://github.com/D00MFist/Dylib-Hijack-Scanner", "stars": 22, "language": "JavaScript", "description": "JavaScript for Automation (JXA) version of Patrick Wardle's tool that searches applications for dylib hijacking opportunities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88a3078a3ed5", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-08-06T00:27:32Z", "archived": false, "topContributors": [ { "login": "D00MFist", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" } ] }, { "repo": "p0dalirius/joomla-1.6-1.7-2.5-privilege-escalation-vulnerability", "name": "joomla-1.6-1.7-2.5-privilege-escalation-vulnerability", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Joomla-1.6-1.7-2.5-Privilege-Escalation-Vulnerability", "stars": 21, "language": "Python", "description": "A Python script to create an administrator account on Joomla! 1.6/1.7/2.5 using a privilege escalation vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7e48cff3a3c5", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-11T07:53:27Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "chichou/mistune-patch-backport", "name": "mistune-patch-backport", "owner": "chichou", "url": "https://github.com/ChiChou/mistune-patch-backport", "stars": 20, "language": "Makefile", "description": "Backporting CVE-2021-1748 patch for iOS <=14.3", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "46e230d19afc", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-03T22:50:08Z", "archived": false, "topContributors": [ { "login": "ChiChou", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" } ] }, { "repo": "ammaraskar/github-dev-token-steal-poc", "name": "github-dev-token-steal-poc", "owner": "ammaraskar", "url": "https://github.com/ammaraskar/github-dev-token-steal-poc", "stars": 20, "language": null, "description": "Proof of concept for vulnerability from https://blog.ammaraskar.com/github-token-stealing", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ammar Askar", "cardId": "cf3947866f4dd25b", "avatar": "https://avatars.githubusercontent.com/u/773529?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "85dee1b2f421", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-01T18:14:22Z", "archived": false, "topContributors": [ { "login": "ammaraskar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/773529?v=4", "type": "User" } ] }, { "repo": "mwnickerson/redteamvillage2023-dll-sideloading", "name": "redteamvillage2023-dll-sideloading", "owner": "mwnickerson", "url": "https://github.com/mwnickerson/RedTeamVillage2023-DLL-Sideloading", "stars": 19, "language": "C++", "description": "DefCon Red Team Village 2023 Workshop on DLL Sideloading", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Nickerson", "cardId": "cbb0c9a7b3c8b4a2", "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "69a33331acdd", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-08-15T15:05:21Z", "archived": false, "topContributors": [ { "login": "nickswink", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/57839593?v=4", "type": "User" }, { "login": "mwnickerson", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4", "type": "User" } ] }, { "repo": "rwxstoned/slack-links-preview-c2", "name": "slack-links-preview-c2", "owner": "rwxstoned", "url": "https://github.com/RWXstoned/Slack-links-preview-C2", "stars": 18, "language": "Python", "description": "Smuggling C2 comms through links previews", "type": "tool", "lanes": [ "2" ], "author": { "name": "Hugo Valette", "cardId": "cdc93769fee1169d", "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "701c7a4b7964", "score": 38, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-17T11:48:35Z", "archived": false, "topContributors": [ { "login": "RWXstoned", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/54334688?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/byovd", "name": "byovd", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/BYOVD", "stars": 860, "language": "Rust", "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [ { "url": "https://blacksnufkin.github.io/posts/BYOVD-CVE-2026-8501/", "title": "CVE-2026-8501: Arbitrary Process Termination in PCTCore64.sys", "person": "BlackSnufkin" } ], "referencedCount": 1, "id": "b37cbe0aa20a", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-12T09:40:22Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" }, { "login": "wwwab123", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/94147274?v=4", "type": "User" }, { "login": "g0h4n", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18140652?v=4", "type": "User" } ] }, { "repo": "itm4n/fullpowers", "name": "fullpowers", "owner": "itm4n", "url": "https://github.com/itm4n/FullPowers", "stars": 697, "language": "C++", "description": "Recover the default privilege set of a LOCAL/NETWORK SERVICE account", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/localservice-privileges/", "title": "Give Me Back My Privileges! Please?", "person": "Clément Labro" } ], "referencedCount": 1, "id": "6ccca473ffaf", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-03T15:41:37Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/firepwn-tool", "name": "firepwn-tool", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/firepwn-tool", "stars": 668, "language": "TypeScript", "description": "Firepwn is a tool made for testing the Security Rules of a firebase application. ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2020-09-14-firebase-research-publication", "title": "Firebase Applications – The Untold Attack Surface", "person": "pwner.gg" } ], "referencedCount": 1, "id": "205f7055c7fb", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [], "pushedAt": "2026-04-26T10:56:21Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" }, { "login": "BobTheShoplifter", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/22559547?v=4", "type": "User" }, { "login": "whiskeykilo", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/18176030?v=4", "type": "User" }, { "login": "eddiez9", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4555207?v=4", "type": "User" }, { "login": "deargle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1174653?v=4", "type": "User" }, { "login": "DejanGegic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19312089?v=4", "type": "User" }, { "login": "ldionmarcil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1320868?v=4", "type": "User" }, { "login": "kivirnz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/179799436?v=4", "type": "User" } ] }, { "repo": "techspence/scriptsentry", "name": "scriptsentry", "owner": "techspence", "url": "https://github.com/techspence/ScriptSentry", "stars": 665, "language": "PowerShell", "description": "ScriptSentry finds misconfigured and dangerous logon scripts.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Spencer Alessi", "cardId": "eae812c5a3f7c337", "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4" }, "referencedBy": [ { "url": "https://offsec.blog/hidden-menace-how-to-identify-misconfigured-and-dangerous-logon-scripts", "title": "Hidden Menace: How to Identify Misconfigured and Dangerous Logon Scripts - Offensive Security Blog - SecurIT360", "person": "Spencer Alessi" } ], "referencedCount": 1, "id": "60310885c487", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-02-16T14:55:02Z", "archived": false, "topContributors": [ { "login": "techspence", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4", "type": "User" }, { "login": "spenceralessi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/271779338?v=4", "type": "User" }, { "login": "rebelinux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1002783?v=4", "type": "User" } ] }, { "repo": "0xacb/viewgen", "name": "viewgen", "owner": "0xacb", "url": "https://github.com/0xacb/viewgen", "stars": 664, "language": "Python", "description": "Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andre Baptista", "cardId": "ca3c2b1401da319e", "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4" }, "referencedBy": [ { "url": "https://0xacb.com/projects/", "title": "Projects", "person": "Andre Baptista" } ], "referencedCount": 1, "id": "c918f3836594", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2025-02-01T16:09:12Z", "archived": false, "topContributors": [ { "login": "0xacb", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4", "type": "User" }, { "login": "Hzllaga", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/40329078?v=4", "type": "User" }, { "login": "OmriBaso", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/50461376?v=4", "type": "User" }, { "login": "x1mdev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22507577?v=4", "type": "User" }, { "login": "whwlsfb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8212964?v=4", "type": "User" } ] }, { "repo": "jfmaes/downloadfix", "name": "downloadfix", "owner": "jfmaes", "url": "https://github.com/jfmaes/downloadfix", "stars": 16, "language": "HTML", "description": "inspired by mr d0x filefix", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [ { "url": "https://redteamer.tips/bring-your-own-fix", "title": "Bring your own Fix - Mr.D0x inspired variation of yet another \"fix\" attack", "person": "Jean-François Maes" } ], "referencedCount": 1, "id": "20c98454f0d1", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-04T08:37:50Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "api0cradle/bginfo", "name": "bginfo", "owner": "api0cradle", "url": "https://github.com/api0cradle/BGInfo", "stars": 16, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4" }, "referencedBy": [ { "url": "https://oddvar.moe/2017/09/13/defense-in-depth-writeup/", "title": "Defense-In-Depth write-up", "person": "Oddvar Moe" } ], "referencedCount": 1, "id": "e2d94b02a6bf", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2018-06-01T10:05:18Z", "archived": false, "topContributors": [ { "login": "api0cradle", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "infosec-au/captchajackingpoc", "name": "captchajackingpoc", "owner": "infosec-au", "url": "https://github.com/infosec-au/CaptchaJackingPoC", "stars": 16, "language": "Python", "description": "Web security concept of CaptchaJacking Proof of Concept Code | Made very quickly, serves purely as a PoC only", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [ { "url": "https://shubs.io/captchajacking-an-approach-to-bypassing-the-captcha/", "title": "CaptchaJacking - An Approach to Bypassing the Captcha", "person": "Shubham Shubs Shah" } ], "referencedCount": 1, "id": "efc3bbcc4ef2", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-09-07T04:05:15Z", "archived": false, "topContributors": [ { "login": "infosec-au", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" } ] }, { "repo": "synzack/turnstyle", "name": "turnstyle", "owner": "synzack", "url": "https://github.com/Synzack/Turnstyle", "stars": 13, "language": "Python", "description": "Ansible Scripts to Deploy a Turnstile Page", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zach Stein", "cardId": "ed58244eaf4a39ed", "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/05/28/dont-jump-the-turnstile-lessons-from-the-field/", "title": "Don’t Jump the Turnstile: Lessons from the Field", "person": "Zach Stein" } ], "referencedCount": 1, "id": "efba7fc388ea", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-28T22:33:31Z", "archived": false, "topContributors": [ { "login": "Synzack", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4", "type": "User" } ] }, { "repo": "qkaiser/awind-research", "name": "awind-research", "owner": "qkaiser", "url": "https://github.com/qkaiser/awind-research", "stars": 13, "language": "Python", "description": "This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4" }, "referencedBy": [ { "url": "https://quentinkaiser.be/pentesting/2019/03/26/awind-device-network/", "title": "Man-in-the-Conference-Room - Part III (Network Assessment)", "person": "Quentin Kaiser" } ], "referencedCount": 1, "id": "69a995c6afdc", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-28T22:57:46Z", "archived": false, "topContributors": [ { "login": "qkaiser", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" } ] }, { "repo": "gershsec/mssql2025-poc", "name": "mssql2025-poc", "owner": "gershsec", "url": "https://github.com/gershsec/mssql2025-poc", "stars": 13, "language": "Python", "description": "Blog companion repo for 'Oops, I Weaponized the Database'", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Justin Kalnasy", "cardId": "e24317f51c8b276b", "avatar": "https://avatars.githubusercontent.com/u/42216889?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/06/10/oops-i-weaponized-the-database-abusing-ai-features-in-mssql-2025/", "title": "Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025", "person": "Justin Kalnasy" } ], "referencedCount": 1, "id": "cffc7ea6c79b", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-10T11:42:08Z", "archived": false, "topContributors": [ { "login": "gershsec", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/42216889?v=4", "type": "User" } ] }, { "repo": "decoder-it/lonelypotato", "name": "lonelypotato", "owner": "decoder-it", "url": "https://github.com/decoder-it/lonelypotato", "stars": 12, "language": null, "description": "Switch to JuicyPotato! https://github.com/decoder-it/juicy-potato", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2018/01/13/potato-and-tokens/", "title": "Potatoes and tokens", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "a2116362dc6e", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-08T16:31:07Z", "archived": false, "topContributors": [ { "login": "decoder-it", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "mazen160/backlog", "name": "backlog", "owner": "mazen160", "url": "https://github.com/mazen160/backlog", "stars": 12, "language": "HTML", "description": "backlog: Your AI agent forgets between sessions. Backlog remembers.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/backlog-project/", "title": "Backlog: A Local-First Task and Context Manager for Humans and AI", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "7482d20882eb", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-08T18:45:03Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "chichou/badtokenizerpoc", "name": "badtokenizerpoc", "owner": "chichou", "url": "https://github.com/ChiChou/BadTokenizerPoc", "stars": 12, "language": "PHP", "description": "Abusing fts3_tokenizer ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [ { "url": "https://codecolor.ist/posts/2016-01-20-bypass-php-safe-mode-by-abusing-sqlite3-s-fts-tokenizer/", "title": "Bypass PHP Safe Mode by Abusing SQLite3's FTS Tokenizer", "person": "Zhi Zhou" } ], "referencedCount": 1, "id": "d5933fe2ea78", "score": 37, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-01-18T14:27:03Z", "archived": false, "topContributors": [ { "login": "ChiChou", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" } ] }, { "repo": "justicerage/gepetto", "name": "Gepetto", "owner": "JusticeRage", "url": "https://github.com/JusticeRage/Gepetto", "id": "3e73b0fbaf26", "stars": 3446, "language": "Python", "description": "IDA plugin which queries language models to speed up reverse-engineering", "type": "tool", "pushedAt": "2026-05-03T13:16:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ivan Kwiatkowski", "cardId": "c82f997c87481de7", "avatar": "https://avatars.githubusercontent.com/u/6743798?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 22, "topContributors": [ { "login": "JusticeRage", "c": 141, "avatar": "https://avatars.githubusercontent.com/u/6743798?v=4", "type": "User" }, { "login": "quippy-dev", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/131914530?v=4", "type": "User" }, { "login": "D3fau4", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/19638408?v=4", "type": "User" }, { "login": "jindaxia", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/587992?v=4", "type": "User" }, { "login": "Xplo8E", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/55936553?v=4", "type": "User" }, { "login": "Albeoris", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4787832?v=4", "type": "User" }, { "login": "mahmoudimus", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/40820?v=4", "type": "User" }, { "login": "Rsplwe", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45302571?v=4", "type": "User" }, { "login": "google-labs-jules[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/842251?v=4", "type": "Bot" }, { "login": "williballenthin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/156560?v=4", "type": "User" }, { "login": "antipaster", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/121552016?v=4", "type": "User" }, { "login": "devnoname120", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2824100?v=4", "type": "User" }, { "login": "Epieos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/69537604?v=4", "type": "User" }, { "login": "0xa13d", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7606633?v=4", "type": "User" }, { "login": "felipejfc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/285782?v=4", "type": "User" }, { "login": "RealHurrison", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43513000?v=4", "type": "User" }, { "login": "jpenalbae", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8380459?v=4", "type": "User" }, { "login": "jasonhp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4403571?v=4", "type": "User" }, { "login": "nonetype", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30901297?v=4", "type": "User" }, { "login": "gaasedelen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9522648?v=4", "type": "User" }, { "login": "patois", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2330989?v=4", "type": "User" }, { "login": "tu95", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25311646?v=4", "type": "User" } ] }, { "repo": "lauriewired/malimite", "name": "Malimite", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/Malimite", "id": "00dc82cc063a", "stars": 3045, "language": "Java", "description": "iOS and macOS Decompiler", "type": "tool", "pushedAt": "2025-08-26T05:59:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "LaurieWired", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" }, { "login": "EastArctica", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/32211444?v=4", "type": "User" }, { "login": "ericyanush", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1020116?v=4", "type": "User" }, { "login": "sleeyax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30344294?v=4", "type": "User" } ] }, { "repo": "mgeeky/penetration-testing-tools", "name": "Penetration-Testing-Tools", "owner": "mgeeky", "url": "https://github.com/mgeeky/Penetration-Testing-Tools", "id": "7757595b7dcc", "stars": 2988, "language": "PowerShell", "description": "A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.", "type": "tool", "pushedAt": "2023-06-27T19:16:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "mgeeky", "c": 658, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "qwertiko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45596432?v=4", "type": "User" }, { "login": "avarx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1161946?v=4", "type": "User" } ] }, { "repo": "antoniococo/remotepotato0", "name": "remotepotato0", "owner": "antoniococo", "url": "https://github.com/antonioCoco/RemotePotato0", "stars": 1464, "language": "C", "description": "Windows Privilege Escalation from User to Domain Admin.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fb00ceb6e8ab", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-18T01:52:53Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" } ] }, { "repo": "dafthack/graphrunner", "name": "GraphRunner", "owner": "dafthack", "url": "https://github.com/dafthack/GraphRunner", "id": "10fd2915ade4", "stars": 1314, "language": "PowerShell", "description": "A Post-exploitation Toolset for Interacting with the Microsoft Graph API", "type": "tool", "pushedAt": "2026-04-09T20:13:39Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" } ], "adoptionOperators": 1, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "dafthack", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "C0axx", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/35150945?v=4", "type": "User" }, { "login": "HuskyHacks", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/57866415?v=4", "type": "User" }, { "login": "Tylous", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "Kadawi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45124659?v=4", "type": "User" }, { "login": "NinjaStyle82", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10945042?v=4", "type": "User" }, { "login": "ville87", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38942588?v=4", "type": "User" }, { "login": "nyxgeek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13773437?v=4", "type": "User" }, { "login": "romisfrag", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16926952?v=4", "type": "User" }, { "login": "sleeptok3n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38359072?v=4", "type": "User" } ] }, { "repo": "tylous/sourcepoint", "name": "SourcePoint", "owner": "Tylous", "url": "https://github.com/Tylous/SourcePoint", "id": "060f8756631c", "stars": 1216, "language": "Go", "description": "SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion. ", "type": "tool", "pushedAt": "2025-04-16T17:15:04Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Tylous", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Savannah Lazzara", "cardId": "07457787b4214e1f", "avatar": "https://avatars.githubusercontent.com/u/46729088?v=4", "login": "lazzslayer" } ], "adoptionOperators": 2, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "Tylous", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "Xenov-X", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/62152036?v=4", "type": "User" }, { "login": "Nahid5", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22510093?v=4", "type": "User" }, { "login": "0xflagplz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59506742?v=4", "type": "User" }, { "login": "hsfetty", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64932388?v=4", "type": "User" }, { "login": "lazzslayer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46729088?v=4", "type": "User" } ] }, { "repo": "specterops/azurehound", "name": "AzureHound", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/AzureHound", "id": "be25ad18b314", "stars": 934, "language": "Go", "description": "Azure Data Exporter for BloodHound", "type": "tool", "pushedAt": "2026-07-17T22:00:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Daniel Heinsen", "cardId": "01fd4923819babdd", "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "login": "hotnops" }, { "name": "John Hopper", "cardId": "61109955c224a1c5", "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "login": "zinic" }, { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" }, { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" }, { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "login": "christophetd" }, { "name": "Leonardo Ferreira", "cardId": "7aa866a407068c0a", "avatar": "https://avatars.githubusercontent.com/u/4137088?v=4", "login": "ferreirasc" } ], "adoptionOperators": 6, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 39, "topContributors": [ { "login": "ddlees", "c": 128, "avatar": "https://avatars.githubusercontent.com/u/8984872?v=4", "type": "User" }, { "login": "benwaples", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/66393111?v=4", "type": "User" }, { "login": "rvazarkar", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "crimike", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/10261812?v=4", "type": "User" }, { "login": "superlinkx", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/466326?v=4", "type": "User" }, { "login": "StranDutton", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/65475509?v=4", "type": "User" }, { "login": "definitelynotagoblin", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/80649445?v=4", "type": "User" }, { "login": "mistahj67", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/26472282?v=4", "type": "User" }, { "login": "ykaiboussiSO", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/182781928?v=4", "type": "User" }, { "login": "computator", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/3962958?v=4", "type": "User" }, { "login": "mvlipka", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2319609?v=4", "type": "User" }, { "login": "hotnops", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "type": "User" }, { "login": "juggernot325", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/885166?v=4", "type": "User" }, { "login": "zinic", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "type": "User" }, { "login": "irshadaj", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/24904109?v=4", "type": "User" }, { "login": "sircodemane", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6968902?v=4", "type": "User" }, { "login": "elikmiller", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1761629?v=4", "type": "User" }, { "login": "andyrobbins", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "urangel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16910931?v=4", "type": "User" }, { "login": "StephenHinck", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12970156?v=4", "type": "User" }, { "login": "Mayyhem", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "mykeelium", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10276078?v=4", "type": "User" }, { "login": "hugo-syn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "onSec-fr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59887731?v=4", "type": "User" }, { "login": "specterops-scross", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/239392477?v=4", "type": "User" }, { "login": "hairlesshobo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3877800?v=4", "type": "User" }, { "login": "0xffhh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56194755?v=4", "type": "User" }, { "login": "pradameinhof", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16960409?v=4", "type": "User" } ] }, { "repo": "ahmedkhlief/ninja", "name": "ninja", "owner": "ahmedkhlief", "url": "https://github.com/ahmedkhlief/Ninja", "stars": 841, "language": "PowerShell", "description": " Open source C2 server created for stealth red team operations", "type": "tool", "lanes": [ "2" ], "author": { "name": "ahmedkhlief", "cardId": "a1a8f32c1bbfcafe", "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "50fdacc5d317", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-09-26T16:07:43Z", "archived": false, "topContributors": [ { "login": "ahmedkhlief", "c": 84, "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4", "type": "User" }, { "login": "zAbuQasem", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/74984708?v=4", "type": "User" } ] }, { "repo": "itm4n/vba-runpe", "name": "vba-runpe", "owner": "itm4n", "url": "https://github.com/itm4n/VBA-RunPE", "stars": 813, "language": "VBA", "description": "A VBA implementation of the RunPE technique or how to bypass application whitelisting.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87154c83a089", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-17T10:32:43Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "devanshbatham/openredirex", "name": "OpenRedireX", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/OpenRedireX", "id": "763a1aeae0c9", "stars": 795, "language": "Python", "description": "A fuzzer for detecting open redirect vulnerabilities", "type": "tool", "pushedAt": "2024-07-01T20:45:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "devanshbatham", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" }, { "login": "CowlingBanana", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51919963?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/tikitorch", "name": "tikitorch", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/TikiTorch", "stars": 767, "language": "C#", "description": "Process Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b670644783ab", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2021-10-24T10:29:46Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "leoloobeek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8801754?v=4", "type": "User" }, { "login": "ktlmsney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49543676?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/ppfuzz", "name": "ppfuzz", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/ppfuzz", "id": "3b826247eead", "stars": 669, "language": "Rust", "description": "A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀", "type": "tool", "pushedAt": "2025-08-28T06:00:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "dwisiswant0", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "mattsse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19890894?v=4", "type": "User" } ] }, { "repo": "idov31/cronos", "name": "cronos", "owner": "idov31", "url": "https://github.com/Idov31/Cronos", "stars": 623, "language": "C", "description": "PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e98e3420fcdb", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 3, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-26T18:06:10Z", "archived": false, "topContributors": [ { "login": "Idov31", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "klezvirus/aida64driver-eop", "name": "aida64driver-eop", "owner": "klezvirus", "url": "https://github.com/klezVirus/AIDA64DRIVER-EoP", "stars": 17, "language": "C++", "description": "AIDA64DRIVER Elevation of Privilege Vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb3772532f2f", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-25T21:11:48Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "kingofthenops/changewallpaper-bof", "name": "changewallpaper-bof", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/ChangeWallpaper-BOF", "stars": 17, "language": "C", "description": "Cobalt Strike Beacon Object File to to change the user's desktop wallpaper", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fce4412d460b", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-15T19:37:52Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "curi0usjack/ludus_badblood", "name": "ludus_badblood", "owner": "curi0usjack", "url": "https://github.com/curi0usJack/ludus_badblood", "stars": 17, "language": null, "description": "Outfits your ludus AD domain with BadBlood info.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d0d7c5a69e97", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-05T22:24:50Z", "archived": false, "topContributors": [ { "login": "jasondoordash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/81776696?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2022-30780-lighttpd-denial-of-service", "name": "cve-2022-30780-lighttpd-denial-of-service", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2022-30780-lighttpd-denial-of-service", "stars": 17, "language": "Perl", "description": "CVE-2022-30780 - lighttpd remote denial of service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7002e2ae3e4a", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-16T08:26:24Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "jfmaes/ansible-cobalt-strike", "name": "ansible-cobalt-strike", "owner": "jfmaes", "url": "https://github.com/jfmaes/Ansible-Cobalt-Strike", "stars": 16, "language": null, "description": "An Ansible role to install cobalt-strike", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jean-François Maes", "cardId": "0fc0c15ac5206509", "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2061862fd1d5", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-24T19:09:53Z", "archived": false, "topContributors": [ { "login": "jfmaes", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/55604242?v=4", "type": "User" } ] }, { "repo": "seanheelan/claude_opus_cve_2023_0266", "name": "claude_opus_cve_2023_0266", "owner": "seanheelan", "url": "https://github.com/SeanHeelan/claude_opus_cve_2023_0266", "stars": 16, "language": "C", "description": "Demo showing Claude Opus does not find CVE-2023-0266", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2286f2b49edb", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-03-19T14:18:20Z", "archived": false, "topContributors": [] }, { "repo": "cxiao/minidump_bn", "name": "minidump_bn", "owner": "cxiao", "url": "https://github.com/cxiao/minidump_bn", "stars": 16, "language": "Rust", "description": "Minidump loader for Binary Ninja", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cindy Xiao", "cardId": "4d7f692404086cb1", "avatar": "https://avatars.githubusercontent.com/u/1661230?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec94065f0aa7", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-25T07:24:25Z", "archived": false, "topContributors": [ { "login": "cxiao", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/1661230?v=4", "type": "User" } ] }, { "repo": "mayerdaniel/bof-wsl", "name": "bof-wsl", "owner": "mayerdaniel", "url": "https://github.com/MayerDaniel/bof-wsl", "stars": 14, "language": "C++", "description": "bof for interacting with WSL", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a763ff1a401b", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-08T22:29:40Z", "archived": false, "topContributors": [ { "login": "MayerDaniel", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "type": "User" } ] }, { "repo": "curi0usjack/psfire", "name": "psfire", "owner": "curi0usjack", "url": "https://github.com/curi0usJack/psfire", "stars": 14, "language": "C#", "description": "simple demo of using C# & System.Management.Automation.dll to run powershell code (b64 encoded) without powershell.exe", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b4e6104a2957", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-03-29T16:27:27Z", "archived": false, "topContributors": [] }, { "repo": "byt3bl33d3r/bof-zig", "name": "bof-zig", "owner": "byt3bl33d3r", "url": "https://github.com/byt3bl33d3r/BOF-Zig", "stars": 13, "language": "C", "description": "Cobalt Strike BOF with Zig!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "50faa2b211ca", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-10T19:48:21Z", "archived": false, "topContributors": [ { "login": "byt3bl33d3r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "synzack/excel-4.0-shellcode-generator", "name": "excel-4.0-shellcode-generator", "owner": "synzack", "url": "https://github.com/Synzack/Excel-4.0-Shellcode-Generator", "stars": 13, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zach Stein", "cardId": "ed58244eaf4a39ed", "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a8f1a7a0a0a4", "score": 37, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-27T10:43:20Z", "archived": false, "topContributors": [ { "login": "Synzack", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4", "type": "User" } ] }, { "repo": "google/syzkaller", "name": "syzkaller", "owner": "google", "url": "https://github.com/google/syzkaller", "stars": 6272, "language": "Go", "description": "syzkaller is an unsupervised coverage-guided kernel fuzzer", "type": "tool", "lanes": [ "1" ], "author": { "name": "google", "cardId": null }, "referencedBy": [ { "url": "https://a13xp0p0v.tech/2022/06/16/pwn-fuchsia-ru.html", "title": "[ru] Fuchsia OS глазами атакующего", "person": "Alexander Popov" }, { "url": "https://a13xp0p0v.tech/2022/05/24/pwn-fuchsia.html", "title": "A Kernel Hacker Meets Fuchsia OS", "person": "Alexander Popov" }, { "url": "https://www.willsroot.io/2022/01/cve-2022-0185.html", "title": "CVE-2022-0185 - Winning a $31337 Bounty after Pwning Ubuntu and Escaping Google's KCTF Containers", "person": "willsroot" }, { "url": "https://swarm.ptsecurity.com/a-kernel-hacker-meets-fuchsia-os/", "title": "A Kernel Hacker Meets Fuchsia OS", "person": "Mark Ermolov" } ], "referencedCount": 4, "id": "c7472fb11f95", "score": 36, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 6, "mentionDistinct": 6, "contributorCount": 100, "contributors": [ { "name": "Andrey Konovalov", "cardId": "248dd96652a047b6", "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "login": "xairy" }, { "name": "Alexander Popov", "cardId": "2327dd257a083e59", "avatar": "https://avatars.githubusercontent.com/u/1419667?v=4", "login": "a13xp0p0v" } ], "pushedAt": "2026-07-17T17:15:12Z", "archived": false, "topContributors": [ { "login": "dvyukov", "c": 5220, "avatar": "https://avatars.githubusercontent.com/u/1095328?v=4", "type": "User" }, { "login": "a-nogikh", "c": 2145, "avatar": "https://avatars.githubusercontent.com/u/6153598?v=4", "type": "User" }, { "login": "xairy", "c": 715, "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "type": "User" }, { "login": "tarasmadan", "c": 708, "avatar": "https://avatars.githubusercontent.com/u/89859571?v=4", "type": "User" }, { "login": "ramosian-glider", "c": 602, "avatar": "https://avatars.githubusercontent.com/u/912627?v=4", "type": "User" }, { "login": "mptre", "c": 179, "avatar": "https://avatars.githubusercontent.com/u/43914?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 170, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "pchaigno", "c": 133, "avatar": "https://avatars.githubusercontent.com/u/1764210?v=4", "type": "User" }, { "login": "blackgnezdo", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/8768818?v=4", "type": "User" }, { "login": "markjdb", "c": 119, "avatar": "https://avatars.githubusercontent.com/u/782170?v=4", "type": "User" }, { "login": "pimyn-girgis", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/24656415?v=4", "type": "User" }, { "login": "tuexen", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/62450?v=4", "type": "User" }, { "login": "mvanotti", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/696185?v=4", "type": "User" }, { "login": "melver", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/795549?v=4", "type": "User" }, { "login": "eaibmz", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/66992637?v=4", "type": "User" }, { "login": "jiangenj", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/143577144?v=4", "type": "User" }, { "login": "avagin", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/1049830?v=4", "type": "User" }, { "login": "FlorentRevest", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/908424?v=4", "type": "User" }, { "login": "glpesk", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/114444708?v=4", "type": "User" }, { "login": "R3x", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/24479908?v=4", "type": "User" }, { "login": "ajdlinux", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/2901442?v=4", "type": "User" }, { "login": "l0kod", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/1286585?v=4", "type": "User" }, { "login": "hrutvik", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/7516593?v=4", "type": "User" }, { "login": "eprucka3", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/33524786?v=4", "type": "User" }, { "login": "evdenis", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/150761?v=4", "type": "User" }, { "login": "kalder", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/61064868?v=4", "type": "User" }, { "login": "hogander-unikie", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/58693118?v=4", "type": "User" }, { "login": "joeyjiaojg", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/77719320?v=4", "type": "User" }, { "login": "tklauser", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/539708?v=4", "type": "User" }, { "login": "ebiggers", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/2373140?v=4", "type": "User" } ] }, { "repo": "zhuowei/macdirtycowdemo", "name": "macdirtycowdemo", "owner": "zhuowei", "url": "https://github.com/zhuowei/MacDirtyCowDemo", "stars": 411, "language": "C", "description": "Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [ { "url": "https://worthdoingbadly.com/macdirtycow/", "title": "Get root on macOS 13.0.1 with CVE-2022-46689, the macOS Dirty Cow bug", "person": "worthdoingbadly" } ], "referencedCount": 1, "id": "ab37c6453609", "score": 36, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-21T17:53:19Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/icalendardb", "name": "icalendardb", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/icalendardb", "stars": 11, "language": "HTML", "description": "A data", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [ { "url": "https://spaceraccoon.dev/exploiting-icalendar-properties-enterprise-applications/", "title": "You Have One New Appwntment: Exploiting iCalendar Properties in Enterprise Applications", "person": "Eugene Lim" } ], "referencedCount": 1, "id": "4852575cb1e0", "score": 36, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-28T13:43:49Z", "archived": false, "topContributors": [ { "login": "lordidiot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18577367?v=4", "type": "User" } ] }, { "repo": "p0dalirius/shift-happens-uncovering-to-builtin-command-injection-in-windows-context-menus", "name": "shift-happens-uncovering-to-builtin-command-injection-in-windows-context-menus", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/Shift-Happens-Uncovering-to-builtin-command-injection-in-Windows-context-menus", "stars": 10, "language": null, "description": "Shift Happens: Uncovering two built-in command injections in Windows context menus", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/05/07/shift-happens-uncovering-two-built-in-command-injections-in-windows-context-menus/", "title": "Shift Happens - Uncovering Two Built-in Command Injections in Windows Context Menus", "person": "Remi GASCOU" } ], "referencedCount": 1, "id": "a4d42b036e95", "score": 36, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-20T13:23:15Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "clearbluejar/cve-2024-20696", "name": "cve-2024-20696", "owner": "clearbluejar", "url": "https://github.com/clearbluejar/CVE-2024-20696", "stars": 8, "language": "C", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "John McIntosh", "cardId": "27b3a1960aa36a0f", "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4" }, "referencedBy": [ { "url": "https://clearbluejar.github.io/posts/patch-tuesday-diffing-cve-2024-20696-windows-libarchive-rce/", "title": "Patch Tuesday Diffing: CVE-2024-20696 - Windows Libarchive RCE", "person": "John McIntosh" } ], "referencedCount": 1, "id": "207ab04ad2a3", "score": 36, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-12T13:33:58Z", "archived": false, "topContributors": [ { "login": "clearbluejar", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3752074?v=4", "type": "User" } ] }, { "repo": "decalage2/iodeflib", "name": "iodeflib", "owner": "decalage2", "url": "https://github.com/decalage2/iodeflib", "stars": 8, "language": "Python", "description": "iodeflib is a python library to create, parse and edit cyber incident reports using the IODEF XML format (RFC 5070).", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Philippe Lagadec", "cardId": "2f01d6d832e70243", "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4" }, "referencedBy": [ { "url": "https://decalage.info/python/iodeflib/", "title": "iodeflib - a python library to create, parse and edit IODEF incident reports", "person": "Philippe Lagadec" } ], "referencedCount": 1, "id": "229e1afa7c8f", "score": 36, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-06-03T12:26:50Z", "archived": false, "topContributors": [ { "login": "decalage2", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4", "type": "User" } ] }, { "repo": "danmcinerney/lans.py", "name": "LANs.py", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/LANs.py", "id": "014eb9938220", "stars": 2626, "language": "Python", "description": "Inject code and spy on wifi users", "type": "tool", "pushedAt": "2021-07-31T21:33:37Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "David Dworken", "cardId": "c09dd6fa1b9718a6", "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "login": "ddworken" } ], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "ddworken", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "type": "User" }, { "login": "DanMcInerney", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" }, { "login": "rroy1590", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/906694?v=4", "type": "User" }, { "login": "j-haines", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10952978?v=4", "type": "User" }, { "login": "swex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1026241?v=4", "type": "User" }, { "login": "xarses", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2107834?v=4", "type": "User" }, { "login": "mattburesh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/136601?v=4", "type": "User" }, { "login": "cbartlett", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/925?v=4", "type": "User" }, { "login": "warna720", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2817390?v=4", "type": "User" }, { "login": "gkbrk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3153378?v=4", "type": "User" } ] }, { "repo": "gtworek/priv2admin", "name": "Priv2Admin", "owner": "gtworek", "url": "https://github.com/gtworek/Priv2Admin", "id": "aa2e468907a7", "stars": 2484, "language": null, "description": "Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.", "type": "tool", "pushedAt": "2023-02-24T13:31:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Grzegorz Tworek", "cardId": "43979aa641c4577b", "avatar": "https://avatars.githubusercontent.com/u/6702762?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "gtworek", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/6702762?v=4", "type": "User" }, { "login": "daem0nc0re", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/33651482?v=4", "type": "User" }, { "login": "Qazeer", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5614972?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "diecknet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54552094?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" } ] }, { "repo": "apurvsinghgautam/dark-web-osint-tools", "name": "dark-web-osint-tools", "owner": "apurvsinghgautam", "url": "https://github.com/apurvsinghgautam/dark-web-osint-tools", "stars": 2464, "language": null, "description": "OSINT Tools for the Dark Web", "type": "tool", "lanes": [ "2" ], "author": { "name": "Apurv Singh Gautam", "cardId": "e17347a79dfabe2b", "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "14280bac33c8", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-05-22T17:24:08Z", "archived": false, "topContributors": [ { "login": "apurvsinghgautam", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4", "type": "User" }, { "login": "miguelsantareno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30018584?v=4", "type": "User" }, { "login": "RicYaben", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32867697?v=4", "type": "User" } ] }, { "repo": "idov31/nidhogg", "name": "nidhogg", "owner": "idov31", "url": "https://github.com/Idov31/Nidhogg", "stars": 2441, "language": "C++", "description": "Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e0f0384840b8", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-06-26T10:50:49Z", "archived": false, "topContributors": [ { "login": "Idov31", "c": 452, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" }, { "login": "SLiNv", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6207334?v=4", "type": "User" }, { "login": "Grovvik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/186872925?v=4", "type": "User" } ] }, { "repo": "xoreaxeaxeax/rosenbridge", "name": "rosenbridge", "owner": "xoreaxeaxeax", "url": "https://github.com/xoreaxeaxeax/rosenbridge", "id": "b30e42a9af4f", "stars": 2398, "language": "C", "description": "Hardware backdoors in some x86 CPUs", "type": "tool", "pushedAt": "2018-10-12T09:22:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christopher Domas", "cardId": "2529ac99099dac07", "avatar": "https://avatars.githubusercontent.com/u/12904366?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xoreaxeaxeax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12904366?v=4", "type": "User" } ] }, { "repo": "filosottile/heartbleed", "name": "heartbleed", "owner": "filosottile", "url": "https://github.com/FiloSottile/Heartbleed", "stars": 2390, "language": "Go", "description": "A checker (site and tool) for CVE-2014-0160", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filippo Valsorda", "cardId": "9f10b11efbce4c69", "avatar": "https://avatars.githubusercontent.com/u/1225294?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cdd4dbdd89a4", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 11, "contributors": [], "pushedAt": "2021-02-24T09:17:24Z", "archived": false, "topContributors": [ { "login": "FiloSottile", "c": 86, "avatar": "https://avatars.githubusercontent.com/u/1225294?v=4", "type": "User" }, { "login": "jrconlin", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/35755?v=4", "type": "User" }, { "login": "yakatz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/93333?v=4", "type": "User" }, { "login": "kisom", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/175578?v=4", "type": "User" }, { "login": "asfaltboy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/321520?v=4", "type": "User" }, { "login": "oremj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45590?v=4", "type": "User" }, { "login": "fmpwizard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62802?v=4", "type": "User" }, { "login": "kasimon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78341?v=4", "type": "User" }, { "login": "inkel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108421?v=4", "type": "User" }, { "login": "rtshanks", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4176216?v=4", "type": "User" }, { "login": "html5cat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/823890?v=4", "type": "User" } ] }, { "repo": "kgretzky/pwndrop", "name": "pwndrop", "owner": "kgretzky", "url": "https://github.com/kgretzky/pwndrop", "id": "ce621bb022b0", "stars": 2270, "language": "JavaScript", "description": "Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.", "type": "tool", "pushedAt": "2023-02-25T05:08:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kuba Gretzky", "cardId": "8be8d7866769df75", "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kgretzky", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4", "type": "User" } ] }, { "repo": "salesforce/cloudsplaining", "name": "cloudsplaining", "owner": "salesforce", "url": "https://github.com/salesforce/cloudsplaining", "stars": 2238, "language": "JavaScript", "description": "Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kinnaird McQuade", "cardId": "443a4fef2a4c5c02", "avatar": "https://avatars.githubusercontent.com/u/453694?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5d7614e398cc", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 29, "contributors": [ { "name": "Ian Mckay", "cardId": "db14efc1267250d5", "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4", "login": "iann0036" } ], "pushedAt": "2026-07-16T04:55:08Z", "archived": false, "topContributors": [ { "login": "kmcquade", "c": 136, "avatar": "https://avatars.githubusercontent.com/u/3422255?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 134, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "actions-user", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/65916846?v=4", "type": "User" }, { "login": "gruebel", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/33207684?v=4", "type": "User" }, { "login": "pyup-bot", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/16239342?v=4", "type": "User" }, { "login": "bhendo", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1399390?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "jacobappleton-orbis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/57971533?v=4", "type": "User" }, { "login": "schosterbarak", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6033501?v=4", "type": "User" }, { "login": "verkaufer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/680527?v=4", "type": "User" }, { "login": "svc-scm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48930134?v=4", "type": "User" }, { "login": "reetasingh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/14129300?v=4", "type": "User" }, { "login": "jimjag", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/84076?v=4", "type": "User" }, { "login": "rohanshenoy96", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/37835789?v=4", "type": "User" }, { "login": "fruechel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18475564?v=4", "type": "User" }, { "login": "rvora123", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/86496472?v=4", "type": "User" }, { "login": "nitrocode", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7775707?v=4", "type": "User" }, { "login": "ismailyenigul", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2566232?v=4", "type": "User" }, { "login": "saikirankv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12250570?v=4", "type": "User" }, { "login": "njgibbon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13418031?v=4", "type": "User" }, { "login": "meghasfdc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47006762?v=4", "type": "User" }, { "login": "leonamagaya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/111906246?v=4", "type": "User" }, { "login": "jhutchings1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12853539?v=4", "type": "User" }, { "login": "iann0036", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4", "type": "User" }, { "login": "HenryHoggard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1208121?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "dgwhited", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4472883?v=4", "type": "User" }, { "login": "amityadav2026", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84844473?v=4", "type": "User" }, { "login": "acknosyn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8602276?v=4", "type": "User" } ] }, { "repo": "salesforce/policy_sentry", "name": "policy_sentry", "owner": "salesforce", "url": "https://github.com/salesforce/policy_sentry", "stars": 2158, "language": "Python", "description": "IAM Least Privilege Policy Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kinnaird McQuade", "cardId": "443a4fef2a4c5c02", "avatar": "https://avatars.githubusercontent.com/u/453694?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "be45a044a331", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 33, "contributors": [], "pushedAt": "2026-07-01T14:09:45Z", "archived": false, "topContributors": [ { "login": "kmcquade", "c": 356, "avatar": "https://avatars.githubusercontent.com/u/3422255?v=4", "type": "User" }, { "login": "gruebel", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/33207684?v=4", "type": "User" }, { "login": "actions-user", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/65916846?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 72, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "pyup-bot", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/16239342?v=4", "type": "User" }, { "login": "reetasingh", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/14129300?v=4", "type": "User" }, { "login": "dgubitosi", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/22625003?v=4", "type": "User" }, { "login": "mattyjones", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/672940?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 15, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "zscholl", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/8786230?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 14, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "saikirankv", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12250570?v=4", "type": "User" }, { "login": "knastase", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3866404?v=4", "type": "User" }, { "login": "agilgur5", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4970083?v=4", "type": "User" }, { "login": "raajheshkannaa", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/495042?v=4", "type": "User" }, { "login": "patricksanders", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1731876?v=4", "type": "User" }, { "login": "plaguna", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1691868?v=4", "type": "User" }, { "login": "jelledv", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22740839?v=4", "type": "User" }, { "login": "Alegrowin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2349171?v=4", "type": "User" }, { "login": "samchecc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42137682?v=4", "type": "User" }, { "login": "cclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "Scribbd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/942673?v=4", "type": "User" }, { "login": "fruechel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18475564?v=4", "type": "User" }, { "login": "gliptak", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50109?v=4", "type": "User" }, { "login": "jimjag", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84076?v=4", "type": "User" }, { "login": "KReg27", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6424102?v=4", "type": "User" }, { "login": "mbeacom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7315957?v=4", "type": "User" }, { "login": "matty-rose", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40691156?v=4", "type": "User" }, { "login": "mhristof", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24205462?v=4", "type": "User" }, { "login": "ryansb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/636610?v=4", "type": "User" } ] }, { "repo": "haccer/subjack", "name": "subjack", "owner": "haccer", "url": "https://github.com/haccer/subjack", "stars": 2102, "language": "Go", "description": "DNS Takeover tool written in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "xen", "cardId": "479f4225c9a55ee4", "avatar": "https://avatars.githubusercontent.com/u/22013186?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4d47e9bd0c29", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "login": "yassineaboukir" } ], "pushedAt": "2026-07-03T16:34:48Z", "archived": false, "topContributors": [ { "login": "haccer", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/22013186?v=4", "type": "User" }, { "login": "MadaraTech", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57807358?v=4", "type": "User" }, { "login": "zeknox", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2473269?v=4", "type": "User" }, { "login": "bp0lr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5620128?v=4", "type": "User" }, { "login": "yassineaboukir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "type": "User" } ] }, { "repo": "moxie0/sslstrip", "name": "sslstrip", "owner": "moxie0", "url": "https://github.com/moxie0/sslstrip", "id": "63ba0ec969a4", "stars": 2065, "language": "Python", "description": "A tool for exploiting Moxie Marlinspike's SSL \"stripping\" attack.", "type": "tool", "pushedAt": "2021-05-29T01:53:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Moxie Marlinspike", "cardId": "ad7abe976d53e5a1", "avatar": "https://avatars.githubusercontent.com/u/512439?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "moxie0", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/512439?v=4", "type": "User" } ] }, { "repo": "dafthack/domainpasswordspray", "name": "DomainPasswordSpray", "owner": "dafthack", "url": "https://github.com/dafthack/DomainPasswordSpray", "id": "9efe8b5398b9", "stars": 2064, "language": "PowerShell", "description": "DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFU", "type": "tool", "pushedAt": "2024-07-11T18:18:57Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "egypt", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/287967?v=4", "type": "User" }, { "login": "dafthack", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" }, { "login": "donovan-jasper", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/113406828?v=4", "type": "User" }, { "login": "fullmetalcache", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11990044?v=4", "type": "User" }, { "login": "BeanBagKing", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5495515?v=4", "type": "User" }, { "login": "IISResetMe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7413755?v=4", "type": "User" }, { "login": "pwnf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54254701?v=4", "type": "User" }, { "login": "f8al", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7221183?v=4", "type": "User" }, { "login": "nidem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4877511?v=4", "type": "User" }, { "login": "eWorkaholics", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54376366?v=4", "type": "User" }, { "login": "rileyzink", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5560841?v=4", "type": "User" } ] }, { "repo": "nahamsec/lazyrecon", "name": "lazyrecon", "owner": "nahamsec", "url": "https://github.com/nahamsec/lazyrecon", "id": "6291785287da", "stars": 2036, "language": "Shell", "description": "This script is intended to automate your reconnaissance process in an organized fashion", "type": "tool", "pushedAt": "2021-08-19T20:51:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ben Sadeghipour", "cardId": "a04c3b9e3a86a135", "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "plenumlab", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/39962738?v=4", "type": "User" }, { "login": "incredincomp", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/43874843?v=4", "type": "User" }, { "login": "nahamsec", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4", "type": "User" }, { "login": "eraymitrani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19798852?v=4", "type": "User" }, { "login": "x1mdev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22507577?v=4", "type": "User" } ] }, { "repo": "samyk/slipstream", "name": "slipstream", "owner": "samyk", "url": "https://github.com/samyk/slipstream", "id": "7d63df3b224f", "stars": 1982, "language": "Perl", "description": "NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewall, just by anyone on the victim's network visiting a website", "type": "tool", "pushedAt": "2023-01-14T21:39:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Samy Kamkar", "cardId": "4ce772bcaaa08c07", "avatar": "https://avatars.githubusercontent.com/u/411832?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "samyk", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/411832?v=4", "type": "User" }, { "login": "irsdl", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1798313?v=4", "type": "User" }, { "login": "codedbrain", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16005986?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "anisse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/786970?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" }, { "login": "paescuj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5363448?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/rustredops", "name": "rustredops", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/RustRedOps", "stars": 1889, "language": "Rust", "description": "Repository for advanced Red Team techniques focused on Rust", "type": "tool", "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e98fa976c27", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-12-29T16:05:49Z", "archived": false, "topContributors": [ { "login": "joaoviictorti", "c": 444, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" }, { "login": "fdx-xdf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/117912115?v=4", "type": "User" }, { "login": "M3str3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62236987?v=4", "type": "User" } ] }, { "repo": "cobbr/sharpsploit", "name": "SharpSploit", "owner": "cobbr", "url": "https://github.com/cobbr/SharpSploit", "id": "3b2284ee00d7", "stars": 1883, "language": "C#", "description": " SharpSploit is a .NET post-exploitation library written in C#", "type": "tool", "pushedAt": "2021-08-12T18:23:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" }, { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" } ], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 15, "topContributors": [ { "login": "cobbr", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "FuzzySecurity", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/10997340?v=4", "type": "User" }, { "login": "TheWover", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/17090738?v=4", "type": "User" }, { "login": "panagioto", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2184401?v=4", "type": "User" }, { "login": "001SPARTaN", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4355842?v=4", "type": "User" }, { "login": "awsmhacks", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2059326?v=4", "type": "User" }, { "login": "attl4s", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/35996395?v=4", "type": "User" }, { "login": "aus", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/549081?v=4", "type": "User" }, { "login": "salu90", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7814145?v=4", "type": "User" }, { "login": "shellfarmer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34570551?v=4", "type": "User" }, { "login": "checkymander", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26147220?v=4", "type": "User" }, { "login": "tocohot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/87429328?v=4", "type": "User" }, { "login": "DrDinosaur", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4646697?v=4", "type": "User" }, { "login": "daddycocoaman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/powermad", "name": "powermad", "owner": "kevin-robertson", "url": "https://github.com/Kevin-Robertson/Powermad", "stars": 1492, "language": "PowerShell", "description": "PowerShell MachineAccountQuota and DNS exploit tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "96716c4030b4", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 5, "mentionDistinct": 6, "contributorCount": 3, "contributors": [], "pushedAt": "2023-01-11T00:48:35Z", "archived": false, "topContributors": [ { "login": "Kevin-Robertson", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "0xe7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13423848?v=4", "type": "User" }, { "login": "kontr0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55395652?v=4", "type": "User" } ] }, { "repo": "dafthack/msolspray", "name": "MSOLSpray", "owner": "dafthack", "url": "https://github.com/dafthack/MSOLSpray", "id": "61ff18b469cc", "stars": 1092, "language": "PowerShell", "description": "A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if a user cred is valid, if MFA is enabled on the account, if a tenant doesn't exist, if a user doesn't exist, if t", "type": "tool", "pushedAt": "2024-03-19T11:03:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "dafthack", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" } ] }, { "repo": "kyleavery/aceldr", "name": "aceldr", "owner": "kyleavery", "url": "https://github.com/kyleavery/AceLdr", "stars": 1029, "language": "C", "description": "Cobalt Strike UDRL for memory scanner evasion.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "72bb0cee4ed2", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 2, "contributors": [ { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" } ], "pushedAt": "2024-06-04T16:45:42Z", "archived": false, "topContributors": [ { "login": "kyleavery", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" }, { "login": "CCob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "iangcarroll/cookiemonster", "name": "cookiemonster", "owner": "iangcarroll", "url": "https://github.com/iangcarroll/cookiemonster", "id": "1dd0f07a59cf", "stars": 980, "language": "Go", "description": "🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.", "type": "tool", "pushedAt": "2025-01-10T01:30:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ian Carroll", "cardId": "f0eb8ec7821e1d26", "avatar": "https://avatars.githubusercontent.com/u/1280719?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" }, { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "adoptionOperators": 1, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "iangcarroll", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/1280719?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "DEMON1A", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54229853?v=4", "type": "User" }, { "login": "nunofranciscomoreira", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24529260?v=4", "type": "User" }, { "login": "random-robbie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "akues-an", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/132238582?v=4", "type": "User" } ] }, { "repo": "antoniococo/juicypotatong", "name": "juicypotatong", "owner": "antoniococo", "url": "https://github.com/antonioCoco/JuicyPotatoNG", "stars": 964, "language": "C++", "description": "Another Windows Local Privilege Escalation from Service Account to System ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cf39bd8935e6", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 2, "contributors": [ { "name": "Andrea Pierini", "cardId": "1835b0723097dd21", "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "login": "decoder-it" } ], "pushedAt": "2022-11-12T01:48:39Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "decoder-it", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35346881?v=4", "type": "User" } ] }, { "repo": "viralmaniar/smwyg-show-me-what-you-got", "name": "smwyg-show-me-what-you-got", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/SMWYG-Show-Me-What-You-Got", "stars": 566, "language": "Python", "description": "This tool allows you to perform OSINT and reconnaissance on an organisation or an individual. It allows one to search 1.4 Billion clear text credentials which was dumped as part of BreachCompilation l", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5ec97a5cd2f8", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-12-13T22:34:21Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "jackullrich/shellcodestdio", "name": "shellcodestdio", "owner": "jackullrich", "url": "https://github.com/jackullrich/ShellcodeStdio", "stars": 532, "language": "C++", "description": "An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2513c750ef24", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-07-02T19:40:53Z", "archived": false, "topContributors": [ { "login": "jackullrich", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" }, { "login": "Gorian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1012176?v=4", "type": "User" } ] }, { "repo": "k0keoyo/kdriver-fuzzer", "name": "kDriver-Fuzzer", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/kDriver-Fuzzer", "id": "4e20f1b2029d", "stars": 480, "language": "C", "description": "", "type": "tool", "pushedAt": "2018-03-31T12:35:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "k0keoyo", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" }, { "login": "flynn16", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/61998756?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/crystal-kit", "name": "crystal-kit", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/Crystal-Kit", "stars": 478, "language": "C", "description": "Evasion kit for Cobalt Strike", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "33f431302925", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-06-05T17:27:50Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "hunterino-sec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/41126746?v=4", "type": "User" }, { "login": "shogunlab", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24401596?v=4", "type": "User" }, { "login": "funnybananas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83034180?v=4", "type": "User" }, { "login": "gsmith257-cyber", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55564824?v=4", "type": "User" } ] }, { "repo": "itm4n/perfusion", "name": "perfusion", "owner": "itm4n", "url": "https://github.com/itm4n/Perfusion", "stars": 427, "language": "C++", "description": "Exploit for the RpcEptMapper registry key permissions vulnerability (Windows 7 / 2088R2 / 8 / 2012)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "952a3f6bef6b", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-22T16:20:32Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "itm4n/usodllloader", "name": "UsoDllLoader", "owner": "itm4n", "url": "https://github.com/itm4n/UsoDllLoader", "id": "19075331fda0", "stars": 408, "language": "C++", "description": "Windows - Weaponizing privileged file writes with the Update Session Orchestrator service", "type": "tool", "pushedAt": "2020-06-06T11:05:12Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "itm4n", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "logangoins/cable", "name": "Cable", "owner": "logangoins", "url": "https://github.com/logangoins/Cable", "id": "eb22dfaff2ed", "stars": 401, "language": "C#", "description": ".NET post-exploitation toolkit for Active Directory reconnaissance and exploitation", "type": "tool", "pushedAt": "2025-07-23T20:46:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "logangoins", "c": 189, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" } ] }, { "repo": "tyranid/poc-gtfo-13-poc", "name": "poc-gtfo-13-poc", "owner": "tyranid", "url": "https://github.com/tyranid/poc-gtfo-13-poc", "stars": 11, "language": "C++", "description": "This is the code to accompany the article \"How Slow Can You Go?\" from PoC||GTFO #13", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dd676dea5db8", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-14T23:16:58Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "zyn3rgy/ecp_slap", "name": "ecp_slap", "owner": "zyn3rgy", "url": "https://github.com/zyn3rgy/ecp_slap", "stars": 11, "language": "Go", "description": "CVE-2020-0688 PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Powers", "cardId": "080005eb8cc17cd7", "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a12b8961f318", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-19T21:09:35Z", "archived": false, "topContributors": [ { "login": "zyn3rgy", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/73311948?v=4", "type": "User" } ] }, { "repo": "spaceraccoon/detect-cve-2024-4367", "name": "detect-cve-2024-4367", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/detect-cve-2024-4367", "stars": 11, "language": "YARA", "description": "YARA detection rule for CVE-2024-4367 arbitrary javascript execution in PDF.js", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ccae5e26a90", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-05-27T03:06:09Z", "archived": false, "topContributors": [] }, { "repo": "spaceraccoon/serverless-recon-example", "name": "serverless-recon-example", "owner": "spaceraccoon", "url": "https://github.com/spaceraccoon/serverless-recon-example", "stars": 11, "language": "Go", "description": "Example of a serverless web reconaissance workflow's AWS architecture.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eugene Lim", "cardId": "40b632640e6d82f3", "avatar": "https://avatars.githubusercontent.com/u/18413849?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ef51cc0c5cdf", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2023-02-25T00:36:17Z", "archived": false, "topContributors": [] }, { "repo": "cyb3rc3lt/crackmapexec-modules", "name": "crackmapexec-modules", "owner": "cyb3rc3lt", "url": "https://github.com/Cyb3rC3lt/CrackMapExec-Modules", "stars": 11, "language": "Python", "description": "Some CME modules I created to help with AD enumeration & exploitation", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Kennedy", "cardId": "52309371b01b64e3", "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "56838577eece", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-11T08:20:21Z", "archived": false, "topContributors": [ { "login": "Cyb3rC3lt", "c": 233, "avatar": "https://avatars.githubusercontent.com/u/33097451?v=4", "type": "User" } ] }, { "repo": "garrettfoster13/notsosmartdeploy", "name": "notsosmartdeploy", "owner": "garrettfoster13", "url": "https://github.com/garrettfoster13/NotSoSmartDeploy", "stars": 11, "language": "Python", "description": "POC to decrypt SmartDeploy encrypted credentials", "type": "tool", "lanes": [ "2" ], "author": { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a72d11cb7e0d", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-13T15:53:13Z", "archived": false, "topContributors": [ { "login": "garrettfoster13", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" } ] }, { "repo": "tw1sm/tscheduler", "name": "tscheduler", "owner": "tw1sm", "url": "https://github.com/Tw1sm/tscheduler", "stars": 10, "language": "Python", "description": "Use Impacket's MS-TSCH implementation to remotely manage scheduled tasks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d1380678410d", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-14T17:17:39Z", "archived": false, "topContributors": [ { "login": "Tw1sm", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" } ] }, { "repo": "tyranid/canape-ssl-mitm-osx", "name": "canape-ssl-mitm-osx", "owner": "tyranid", "url": "https://github.com/tyranid/canape-ssl-mitm-osx", "stars": 10, "language": "C#", "description": "A simple CANAPE extension to exploit iOS/OSX SSL vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a3d790622b61", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-02-26T23:17:46Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "kingofthenops/lnkgenerator-bof", "name": "lnkgenerator-bof", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/LNKgenerator-BOF", "stars": 10, "language": "C", "description": "BOF for creating LNKs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a24bb5584924", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-29T21:25:30Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "decalage2/oletools_dll", "name": "oletools_dll", "owner": "decalage2", "url": "https://github.com/decalage2/oletools_dll", "stars": 10, "language": "C", "description": "A DLL to run some oletools functions from any language", "type": "tool", "lanes": [ "2" ], "author": { "name": "Philippe Lagadec", "cardId": "2f01d6d832e70243", "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "92c83cda16e8", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-24T22:26:48Z", "archived": false, "topContributors": [ { "login": "decalage2", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4", "type": "User" } ] }, { "repo": "chichou/mistune", "name": "mistune", "owner": "chichou", "url": "https://github.com/ChiChou/mistune", "stars": 10, "language": "HTML", "description": "Browser based rce for iOS <= 14.3", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ebd62215816d", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-26T11:04:13Z", "archived": false, "topContributors": [ { "login": "ChiChou", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" } ] }, { "repo": "michaelgrafnetter/entraauthpolicyhound", "name": "entraauthpolicyhound", "owner": "michaelgrafnetter", "url": "https://github.com/MichaelGrafnetter/EntraAuthPolicyHound", "stars": 10, "language": "PowerShell", "description": "BloodHound OpenGraph Entra ID Authentication Policy Data Collector", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Grafnetter", "cardId": "ca48376ab8cc6ffd", "avatar": "https://avatars.githubusercontent.com/u/8986376?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ace0d02b683b", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-29T15:32:02Z", "archived": false, "topContributors": [ { "login": "MichaelGrafnetter", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/8986376?v=4", "type": "User" } ] }, { "repo": "curi0usjack/custompayload", "name": "custompayload", "owner": "curi0usjack", "url": "https://github.com/curi0usJack/custompayload", "stars": 9, "language": "C#", "description": "Put output from msfvenom into custom c# project for AV evasion", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "150a5bf9117e", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-03-29T16:32:40Z", "archived": false, "topContributors": [] }, { "repo": "invictus-ir/cobaltstrike", "name": "cobaltstrike", "owner": "invictus-ir", "url": "https://github.com/invictus-ir/cobaltstrike", "stars": 9, "language": null, "description": "Collection of resources related to Cobalt Strike investigations", "type": "tool", "lanes": [ "2" ], "author": { "name": "Korstiaan Stam", "cardId": "8dae1513142ed9db", "avatar": "https://avatars.githubusercontent.com/u/85489828?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e96860416b5f", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 13, "contributorCount": 0, "contributors": [], "pushedAt": "2022-06-07T12:39:54Z", "archived": false, "topContributors": [] }, { "repo": "theevilbit/shellcode", "name": "shellcode", "owner": "theevilbit", "url": "https://github.com/theevilbit/shellcode", "stars": 8, "language": "Assembly", "description": "Some random shellcodes I created", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d8258571c8d7", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-09-19T05:24:46Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "klezvirus/deser-node", "name": "deser-node", "owner": "klezvirus", "url": "https://github.com/klezVirus/deser-node", "stars": 8, "language": "JavaScript", "description": "NodeJS Deserialization Payload Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ccd2f083aa9f", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-08T06:12:47Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "frichetten/meltdown-spectre-poc", "name": "meltdown-spectre-poc", "owner": "frichetten", "url": "https://github.com/Frichetten/meltdown-spectre-poc", "stars": 8, "language": "C", "description": "This is a combination of several different projects. It is intended to understand what the Meltdown and Spectre exploits are capable of.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Frichette", "cardId": "7beb2b9170e5b0f7", "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cbbb9c1b4378", "score": 36, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-18T15:32:35Z", "archived": false, "topContributors": [ { "login": "Frichetten", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4", "type": "User" } ] }, { "repo": "qkaiser/networker-pocs", "name": "networker-pocs", "owner": "qkaiser", "url": "https://github.com/qkaiser/networker-pocs", "stars": 6, "language": "Python", "description": "A bunch of proof-of-concepts for Dell EMC Networker 0days.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4" }, "referencedBy": [ { "url": "https://quentinkaiser.be/security/2021/06/12/emc-networker-rce/", "title": "So Many Ways to Own Dell EMC Networker", "person": "Quentin Kaiser" } ], "referencedCount": 1, "id": "6bb718f8fd18", "score": 35, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-12T06:42:48Z", "archived": false, "topContributors": [ { "login": "qkaiser", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" } ] }, { "repo": "iann0036/cfn-types", "name": "cfn-types", "owner": "iann0036", "url": "https://github.com/iann0036/cfn-types", "stars": 5, "language": "Java", "description": "Example CloudFormation Custom Resource Types", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Ian Mckay", "cardId": "db14efc1267250d5", "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4" }, "referencedBy": [ { "url": "https://onecloudplease.com/blog/aws-cloudformation-custom-resource-types-a-walkthrough", "title": "AWS CloudFormation Custom Resource Types: A Walkthrough – One Cloud Please", "person": "Ian Mckay" } ], "referencedCount": 1, "id": "f370040fe458", "score": 35, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-07-15T21:07:58Z", "archived": false, "topContributors": [ { "login": "iann0036", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/4401744?v=4", "type": "User" }, { "login": "spg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/892367?v=4", "type": "User" } ] }, { "repo": "robertdavidgraham/masscan", "name": "masscan", "owner": "robertdavidgraham", "url": "https://github.com/robertdavidgraham/masscan", "id": "b5946f4fe875", "stars": 25869, "language": "C", "description": "TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.", "type": "tool", "pushedAt": "2026-04-23T20:34:38Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "robertdavidgraham", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "David Maynor", "cardId": "9ec169a65f91f944", "avatar": "https://avatars.githubusercontent.com/u/1238770?v=4", "login": "dmaynor" } ], "adoptionOperators": 4, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 70, "topContributors": [ { "login": "robertdavidgraham", "c": 664, "avatar": "https://avatars.githubusercontent.com/u/3814757?v=4", "type": "User" }, { "login": "p-l-", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/5064814?v=4", "type": "User" }, { "login": "Frky", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3105926?v=4", "type": "User" }, { "login": "mzpqnxow", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/8016228?v=4", "type": "User" }, { "login": "postmodern", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/12671?v=4", "type": "User" }, { "login": "dmaynor", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1238770?v=4", "type": "User" }, { "login": "zeridon", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5081863?v=4", "type": "User" }, { "login": "kicdu", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1025971?v=4", "type": "User" }, { "login": "rafa-br34", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/111343658?v=4", "type": "User" }, { "login": "kajnielsen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/33437471?v=4", "type": "User" }, { "login": "gpotter2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10530980?v=4", "type": "User" }, { "login": "klondi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2823369?v=4", "type": "User" }, { "login": "liudf0716", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1182593?v=4", "type": "User" }, { "login": "hrbrmstr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/509878?v=4", "type": "User" }, { "login": "jedisct1", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/124872?v=4", "type": "User" }, { "login": "taguchi-ch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2528499?v=4", "type": "User" }, { "login": "adfnekc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24975655?v=4", "type": "User" }, { "login": "WojciechMigda", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3889167?v=4", "type": "User" }, { "login": "tsubery", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1638049?v=4", "type": "User" }, { "login": "cicku", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/686438?v=4", "type": "User" }, { "login": "navarroaxel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1536740?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "MrPumo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6469426?v=4", "type": "User" }, { "login": "Nightsuki", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9131047?v=4", "type": "User" }, { "login": "pranjalkole", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61913668?v=4", "type": "User" }, { "login": "reinerh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3106950?v=4", "type": "User" }, { "login": "trentwiles", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59586759?v=4", "type": "User" }, { "login": "ste", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8573168?v=4", "type": "User" }, { "login": "sthen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1006726?v=4", "type": "User" }, { "login": "sudeepta-bhuyan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9820674?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/subfinder", "name": "subfinder", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/subfinder", "id": "a172b483d3ef", "stars": 14031, "language": "Go", "description": "Fast passive subdomain enumeration tool.", "type": "tool", "pushedAt": "2026-07-10T12:24:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" }, { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "login": "codingo" }, { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" }, { "name": "Himanshu Kumar Das", "cardId": "9ade21341bd3052f", "avatar": "https://avatars.githubusercontent.com/u/1238723?v=4", "login": "himanshudas" }, { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "login": "yassineaboukir" }, { "name": "Ian Carroll", "cardId": "f0eb8ec7821e1d26", "avatar": "https://avatars.githubusercontent.com/u/1280719?v=4", "login": "iangcarroll" } ], "adoptionOperators": 2, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "dependabot[bot]", "c": 700, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Ice3man543", "c": 340, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "ehsandeep", "c": 260, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "Mzack9999", "c": 180, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 162, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "vzamanillo", "c": 135, "avatar": "https://avatars.githubusercontent.com/u/10209695?v=4", "type": "User" }, { "login": "codingo", "c": 116, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "picatz", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/14850816?v=4", "type": "User" }, { "login": "x-stp", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/205847092?v=4", "type": "User" }, { "login": "LuitelSamikshya", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/85764322?v=4", "type": "User" }, { "login": "0x4500", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/146465575?v=4", "type": "User" }, { "login": "mikelolasagasti", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/773148?v=4", "type": "User" }, { "login": "tarunKoyalwar", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/45962551?v=4", "type": "User" }, { "login": "akhil-reni", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/36848653?v=4", "type": "User" }, { "login": "CharlesWong", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1645196?v=4", "type": "User" }, { "login": "M09Ic", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/29176200?v=4", "type": "User" }, { "login": "maldevel", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3490557?v=4", "type": "User" }, { "login": "ehrishirajsharma", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/35542790?v=4", "type": "User" }, { "login": "nohehf", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/64989428?v=4", "type": "User" }, { "login": "knakul853", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/32031946?v=4", "type": "User" }, { "login": "PontusLindblom", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/38756643?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "nukunga", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/145279280?v=4", "type": "User" }, { "login": "ShubhamRasal", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/45902122?v=4", "type": "User" }, { "login": "Jigardjain", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/168074211?v=4", "type": "User" }, { "login": "sepehrdaddev", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26747519?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "himanshudas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1238723?v=4", "type": "User" }, { "login": "chushuai", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5875458?v=4", "type": "User" } ] }, { "repo": "niklasb/libc-database", "name": "libc-database", "owner": "niklasb", "url": "https://github.com/niklasb/libc-database", "id": "8670475566b3", "stars": 1867, "language": "Shell", "description": "Build a database of libc offsets to simplify exploitation", "type": "tool", "pushedAt": "2024-10-23T16:44:32Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Niklas Baumstark", "cardId": "e7e56ae52dd8ba57", "avatar": "https://avatars.githubusercontent.com/u/94819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "niklasb", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/94819?v=4", "type": "User" }, { "login": "ajabep", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6231382?v=4", "type": "User" }, { "login": "peace-maker", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1635147?v=4", "type": "User" }, { "login": "152334H", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/54623771?v=4", "type": "User" }, { "login": "blukat29", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5933330?v=4", "type": "User" }, { "login": "MrQubo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16545322?v=4", "type": "User" }, { "login": "mephi42", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/662616?v=4", "type": "User" }, { "login": "msm595", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/395851?v=4", "type": "User" }, { "login": "asokol123", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46816346?v=4", "type": "User" }, { "login": "matrix1001", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32097922?v=4", "type": "User" }, { "login": "NyaMisty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5344431?v=4", "type": "User" }, { "login": "ZebruhX", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/109268697?v=4", "type": "User" }, { "login": "whh4git", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44186125?v=4", "type": "User" } ] }, { "repo": "ccob/sweetpotato", "name": "sweetpotato", "owner": "ccob", "url": "https://github.com/CCob/SweetPotato", "stars": 1830, "language": "C#", "description": "Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b583f2ba836", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 3, "contributors": [ { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" } ], "pushedAt": "2024-09-04T17:09:30Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "bugch3ck", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" }, { "login": "H1d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10372856?v=4", "type": "User" } ] }, { "repo": "danmcinerney/xsscrapy", "name": "xsscrapy", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/xsscrapy", "stars": 1743, "language": "Python", "description": "XSS spider - 66/66 wavsep XSS detected", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71ff9afefbe9", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [ { "name": "David Dworken", "cardId": "c09dd6fa1b9718a6", "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "login": "ddworken" } ], "pushedAt": "2024-06-13T06:17:02Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" }, { "login": "ddworken", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "type": "User" }, { "login": "Deadpool2000", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/32305505?v=4", "type": "User" }, { "login": "dmytrokyrychuk", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/699961?v=4", "type": "User" }, { "login": "chadillac", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/197216?v=4", "type": "User" }, { "login": "insecrez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47289822?v=4", "type": "User" }, { "login": "hslatman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1219780?v=4", "type": "User" }, { "login": "yasoob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3696393?v=4", "type": "User" }, { "login": "tomberek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/178444?v=4", "type": "User" }, { "login": "shelld3v", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" } ] }, { "repo": "dafthack/mfasweep", "name": "MFASweep", "owner": "dafthack", "url": "https://github.com/dafthack/MFASweep", "id": "5afcbec9b4cd", "stars": 1685, "language": "PowerShell", "description": "A tool for checking if MFA is enabled on multiple Microsoft Services", "type": "tool", "pushedAt": "2026-04-13T17:19:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "dafthack", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" }, { "login": "AntonWilloughby", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/116081795?v=4", "type": "User" }, { "login": "Stean", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1040696?v=4", "type": "User" }, { "login": "bryanmcnulty", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/99415703?v=4", "type": "User" }, { "login": "k3nundrum", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47409600?v=4", "type": "User" }, { "login": "njmulsqb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47940898?v=4", "type": "User" }, { "login": "pipinstall89", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59775828?v=4", "type": "User" } ] }, { "repo": "utkusen/urlhunter", "name": "urlhunter", "owner": "utkusen", "url": "https://github.com/utkusen/urlhunter", "stars": 1684, "language": "Go", "description": "a recon tool that allows searching on URLs that are exposed via shortener services", "type": "tool", "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "987d5dbb00a9", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-01-23T15:48:12Z", "archived": false, "topContributors": [ { "login": "utkusen", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" }, { "login": "rzhade3", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/21364815?v=4", "type": "User" }, { "login": "ItsIgnacioPortal", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/46269721?v=4", "type": "User" } ] }, { "repo": "jstrosch/malware-samples", "name": "malware-samples", "owner": "jstrosch", "url": "https://github.com/jstrosch/malware-samples", "stars": 1653, "language": "HTML", "description": "Malware samples, analysis exercises and other interesting resources.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Stroschein", "cardId": "ca3f07d87861323c", "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb8beb7f64a5", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-13T17:39:44Z", "archived": false, "topContributors": [ { "login": "jstrosch", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4", "type": "User" } ] }, { "repo": "johnhammond/msdt-follina", "name": "msdt-follina", "owner": "johnhammond", "url": "https://github.com/JohnHammond/msdt-follina", "stars": 1632, "language": "Python", "description": "Codebase to generate an msdt-follina payload", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "97ba847f217d", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-08T15:47:38Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "0xdea/frida-scripts", "name": "frida-scripts", "owner": "0xdea", "url": "https://github.com/0xdea/frida-scripts", "id": "3e47158afbb1", "stars": 1631, "language": "JavaScript", "description": "A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.", "type": "tool", "pushedAt": "2026-03-19T16:43:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "0xdea", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" }, { "login": "mustafairan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4804603?v=4", "type": "User" } ] }, { "repo": "angea/pocorgtfo", "name": "pocorgtfo", "owner": "angea", "url": "https://github.com/angea/pocorgtfo", "stars": 1586, "language": "TeX", "description": "a \"Proof of Concept or GTFO\" mirror with an extensive index with also whole issues or individual articles as clean PDFs.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Niek Timmers", "cardId": "1b58ccc39599844f", "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8b0e1d96b17d", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-11T19:59:00Z", "archived": false, "topContributors": [ { "login": "angea", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4", "type": "User" } ] }, { "repo": "mubix/post-exploitation", "name": "post-exploitation", "owner": "mubix", "url": "https://github.com/mubix/post-exploitation", "id": "3c5aebde9231", "stars": 1586, "language": "C", "description": "Post Exploitation Collection", "type": "tool", "pushedAt": "2020-05-01T17:31:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mubix", "c": 88, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "bonsaiviking", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/768278?v=4", "type": "User" }, { "login": "breakersall", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3173961?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" } ] }, { "repo": "xairy/kernel-exploits", "name": "kernel-exploits", "owner": "xairy", "url": "https://github.com/xairy/kernel-exploits", "stars": 1583, "language": "C", "description": "My proof-of-concept exploits for the Linux kernel", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrey Konovalov", "cardId": "248dd96652a047b6", "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4ec5877dce7d", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-11T15:48:09Z", "archived": false, "topContributors": [ { "login": "xairy", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "type": "User" } ] }, { "repo": "maddiestone/androidappre", "name": "AndroidAppRE", "owner": "maddiestone", "url": "https://github.com/maddiestone/AndroidAppRE", "id": "452c823e229c", "stars": 1553, "language": null, "description": "Android App Reverse Engineering Workshop", "type": "tool", "pushedAt": "2024-04-10T11:25:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Maddie Stone", "cardId": "426e7f08da8edb5f", "avatar": "https://avatars.githubusercontent.com/u/684899?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "maddiestone", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/684899?v=4", "type": "User" }, { "login": "SpellarBot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50248246?v=4", "type": "User" }, { "login": "htrgouvea", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10741284?v=4", "type": "User" }, { "login": "Liblor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4940804?v=4", "type": "User" }, { "login": "michaelmior", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82501?v=4", "type": "User" }, { "login": "Ayrx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1937160?v=4", "type": "User" } ] }, { "repo": "corkami/pocs", "name": "pocs", "owner": "corkami", "url": "https://github.com/corkami/pocs", "id": "ed744398876b", "stars": 1553, "language": "Assembly", "description": "Proof of Concepts (PE, PDF...)", "type": "tool", "pushedAt": "2024-12-22T21:19:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ange Albertini", "cardId": "fd76f4e4fe0c68ad", "avatar": "https://pbs.twimg.com/profile_images/1844256597209485318/dhhelsYw_400x400.jpg" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Niek Timmers", "cardId": "1b58ccc39599844f", "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4", "login": "angea" } ], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "angea", "c": 252, "avatar": "https://avatars.githubusercontent.com/u/5624411?v=4", "type": "User" }, { "login": "doegox", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/60773?v=4", "type": "User" } ] }, { "repo": "gentilkiwi/kekeo", "name": "kekeo", "owner": "gentilkiwi", "url": "https://github.com/gentilkiwi/kekeo", "stars": 1524, "language": "C", "description": "A little toolbox to play with Microsoft Kerberos in C", "type": "tool", "lanes": [ "2" ], "author": { "name": "🥝🏳️‍🌈 Benjamin Delpy", "cardId": "f3e89338be6de6f6", "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c1bdf0803c3", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 4, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-14T10:56:48Z", "archived": false, "topContributors": [ { "login": "gentilkiwi", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4", "type": "User" } ] }, { "repo": "xairy/vmware-exploitation", "name": "vmware-exploitation", "owner": "xairy", "url": "https://github.com/xairy/vmware-exploitation", "id": "e4fdd0021a51", "stars": 1494, "language": null, "description": "A collection of links related to VMware escape exploits", "type": "tool", "pushedAt": "2024-09-04T14:49:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrey Konovalov", "cardId": "248dd96652a047b6", "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "xairy", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "type": "User" }, { "login": "fdiskyou", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/80118495?v=4", "type": "User" }, { "login": "DanisJiang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43723722?v=4", "type": "User" }, { "login": "shutupandhax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/107097348?v=4", "type": "User" } ] }, { "repo": "msanft/cve-2025-55182", "name": "cve-2025-55182", "owner": "msanft", "url": "https://github.com/msanft/CVE-2025-55182", "stars": 1428, "language": "Python", "description": "Explanation and full RCE PoC for CVE-2025-55182", "type": "tool", "lanes": [ "2" ], "author": { "name": "Moritz Sanft", "cardId": "43b456181ff8a778", "avatar": "https://avatars.githubusercontent.com/u/58110325?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "98b559c1171d", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-08T13:51:04Z", "archived": false, "topContributors": [ { "login": "msanft", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/58110325?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/pentestly", "name": "pentestly", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/pentestly", "id": "e877dce7c06e", "stars": 722, "language": "Python", "description": "Python and Powershell internal penetration testing framework", "type": "tool", "pushedAt": "2016-02-22T14:01:00Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "login": "shipcod3" }, { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "login": "qkaiser" } ], "adoptionOperators": 85, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "lanmaster53", "c": 1105, "avatar": "https://avatars.githubusercontent.com/u/2516395?v=4", "type": "User" }, { "login": "WebBreacher", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/2359093?v=4", "type": "User" }, { "login": "shipcod3", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" }, { "login": "thrapt2", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/6548920?v=4", "type": "User" }, { "login": "ctfhacker", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/7690115?v=4", "type": "User" }, { "login": "ethack", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/1696711?v=4", "type": "User" }, { "login": "qkaiser", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" }, { "login": "fork-while-fork", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/962226?v=4", "type": "User" }, { "login": "dewoodruff", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/897202?v=4", "type": "User" }, { "login": "Lost4Now", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/7550560?v=4", "type": "User" }, { "login": "dandare100", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5639208?v=4", "type": "User" }, { "login": "bcoles", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "zaeyx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3677067?v=4", "type": "User" }, { "login": "averagesecurityguy", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1117951?v=4", "type": "User" }, { "login": "Scarbaci", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3945109?v=4", "type": "User" }, { "login": "cdves", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/198975805?v=4", "type": "User" } ] }, { "repo": "reyammer/shellnoob", "name": "shellnoob", "owner": "reyammer", "url": "https://github.com/reyammer/shellnoob", "stars": 693, "language": "Python", "description": "A shellcode writing toolkit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yanick Fratantonio", "cardId": "5e6311184bcc0981", "avatar": "https://avatars.githubusercontent.com/u/1136172?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d02b048326b", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 4, "contributors": [], "pushedAt": "2025-06-30T06:10:38Z", "archived": false, "topContributors": [ { "login": "reyammer", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1136172?v=4", "type": "User" }, { "login": "anthraxx", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/203012?v=4", "type": "User" }, { "login": "ewilded", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1158719?v=4", "type": "User" }, { "login": "ret2libc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/562321?v=4", "type": "User" } ] }, { "repo": "stealthsploit/oneruletorulethemstill", "name": "oneruletorulethemstill", "owner": "stealthsploit", "url": "https://github.com/stealthsploit/OneRuleToRuleThemStill", "stars": 646, "language": null, "description": "A revamped and updated version of my original OneRuleToRuleThemAll hashcat rule", "type": "tool", "lanes": [ "2" ], "author": { "name": "Will Hunt", "cardId": "0a21832ba2dcad80", "avatar": "https://avatars.githubusercontent.com/u/26301152?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1b9f892f5cfe", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2024-10-16T10:35:59Z", "archived": false, "topContributors": [ { "login": "stealthsploit", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/26301152?v=4", "type": "User" }, { "login": "0xVavaldi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/33965786?v=4", "type": "User" } ] }, { "repo": "ccob/lsarelayx", "name": "lsarelayx", "owner": "ccob", "url": "https://github.com/CCob/lsarelayx", "stars": 582, "language": "C++", "description": "NTLM relaying for Windows made easy", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9734b3edab9", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-25T23:15:33Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "vanhoefm/macstealer", "name": "macstealer", "owner": "vanhoefm", "url": "https://github.com/vanhoefm/macstealer", "stars": 551, "language": "C", "description": "MacStealer: Wi-Fi Client Isolation Bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mathy Vanhoef", "cardId": "502b97785f3c5b6d", "avatar": "https://avatars.githubusercontent.com/u/637995?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9033b69ffc3c", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 100, "contributors": [], "pushedAt": "2025-12-17T17:25:12Z", "archived": false, "topContributors": [ { "login": "jmalinen", "c": 9631, "avatar": "https://avatars.githubusercontent.com/u/5983923?v=4", "type": "User" }, { "login": "jmberg-intel", "c": 320, "avatar": "https://avatars.githubusercontent.com/u/96500427?v=4", "type": "User" }, { "login": "ilanpeer2", "c": 238, "avatar": "https://avatars.githubusercontent.com/u/2414718?v=4", "type": "User" }, { "login": "masap", "c": 218, "avatar": "https://avatars.githubusercontent.com/u/1505016?v=4", "type": "User" }, { "login": "aotchere", "c": 135, "avatar": "https://avatars.githubusercontent.com/u/15964803?v=4", "type": "User" }, { "login": "AviStern", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/15908503?v=4", "type": "User" }, { "login": "dziedjan", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/4160575?v=4", "type": "User" }, { "login": "michael-dev", "c": 110, "avatar": "https://avatars.githubusercontent.com/u/1722555?v=4", "type": "User" }, { "login": "greearb", "c": 101, "avatar": "https://avatars.githubusercontent.com/u/292522?v=4", "type": "User" }, { "login": "usdutt", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/51772396?v=4", "type": "User" }, { "login": "qsn", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/4687470?v=4", "type": "User" }, { "login": "elp", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/861116?v=4", "type": "User" }, { "login": "ariknem", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/481945?v=4", "type": "User" }, { "login": "blogic", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/144194?v=4", "type": "User" }, { "login": "vamsikrishna-593", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/263515584?v=4", "type": "User" }, { "login": "DavidSpinadel", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/15218124?v=4", "type": "User" }, { "login": "dcbw", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/10926354?v=4", "type": "User" }, { "login": "mstepano", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/15964853?v=4", "type": "User" }, { "login": "januszdziedzic", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/2692230?v=4", "type": "User" }, { "login": "alexw65500", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/34350619?v=4", "type": "User" }, { "login": "jmberg", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/5159728?v=4", "type": "User" }, { "login": "vanhoefm", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/637995?v=4", "type": "User" }, { "login": "rsmarples", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/6079078?v=4", "type": "User" }, { "login": "lkundrak", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/92695?v=4", "type": "User" }, { "login": "SparkiDev", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/17982558?v=4", "type": "User" }, { "login": "akholaif", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/5952178?v=4", "type": "User" }, { "login": "helmut-jacob", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/3501725?v=4", "type": "User" }, { "login": "wsowa", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/108818?v=4", "type": "User" }, { "login": "bcopeland", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/199836?v=4", "type": "User" }, { "login": "julek-wolfssl", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/49391366?v=4", "type": "User" } ] }, { "repo": "bagelbyt3s/ludushound", "name": "ludushound", "owner": "bagelbyt3s", "url": "https://github.com/bagelByt3s/LudusHound", "stars": 380, "language": "PowerShell", "description": "LudusHound is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via Ludus for controlled testing.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Beyviel David", "cardId": "1a263eb5b2396f88", "avatar": "https://avatars.githubusercontent.com/u/90155329?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fbca38519a5b", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-09-03T23:40:12Z", "archived": false, "topContributors": [ { "login": "bagelByt3s", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/90155329?v=4", "type": "User" }, { "login": "NetPenguins", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20445056?v=4", "type": "User" } ] }, { "repo": "devanshbatham/vulnerabilities-unmasked", "name": "Vulnerabilities-Unmasked", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/Vulnerabilities-Unmasked", "id": "6fbb7b5f1067", "stars": 372, "language": null, "description": "This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!", "type": "tool", "pushedAt": "2023-08-17T08:45:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "devanshbatham", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" } ] }, { "repo": "two06/inception", "name": "inception", "owner": "two06", "url": "https://github.com/two06/Inception", "stars": 370, "language": "Python", "description": "Provides In-memory compilation and reflective loading of C# apps for AV evasion.", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Williams", "cardId": "65321ddf2274b614", "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b8e20ffeb1b1", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-23T17:11:53Z", "archived": false, "topContributors": [ { "login": "two06-bounty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40838837?v=4", "type": "User" } ] }, { "repo": "devanshbatham/headerpwn", "name": "headerpwn", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/headerpwn", "id": "56cb2a6ae279", "stars": 358, "language": "Go", "description": "A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers", "type": "tool", "pushedAt": "2023-12-14T05:03:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "devanshbatham", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" } ] }, { "repo": "itm4n/pplmedic", "name": "pplmedic", "owner": "itm4n", "url": "https://github.com/itm4n/PPLmedic", "stars": 354, "language": "C++", "description": "Dump the memory of any PPL with a Userland exploit chain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f91e753cfc5f", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-17T15:58:24Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "wetw0rk/malicious-wordpress-plugin", "name": "malicious-wordpress-plugin", "owner": "wetw0rk", "url": "https://github.com/wetw0rk/malicious-wordpress-plugin", "stars": 312, "language": "Python", "description": "Simply generates a wordpress plugin that will grant you a reverse shell once uploaded. I recommend installing Kali Linux, as msfvenom is used to generate the payload.", "type": "tool", "lanes": [ "2" ], "author": { "name": "wetw0rk", "cardId": "cca3bc4f07b32950", "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a78e7e0f26d7", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2024-02-26T14:52:42Z", "archived": false, "topContributors": [ { "login": "wetw0rk", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "type": "User" }, { "login": "34zY", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55347142?v=4", "type": "User" }, { "login": "ToasteR1032", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4981508?v=4", "type": "User" }, { "login": "T13nn3s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29333776?v=4", "type": "User" } ] }, { "repo": "devanshbatham/rayder", "name": "rayder", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/rayder", "stars": 307, "language": "Go", "description": "A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1be05fe5a367", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-09-08T08:01:36Z", "archived": false, "topContributors": [ { "login": "devanshbatham", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" }, { "login": "The-Debarghya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79015784?v=4", "type": "User" } ] }, { "repo": "viralmaniar/wifi-dumper", "name": "wifi-dumper", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Wifi-Dumper", "stars": 295, "language": "Python", "description": "This is an open source tool to dump the wifi profiles and cleartext passwords of the connected access points on the Windows machine. This tool will help you in a Wifi penetration testing. Furthermore,", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1b86969a7baa", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-10-19T02:56:36Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "tokyoneon/credphish", "name": "credphish", "owner": "tokyoneon", "url": "https://github.com/tokyoneon/CredPhish", "stars": 294, "language": "PowerShell", "description": "CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.", "type": "tool", "lanes": [ "2" ], "author": { "name": "tokyoneon", "cardId": "e2f68312160147fa", "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3a7a2635701b", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-27T14:26:00Z", "archived": false, "topContributors": [ { "login": "tokyoneon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4", "type": "User" } ] }, { "repo": "devanshbatham/gorecon", "name": "Gorecon", "owner": "devanshbatham", "url": "https://github.com/devanshbatham/Gorecon", "id": "c62c3dfa6b31", "stars": 286, "language": "Go", "description": "Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal", "type": "tool", "pushedAt": "2021-10-14T07:34:33Z", "archived": true, "lanes": [ "2" ], "author": { "name": "0xAsm0d3us", "cardId": "888aaed3690329d1", "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "devanshbatham", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/28016517?v=4", "type": "User" }, { "login": "pdelteil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20244863?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/amsiscanbufferbypass", "name": "amsiscanbufferbypass", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/AmsiScanBufferBypass", "stars": 283, "language": "C#", "description": "Bypass AMSI by patching AmsiScanBuffer", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a74534457257", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-04T09:34:34Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "zephrfish/bloodhound-customqueries", "name": "bloodhound-customqueries", "owner": "zephrfish", "url": "https://github.com/ZephrFish/Bloodhound-CustomQueries", "stars": 283, "language": null, "description": "Custom Queries - Brought Up to BH4.1 syntax", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "436a0d1bc6f7", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2025-12-07T01:29:58Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "mpowelltech", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/36752644?v=4", "type": "User" }, { "login": "davehardy20", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/874172?v=4", "type": "User" }, { "login": "EuanKerr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13234146?v=4", "type": "User" }, { "login": "0xbko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53568647?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/ost-c2-spec", "name": "ost-c2-spec", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/OST-C2-Spec", "stars": 281, "language": null, "description": "Open Source C&C Specification", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df77299efae2", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-02-28T16:47:36Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "Deranged0tter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/137432130?v=4", "type": "User" } ] }, { "repo": "tokyoneon/armor", "name": "Armor", "owner": "tokyoneon", "url": "https://github.com/tokyoneon/Armor", "id": "6c38bc34c891", "stars": 278, "language": "Shell", "description": "Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners.", "type": "tool", "pushedAt": "2023-08-24T08:55:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "tokyoneon", "cardId": "e2f68312160147fa", "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tokyoneon", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4", "type": "User" } ] }, { "repo": "kingofthenops/cookie-remote-debugger", "name": "cookie-remote-debugger", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/cookie-remote-debugger", "stars": 7, "language": "Python", "description": "python script for connecting to chromium remote debugging port and grabbing cookies", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c8c16f19e7c", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-24T18:42:25Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "p0dalirius/cve-2020-8813-cacti-rce-in-graph_realtime", "name": "cve-2020-8813-cacti-rce-in-graph_realtime", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime", "stars": 7, "language": "Python", "description": "CVE-2020-8813 - RCE through graph_realtime.php in Cacti 1.2.8", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d5fc9e0ef97", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-31T12:06:18Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "infosec-au/heartdestroy", "name": "heartdestroy", "owner": "infosec-au", "url": "https://github.com/infosec-au/heartdestroy", "stars": 7, "language": "Python", "description": "Multi-threaded, mass scanner for the Heartbleed vulnerability, in Python", "type": "tool", "lanes": [ "2" ], "author": { "name": "Shubham Shubs Shah", "cardId": "ea7578f97f207907", "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b89ff3cc8f1", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-04-09T10:03:52Z", "archived": false, "topContributors": [ { "login": "infosec-au", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5241936?v=4", "type": "User" } ] }, { "repo": "chrismaddalena/exploitdev", "name": "exploitdev", "owner": "chrismaddalena", "url": "https://github.com/chrismaddalena/ExploitDev", "stars": 6, "language": "Python", "description": "Practice exploit development and misc things", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b2f6c0830bdd", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 3, "contributorCount": 1, "contributors": [], "pushedAt": "2017-10-14T18:50:54Z", "archived": false, "topContributors": [ { "login": "chrismaddalena", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" } ] }, { "repo": "hotnops/obo-wash", "name": "obo-wash", "owner": "hotnops", "url": "https://github.com/hotnops/obo-wash", "stars": 6, "language": "Python", "description": "A POC for using the on-behalf-of flow to create persistent Azure AD credentials", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Heinsen", "cardId": "01fd4923819babdd", "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dc488b7e7c5e", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-29T03:28:55Z", "archived": false, "topContributors": [ { "login": "hotnops", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "type": "User" } ] }, { "repo": "tyranid/saturndebug", "name": "saturndebug", "owner": "tyranid", "url": "https://github.com/tyranid/saturndebug", "stars": 6, "language": "C", "description": "My old old sega saturn debugger, for information purposes", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c79b484d4a42", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-02-11T06:09:31Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" } ] }, { "repo": "tyranid/sourcey-jack", "name": "sourcey-jack", "owner": "tyranid", "url": "https://github.com/tyranid/Sourcey-Jack", "stars": 6, "language": "C#", "description": "Simple injection project to convert network connections to SOCKS", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0ff73435780c", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2012-12-28T13:33:24Z", "archived": false, "topContributors": [ { "login": "tyranid", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" }, { "login": "ctxis-canape", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5064347?v=4", "type": "User" } ] }, { "repo": "mayerdaniel/createprocess-bof", "name": "createprocess-bof", "owner": "mayerdaniel", "url": "https://github.com/MayerDaniel/createprocess-bof", "stars": 5, "language": "C++", "description": "Simple bof that calls CreateProcess to start executables", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88880b20d340", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-12T18:33:05Z", "archived": false, "topContributors": [ { "login": "MayerDaniel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "type": "User" } ] }, { "repo": "ne0nd0g/merlin-documentation", "name": "merlin-documentation", "owner": "ne0nd0g", "url": "https://github.com/Ne0nd0g/merlin-documentation", "stars": 5, "language": null, "description": "Merlin C2 Documentation Repository for https://merlin-c2.readthedocs.io", "type": "tool", "lanes": [ "2" ], "author": { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df536ee8830d", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-05T11:46:29Z", "archived": false, "topContributors": [ { "login": "Ne0nd0g", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" } ] }, { "repo": "pn-tester/abortcommand", "name": "abortcommand", "owner": "pn-tester", "url": "https://github.com/PN-Tester/AbortCommand", "stars": 5, "language": null, "description": "CobaltStrike aggressor script to add context-menu option for clearing beacon queues", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pierre Nicolas Allard Coutu", "cardId": "d7d4eaa8ecdead31", "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e64b40a0bc3", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-04T21:56:29Z", "archived": false, "topContributors": [ { "login": "PN-Tester", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4", "type": "User" } ] }, { "repo": "darkoperator/posh-nvs", "name": "posh-nvs", "owner": "darkoperator", "url": "https://github.com/darkoperator/Posh-NVS", "stars": 5, "language": "PowerShell", "description": "PowerShell Module for the Nessus Vulnerability Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "41feea59b124", "score": 35, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-06-06T17:52:03Z", "archived": false, "topContributors": [ { "login": "darkoperator", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" } ] }, { "repo": "zcutlip/nvram-faker", "name": "nvram-faker", "owner": "zcutlip", "url": "https://github.com/zcutlip/nvram-faker", "stars": 255, "language": "C", "description": "A simple library to intercept calls to libnvram when running embedded linux applications in emulated environments.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2013/12/emulating-and-debugging-workspace/", "title": "The Shadow File - Emulating and Debugging Workspace", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/01/remote-debugging-with-qemu-and-ida-pro/", "title": "The Shadow File - Remote Debugging with QEMU and IDA Pro", "person": "Zachary Cutlip" } ], "referencedCount": 2, "id": "4fbbc4061a6d", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-10-29T19:37:09Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" }, { "login": "decidedlygray", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11695977?v=4", "type": "User" } ] }, { "repo": "iagox86/hash_extender", "name": "hash_extender", "owner": "iagox86", "url": "https://github.com/iagox86/hash_extender", "stars": 1204, "language": "C", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Ron Bowes", "cardId": "06b5b8536124c5dc", "avatar": "https://avatars.githubusercontent.com/u/526412?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2020/11/14/htb-intense.html", "title": "HTB: Intense", "person": "0xdf" } ], "referencedCount": 1, "id": "91a0ca77ebed", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 13, "contributors": [], "pushedAt": "2025-01-27T18:44:38Z", "archived": false, "topContributors": [ { "login": "iagox86", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/526412?v=4", "type": "User" }, { "login": "mogigoma", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/130862?v=4", "type": "User" }, { "login": "MD-Levitan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12116508?v=4", "type": "User" }, { "login": "DataWearsAHood", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44448030?v=4", "type": "User" }, { "login": "codyaray", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44062?v=4", "type": "User" }, { "login": "devharsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2538046?v=4", "type": "User" }, { "login": "evilwan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11840077?v=4", "type": "User" }, { "login": "meithecatte", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23580910?v=4", "type": "User" }, { "login": "Michele0303", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31160531?v=4", "type": "User" }, { "login": "elliotwutingfeng", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30223404?v=4", "type": "User" }, { "login": "fraf0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15234442?v=4", "type": "User" }, { "login": "nob-dy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14918614?v=4", "type": "User" }, { "login": "yoooov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22342052?v=4", "type": "User" } ] }, { "repo": "zcutlip/prefsniff", "name": "prefsniff", "owner": "zcutlip", "url": "https://github.com/zcutlip/prefsniff", "stars": 257, "language": "Python", "description": "A utility to sniff preferences changes to macOS plist files", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2018/08/autogenerating-defaults1-commands/", "title": "The Shadow File - Autogenerating defaults(1) Commands", "person": "Zachary Cutlip" } ], "referencedCount": 1, "id": "abe54b68508a", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-01-19T17:40:45Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 115, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" }, { "login": "rgov", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/108767?v=4", "type": "User" } ] }, { "repo": "h0mbre/lucid", "name": "lucid", "owner": "h0mbre", "url": "https://github.com/h0mbre/Lucid", "stars": 245, "language": "Rust", "description": "An educational Bochs-based snapshot fuzzer project", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "h0mbre", "cardId": "494e2f03a2cee362", "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4" }, "referencedBy": [ { "url": "https://h0mbre.github.io/New_Fuzzer_Project/", "title": "Fuzzer Development 1: The Soul of a New Machine", "person": "h0mbre" } ], "referencedCount": 1, "id": "f1ea2125f999", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-27T23:53:53Z", "archived": false, "topContributors": [ { "login": "h0mbre", "c": 103, "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4", "type": "User" } ] }, { "repo": "mazen160/ubuntu-desktop-malware-vector-demo", "name": "ubuntu-desktop-malware-vector-demo", "owner": "mazen160", "url": "https://github.com/mazen160/Ubuntu-Desktop-Malware-Vector-Demo", "stars": 4, "language": null, "description": "Demo for http://blog.mazinahmed.net/2017/04/using-ubuntu-desktop-as-malware-vector.html", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4" }, "referencedBy": [ { "url": "https://mazinahmed.net/blog/using-ubuntu-desktop-as-malware-vector/", "title": "Using Ubuntu .DESKTOP as a Malware Vector", "person": "Mazin Ahmed" } ], "referencedCount": 1, "id": "c5447696be6d", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-04-08T20:15:56Z", "archived": false, "topContributors": [ { "login": "mazen160", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "type": "User" } ] }, { "repo": "decalage2/detect_cve-2026-21509", "name": "detect_cve-2026-21509", "owner": "decalage2", "url": "https://github.com/decalage2/detect_CVE-2026-21509", "stars": 3, "language": "Python", "description": "YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Philippe Lagadec", "cardId": "2f01d6d832e70243", "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4" }, "referencedBy": [ { "url": "https://decalage.info/CVE-2026-21509/", "title": "How to detect CVE-2026-21509 exploits", "person": "Philippe Lagadec" } ], "referencedCount": 1, "id": "442bdcbfa0a5", "score": 34, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-04T15:35:45Z", "archived": false, "topContributors": [ { "login": "decalage2", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5989656?v=4", "type": "User" } ] }, { "repo": "bee-san/rustscan", "name": "rustscan", "owner": "bee-san", "url": "https://github.com/bee-san/RustScan", "stars": 20114, "language": "Rust", "description": "🤖 The Modern Port Scanner 🤖", "type": "tool", "lanes": [ "2" ], "author": { "name": "Autumn (Bee)", "cardId": "23d7622e43bf5d78", "avatar": "https://avatars.githubusercontent.com/u/10378052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "18404803b196", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 84, "contributors": [], "pushedAt": "2026-07-16T09:03:01Z", "archived": false, "topContributors": [ { "login": "bee-san", "c": 473, "avatar": "https://avatars.githubusercontent.com/u/10378052?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 121, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "PsypherPunk", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/722120?v=4", "type": "User" }, { "login": "allcontributors[bot]", "c": 61, "avatar": "https://avatars.githubusercontent.com/in/23186?v=4", "type": "Bot" }, { "login": "github-actions[bot]", "c": 43, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "bernardoamc", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/428984?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 26, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "CMNatic", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/4163116?v=4", "type": "User" }, { "login": "bergabman", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/44554109?v=4", "type": "User" }, { "login": "niklasmohrin", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/47574893?v=4", "type": "User" }, { "login": "Atul9", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3390330?v=4", "type": "User" }, { "login": "mikhail5555", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7824786?v=4", "type": "User" }, { "login": "Hydragyrum", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4928181?v=4", "type": "User" }, { "login": "SuperSandro2000", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7258858?v=4", "type": "User" }, { "login": "fabianbees", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/28726756?v=4", "type": "User" }, { "login": "Arvmor", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16479488?v=4", "type": "User" }, { "login": "leofvo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/58391988?v=4", "type": "User" }, { "login": "israelrg", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/55210955?v=4", "type": "User" }, { "login": "Integral-Tech", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/71180087?v=4", "type": "User" }, { "login": "Yogendra0Sharma", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1375860?v=4", "type": "User" }, { "login": "eiffel-fl", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12171754?v=4", "type": "User" }, { "login": "u5surf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/14180225?v=4", "type": "User" }, { "login": "thomasthaddeus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/92204097?v=4", "type": "User" }, { "login": "spenserblack", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8546709?v=4", "type": "User" }, { "login": "SanjoAndPanjo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/69014399?v=4", "type": "User" }, { "login": "Nugine", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30099658?v=4", "type": "User" }, { "login": "lepirlouit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1354968?v=4", "type": "User" }, { "login": "dmitris", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31205?v=4", "type": "User" }, { "login": "cph-w", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30048263?v=4", "type": "User" }, { "login": "BrendanGlancy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61941978?v=4", "type": "User" } ] }, { "repo": "nil0x42/phpsploit", "name": "phpsploit", "owner": "nil0x42", "url": "https://github.com/nil0x42/phpsploit", "id": "5d6366597b9d", "stars": 2484, "language": "Python", "description": "Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor", "type": "tool", "pushedAt": "2024-05-06T13:49:14Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "nil0x42", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "nil0x42", "c": 943, "avatar": "https://avatars.githubusercontent.com/u/3504393?v=4", "type": "User" }, { "login": "requires", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/6866327?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 13, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "allcontributors[bot]", "c": 12, "avatar": "https://avatars.githubusercontent.com/in/23186?v=4", "type": "Bot" }, { "login": "shiney-wh", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/20907184?v=4", "type": "User" }, { "login": "wapiflapi", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1619783?v=4", "type": "User" }, { "login": "paralax", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "yurilaaziz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6031769?v=4", "type": "User" }, { "login": "pyup-bot", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16239342?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" } ] }, { "repo": "rocky/python-decompile3", "name": "python-decompile3", "owner": "rocky", "url": "https://github.com/rocky/python-decompile3", "id": "1ec4245032ef", "stars": 1268, "language": "Python", "description": "Python decompiler for 3.7-3.8 Stripped down from uncompyle6 so we can refactor and start to fix up some long-standing problems", "type": "tool", "pushedAt": "2025-11-18T15:41:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 21, "topContributors": [ { "login": "rocky", "c": 3294, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "moagstar", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/879561?v=4", "type": "User" }, { "login": "Mysterie", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/140181?v=4", "type": "User" }, { "login": "thedrow", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48936?v=4", "type": "User" }, { "login": "wangym5106", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4111676?v=4", "type": "User" }, { "login": "byehack", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26390254?v=4", "type": "User" }, { "login": "Svenskithesource", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/40274381?v=4", "type": "User" }, { "login": "grkov90", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1639876?v=4", "type": "User" }, { "login": "htgoebel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/784161?v=4", "type": "User" }, { "login": "cclauss", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "supervirus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/177580?v=4", "type": "User" }, { "login": "graysuit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54432616?v=4", "type": "User" }, { "login": "kernelsmith", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/620129?v=4", "type": "User" }, { "login": "jbremer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1148773?v=4", "type": "User" }, { "login": "FantasqueX", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46747123?v=4", "type": "User" }, { "login": "Pernat1y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29379145?v=4", "type": "User" }, { "login": "Tey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/646444?v=4", "type": "User" }, { "login": "hashkitten", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10756469?v=4", "type": "User" }, { "login": "jlugjb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7426462?v=4", "type": "User" }, { "login": "lelicopter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7682951?v=4", "type": "User" }, { "login": "skyfion", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/964796?v=4", "type": "User" } ] }, { "repo": "mgeeky/threadstackspoofer", "name": "threadstackspoofer", "owner": "mgeeky", "url": "https://github.com/mgeeky/ThreadStackSpoofer", "stars": 1233, "language": "C++", "description": "Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e717dec71f02", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-17T18:06:35Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "utkusen/promptmap", "name": "promptmap", "owner": "utkusen", "url": "https://github.com/utkusen/promptmap", "stars": 1226, "language": "Python", "description": "a security scanner for custom LLM applications", "type": "tool", "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ff20e66d5996", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-12-01T11:50:23Z", "archived": false, "topContributors": [ { "login": "utkusen", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" }, { "login": "myugan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20453528?v=4", "type": "User" }, { "login": "alewarne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42517702?v=4", "type": "User" }, { "login": "guventuncay", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50626234?v=4", "type": "User" } ] }, { "repo": "dagrz/aws_pwn", "name": "aws_pwn", "owner": "dagrz", "url": "https://github.com/dagrz/aws_pwn", "id": "4318e5e8625e", "stars": 1222, "language": "Python", "description": "A collection of AWS penetration testing junk", "type": "tool", "pushedAt": "2023-08-30T11:12:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daniel Grzelak", "cardId": "f0f05a8bc55c1a6c", "avatar": "https://avatars.githubusercontent.com/u/1920318?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dagrz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1920318?v=4", "type": "User" }, { "login": "aarongorka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22756133?v=4", "type": "User" } ] }, { "repo": "mvelazc0/defcon27_csharp_workshop", "name": "defcon27_csharp_workshop", "owner": "mvelazc0", "url": "https://github.com/mvelazc0/defcon27_csharp_workshop", "stars": 1191, "language": "C#", "description": "Writing custom backdoor payloads with C# - Defcon 27 Workshop", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauricio Velazco", "cardId": "aef4319d82bcb778", "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "84e13ea73e62", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-03-18T02:59:51Z", "archived": false, "topContributors": [ { "login": "mvelazc0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4", "type": "User" } ] }, { "repo": "danmcinerney/icebreaker", "name": "icebreaker", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/icebreaker", "stars": 1187, "language": "PowerShell", "description": "Gets plaintext Active Directory credentials if you're on the internal network but outside the AD environment", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9a94cf037125", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-10-24T18:14:53Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "mgeeky/packmypayload", "name": "packmypayload", "owner": "mgeeky", "url": "https://github.com/mgeeky/PackMyPayload", "stars": 1183, "language": "Python", "description": "A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "35684ebdb207", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-06-10T09:50:43Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "ChoiSG", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/36252854?v=4", "type": "User" }, { "login": "dhauenstein", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/100454?v=4", "type": "User" } ] }, { "repo": "ccob/sharpblock", "name": "sharpblock", "owner": "ccob", "url": "https://github.com/CCob/SharpBlock", "stars": 1172, "language": "C#", "description": "A method of bypassing EDR's active projection DLL's by preventing entry point exection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0caafe06a473", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-31T09:44:48Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "ch0pin/aviator", "name": "aviator", "owner": "ch0pin", "url": "https://github.com/Ch0pin/AVIator", "stars": 1163, "language": "C#", "description": "Antivirus evasion project ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dimitrios Valsamaras", "cardId": "cc8cff1f4fc0f423", "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d66ae13fef8a", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-01-19T12:53:05Z", "archived": true, "topContributors": [ { "login": "Ch0pin", "c": 79, "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4", "type": "User" }, { "login": "whiterabb17", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/90134688?v=4", "type": "User" }, { "login": "BJNFNE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58399929?v=4", "type": "User" } ] }, { "repo": "joelgmsec/evilnovnc", "name": "EvilnoVNC", "owner": "JoelGMSec", "url": "https://github.com/JoelGMSec/EvilnoVNC", "id": "583beec8a4ac", "stars": 1161, "language": "JavaScript", "description": "Ready to go Phishing Platform", "type": "tool", "pushedAt": "2025-05-06T15:24:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "JoelGMSec", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" }, { "login": "git-it", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6565767?v=4", "type": "User" } ] }, { "repo": "ghidraninja/ghidra_scripts", "name": "ghidra_scripts", "owner": "ghidraninja", "url": "https://github.com/ghidraninja/ghidra_scripts", "id": "0fff7b8e35eb", "stars": 1159, "language": "YARA", "description": "Scripts for the Ghidra software reverse engineering suite.", "type": "tool", "pushedAt": "2020-10-07T09:38:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Thomas Roth", "cardId": "a36a75654c36fa11", "avatar": "https://avatars.githubusercontent.com/u/48321160?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "nezza", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/208596?v=4", "type": "User" }, { "login": "shanehuntley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1390497?v=4", "type": "User" }, { "login": "Te-k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15989628?v=4", "type": "User" } ] }, { "repo": "utkusen/sast-skills", "name": "sast-skills", "owner": "utkusen", "url": "https://github.com/utkusen/sast-skills", "stars": 1150, "language": null, "description": "Collection of agent skills that turn your AI coder into a SAST scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8d1624a22246", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-08T14:45:56Z", "archived": false, "topContributors": [ { "login": "utkusen", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" } ] }, { "repo": "christophetd/log4shell-vulnerable-app", "name": "log4shell-vulnerable-app", "owner": "christophetd", "url": "https://github.com/christophetd/log4shell-vulnerable-app", "stars": 1140, "language": "Java", "description": "Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1eccf7af0eb2", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2024-04-26T03:16:26Z", "archived": false, "topContributors": [ { "login": "christophetd", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "type": "User" }, { "login": "fanimalikhack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59456216?v=4", "type": "User" }, { "login": "arall", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1453137?v=4", "type": "User" }, { "login": "giper45", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18548727?v=4", "type": "User" }, { "login": "rayhan0x01", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47485393?v=4", "type": "User" } ] }, { "repo": "mgeeky/shellcodefluctuation", "name": "shellcodefluctuation", "owner": "mgeeky", "url": "https://github.com/mgeeky/ShellcodeFluctuation", "stars": 1121, "language": "C++", "description": "An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "68b45af56530", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-17T18:07:33Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "jhaddix/pentest-bookmarks", "name": "pentest-bookmarks", "owner": "jhaddix", "url": "https://github.com/jhaddix/pentest-bookmarks", "stars": 1119, "language": null, "description": "a collection of handy bookmarks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Haddix", "cardId": "f3f4293bba8a6ba6", "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e2e29067a8d4", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-12-30T13:29:15Z", "archived": false, "topContributors": [ { "login": "jhaddix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4", "type": "User" }, { "login": "Jiab77", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9881407?v=4", "type": "User" } ] }, { "repo": "mgeeky/cobalt-arsenal", "name": "cobalt-arsenal", "owner": "mgeeky", "url": "https://github.com/mgeeky/cobalt-arsenal", "stars": 1106, "language": "PowerShell", "description": "My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7efe559036c5", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-19T04:38:01Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 88, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "mgeeky/protectmytooling", "name": "protectmytooling", "owner": "mgeeky", "url": "https://github.com/mgeeky/ProtectMyTooling", "stars": 1091, "language": "PowerShell", "description": "Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with ", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3c6d9f56bc7f", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-10-14T22:53:57Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 170, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "jabra-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/585965?v=4", "type": "User" }, { "login": "an0x03e8", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6648537?v=4", "type": "User" } ] }, { "repo": "bitdefender/bddisasm", "name": "bddisasm", "owner": "bitdefender", "url": "https://github.com/bitdefender/bddisasm", "stars": 1073, "language": "C", "description": "bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e197cc140df0", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 16, "contributors": [], "pushedAt": "2026-06-29T10:16:07Z", "archived": false, "topContributors": [ { "login": "ianichitei", "c": 172, "avatar": "https://avatars.githubusercontent.com/u/49393881?v=4", "type": "User" }, { "login": "vlutas", "c": 150, "avatar": "https://avatars.githubusercontent.com/u/49196812?v=4", "type": "User" }, { "login": "akisari", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/66726251?v=4", "type": "User" }, { "login": "turol", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/805057?v=4", "type": "User" }, { "login": "bbosinta", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/49068559?v=4", "type": "User" }, { "login": "cbsirb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5429580?v=4", "type": "User" }, { "login": "ScimitarEnjoyer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/173365401?v=4", "type": "User" }, { "login": "BJNFNE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58399929?v=4", "type": "User" }, { "login": "valkheim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18068904?v=4", "type": "User" }, { "login": "ekilmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/816362?v=4", "type": "User" }, { "login": "Luchinkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29070927?v=4", "type": "User" }, { "login": "nbodea", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66726095?v=4", "type": "User" }, { "login": "tklengyel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3172829?v=4", "type": "User" }, { "login": "andreaswimmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53872150?v=4", "type": "User" }, { "login": "junkzours", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/198925861?v=4", "type": "User" }, { "login": "rich-ayr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6305520?v=4", "type": "User" } ] }, { "repo": "antoniococo/sharpyshell", "name": "SharPyShell", "owner": "antonioCoco", "url": "https://github.com/antonioCoco/SharPyShell", "id": "77c846a37ac5", "stars": 1070, "language": "Python", "description": "SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications", "type": "tool", "pushedAt": "2023-11-26T17:14:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "antonioCoco", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" }, { "login": "NuHarborMartin", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/85685696?v=4", "type": "User" }, { "login": "NgoHuy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1238112?v=4", "type": "User" } ] }, { "repo": "clr2of8/dpat", "name": "DPAT", "owner": "clr2of8", "url": "https://github.com/clr2of8/DPAT", "id": "52dc557c2f78", "stars": 1056, "language": "Python", "description": "Domain Password Audit Tool for Pentesters", "type": "tool", "pushedAt": "2025-12-24T05:10:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carrie Roberts", "cardId": "42edbf3ebbe40f00", "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "login": "tijme" } ], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "clr2of8", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4", "type": "User" }, { "login": "fin3ss3g0d", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/62859381?v=4", "type": "User" }, { "login": "MrOrOneEquals1", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/8823222?v=4", "type": "User" }, { "login": "JrOrOneEquals1", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/49999278?v=4", "type": "User" }, { "login": "Copilot", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "tijme", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "rufflabs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1290999?v=4", "type": "User" }, { "login": "llbbl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19964?v=4", "type": "User" }, { "login": "nitronarcosis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9104574?v=4", "type": "User" } ] }, { "repo": "yassineaboukir/sublert", "name": "sublert", "owner": "yassineaboukir", "url": "https://github.com/yassineaboukir/sublert", "id": "a9cf7d0f7a8a", "stars": 1034, "language": "Python", "description": "Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.", "type": "tool", "pushedAt": "2021-02-05T10:38:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "yassineaboukir", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "type": "User" }, { "login": "simpson-ross", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/104874092?v=4", "type": "User" }, { "login": "003random", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22357749?v=4", "type": "User" } ] }, { "repo": "carlospolop/legion", "name": "legion", "owner": "carlospolop", "url": "https://github.com/carlospolop/legion", "id": "013778c31b29", "stars": 1028, "language": "Python", "description": "Automatic Enumeration Tool based in Open Source tools", "type": "tool", "pushedAt": "2026-07-11T08:58:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "carlospolop", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "alegrey91", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/16689706?v=4", "type": "User" }, { "login": "ls4cfk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18011049?v=4", "type": "User" }, { "login": "Et7f3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29592775?v=4", "type": "User" }, { "login": "nuno-andre", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6339494?v=4", "type": "User" }, { "login": "romain-deperne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61591917?v=4", "type": "User" } ] }, { "repo": "ccob/beaconeye", "name": "BeaconEye", "owner": "CCob", "url": "https://github.com/CCob/BeaconEye", "id": "93db94fb4079", "stars": 963, "language": "C#", "description": "Hunts out CobaltStrike beacons and logs operator command output", "type": "tool", "pushedAt": "2024-09-04T17:13:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" } ], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "CCob", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "dump-guy/malware-analysis-and-reverse-engineering", "name": "malware-analysis-and-reverse-engineering", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/Malware-analysis-and-Reverse-engineering", "stars": 957, "language": "Python", "description": "Some of my publicly available Malware analysis and Reverse engineering.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1c75903d871b", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-03T20:52:23Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 289, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "danielbohannon/invoke-dosfuscation", "name": "Invoke-DOSfuscation", "owner": "danielbohannon", "url": "https://github.com/danielbohannon/Invoke-DOSfuscation", "id": "c70869e6f014", "stars": 945, "language": "PowerShell", "description": "Cmd.exe Command Obfuscation Generator & Detection Test Harness", "type": "tool", "pushedAt": "2018-03-27T12:16:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daniel Bohannon", "cardId": "db10af0f1bbb1ec3", "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "msuiche/porosity", "name": "porosity", "owner": "msuiche", "url": "https://github.com/msuiche/porosity", "id": "d355dc8760ca", "stars": 934, "language": "C++", "description": "*UNMAINTAINED* Decompiler and Security Analysis tool for Blockchain-based Ethereum Smart-Contracts", "type": "tool", "pushedAt": "2019-01-10T04:48:46Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Matt Suiche", "cardId": "bda3839f4b2fa897", "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "msuiche", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4", "type": "User" }, { "login": "UnSciPreneur", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13448107?v=4", "type": "User" }, { "login": "genecyber", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/179362?v=4", "type": "User" }, { "login": "patrickmn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/72885?v=4", "type": "User" }, { "login": "slavikus", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/143051?v=4", "type": "User" }, { "login": "beaugunderson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61791?v=4", "type": "User" }, { "login": "muellerberndt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5194767?v=4", "type": "User" }, { "login": "seed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80487?v=4", "type": "User" } ] }, { "repo": "wietze/hijacklibs", "name": "hijacklibs", "owner": "wietze", "url": "https://github.com/wietze/HijackLibs", "stars": 924, "language": null, "description": "Project for tracking publicly disclosed DLL Hijacking opportunities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "78707cee9197", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 39, "contributors": [ { "name": "mthcht", "cardId": "7af325cfc2382a37", "avatar": "https://avatars.githubusercontent.com/u/75267080?v=4", "login": "mthcht" }, { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "login": "s0ld13rr" }, { "name": "Micah Babinski", "cardId": "7886f0a767c3e6e9", "avatar": "https://avatars.githubusercontent.com/u/63474467?v=4", "login": "mbabinski" } ], "pushedAt": "2026-06-30T22:23:11Z", "archived": false, "topContributors": [ { "login": "wietze", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" }, { "login": "swachchhanda000", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/87493836?v=4", "type": "User" }, { "login": "Still34", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/5843208?v=4", "type": "User" }, { "login": "JPMinty", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/9259078?v=4", "type": "User" }, { "login": "xorjosh", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/168270077?v=4", "type": "User" }, { "login": "j-oregon", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/175346943?v=4", "type": "User" }, { "login": "ice-wzl", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/75596877?v=4", "type": "User" }, { "login": "0xFFaraday", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/89433963?v=4", "type": "User" }, { "login": "v1stra", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49531141?v=4", "type": "User" }, { "login": "tbaker57", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8262456?v=4", "type": "User" }, { "login": "wsummerhill", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35749735?v=4", "type": "User" }, { "login": "mgreen27", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13081800?v=4", "type": "User" }, { "login": "MATTANDERS0N", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/75185144?v=4", "type": "User" }, { "login": "Koifman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9611126?v=4", "type": "User" }, { "login": "ionsor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/93973834?v=4", "type": "User" }, { "login": "cbeek-r7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/117099647?v=4", "type": "User" }, { "login": "wasserpanther", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/850780?v=4", "type": "User" }, { "login": "ventdrop", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/93584030?v=4", "type": "User" }, { "login": "turcanustefan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22752200?v=4", "type": "User" }, { "login": "n0tspam", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25332250?v=4", "type": "User" }, { "login": "mthcht", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75267080?v=4", "type": "User" }, { "login": "legit4n6", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32948526?v=4", "type": "User" }, { "login": "CTM1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45026430?v=4", "type": "User" }, { "login": "KinakoExE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37258384?v=4", "type": "User" }, { "login": "k4nfr3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45294916?v=4", "type": "User" }, { "login": "galoryber", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51980089?v=4", "type": "User" }, { "login": "s0ld13rr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" }, { "login": "Kuermel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6574969?v=4", "type": "User" }, { "login": "TannerFilip", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/310246?v=4", "type": "User" }, { "login": "sansan-monkey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116366885?v=4", "type": "User" } ] }, { "repo": "qtc-de/remote-method-guesser", "name": "remote-method-guesser", "owner": "qtc-de", "url": "https://github.com/qtc-de/remote-method-guesser", "stars": 924, "language": "Java", "description": "Java RMI Vulnerability Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0cc54c406aff", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Vasilij Schneidermann", "cardId": "313f89501d855e9d", "avatar": "https://avatars.githubusercontent.com/u/3588994?v=4", "login": "wasamasa" } ], "pushedAt": "2024-07-03T19:40:54Z", "archived": false, "topContributors": [ { "login": "qtc-de", "c": 826, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" }, { "login": "dnet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" }, { "login": "wasamasa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3588994?v=4", "type": "User" } ] }, { "repo": "ang13t/satintel", "name": "satintel", "owner": "ang13t", "url": "https://github.com/ANG13T/SatIntel", "stars": 895, "language": "Go", "description": "SatIntel is an OSINT tool for Satellites 🛰. Extract satellite telemetry, receive orbital predictions, and parse TLEs 🔭", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c43dfdce1d50", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-03-15T16:29:23Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" }, { "login": "christopherwoodall", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/363708?v=4", "type": "User" } ] }, { "repo": "mubix/shellshocker-pocs", "name": "shellshocker-pocs", "owner": "mubix", "url": "https://github.com/mubix/shellshocker-pocs", "id": "1e81029e4540", "stars": 889, "language": "Python", "description": "Collection of Proof of Concepts and Potential Targets for #ShellShocker", "type": "tool", "pushedAt": "2020-05-16T12:26:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "mubix", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "dirkx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/392583?v=4", "type": "User" }, { "login": "asciifaceman", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1619591?v=4", "type": "User" }, { "login": "bcoles", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "matthazinski", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1184700?v=4", "type": "User" }, { "login": "WebBreacher", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2359093?v=4", "type": "User" }, { "login": "gry", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3475654?v=4", "type": "User" }, { "login": "d1str0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3741618?v=4", "type": "User" }, { "login": "jedisct1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124872?v=4", "type": "User" }, { "login": "jacksoncage", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1434252?v=4", "type": "User" }, { "login": "mfadzilr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4267222?v=4", "type": "User" }, { "login": "TomSellers", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6500426?v=4", "type": "User" }, { "login": "rikvanduijn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7839269?v=4", "type": "User" } ] }, { "repo": "samratashok/kautilya", "name": "kautilya", "owner": "samratashok", "url": "https://github.com/samratashok/Kautilya", "stars": 872, "language": "PowerShell", "description": "Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nikhil \"SamratAshok\" Mittal", "cardId": "9650ca02c5588a07", "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f174ef1243c2", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2017-08-04T04:00:38Z", "archived": false, "topContributors": [ { "login": "samratashok", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4", "type": "User" }, { "login": "espreto", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1926764?v=4", "type": "User" }, { "login": "vezaynk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10255546?v=4", "type": "User" } ] }, { "repo": "0xdea/tactical-exploitation", "name": "tactical-exploitation", "owner": "0xdea", "url": "https://github.com/0xdea/tactical-exploitation", "id": "f2b76b6bfb8a", "stars": 866, "language": "Python", "description": "Modern tactical exploitation toolkit.", "type": "tool", "pushedAt": "2026-03-09T10:34:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "0xdea", "c": 99, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" }, { "login": "v-p-b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/540246?v=4", "type": "User" } ] }, { "repo": "trustedsec/coffloader", "name": "COFFLoader", "owner": "trustedsec", "url": "https://github.com/trustedsec/COFFLoader", "id": "d57379fac8cc", "stars": 644, "language": "C", "description": "", "type": "tool", "pushedAt": "2025-07-21T16:43:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kevin Haubris", "cardId": "3675f451e4ed1ecc", "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "login": "kev169" } ], "adoptionOperators": 5, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "kev169", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "type": "User" }, { "login": "zeroSteiner", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2058303?v=4", "type": "User" }, { "login": "freefirex", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "MEhrn00", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13649965?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" } ] }, { "repo": "blackhillsinfosec/eventlogging", "name": "EventLogging", "owner": "blackhillsinfosec", "url": "https://github.com/blackhillsinfosec/EventLogging", "id": "f9ded16d46e5", "stars": 490, "language": "PowerShell", "description": "Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment. ", "type": "tool", "pushedAt": "2024-11-21T15:55:59Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Black Hills Information Security", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 10, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "mon0pixel", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/36604349?v=4", "type": "User" }, { "login": "0BL1V10N-55", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/114760354?v=4", "type": "User" }, { "login": "RagingRedRiot", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/72712706?v=4", "type": "User" }, { "login": "NapalmN", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/71536751?v=4", "type": "User" }, { "login": "nolsen311", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/64344?v=4", "type": "User" }, { "login": "moralesuppresor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/176965895?v=4", "type": "User" }, { "login": "woodwardpj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56651786?v=4", "type": "User" }, { "login": "Kadawi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45124659?v=4", "type": "User" } ] }, { "repo": "leo4j/amnesiac", "name": "amnesiac", "owner": "leo4j", "url": "https://github.com/Leo4j/Amnesiac", "stars": 447, "language": "PowerShell", "description": "Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "960c96ead5fc", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-01T11:03:58Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "zhuowei/cheese", "name": "cheese", "owner": "zhuowei", "url": "https://github.com/zhuowei/cheese", "stars": 258, "language": "C", "description": "CVE-2025-21479 proof-of-concept, I think", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "000a52a246a9", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-16T06:52:13Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "k0keoyo/some-kernel-fuzzing-paper", "name": "Some-Kernel-Fuzzing-Paper", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/Some-Kernel-Fuzzing-Paper", "id": "87fdc4c5de71", "stars": 255, "language": null, "description": "Some kernel fuzzing paper about windows and linux", "type": "tool", "pushedAt": "2017-10-09T12:04:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "k0keoyo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/gf-secrets", "name": "gf-secrets", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/gf-secrets", "stars": 245, "language": "Shell", "description": "Secret and/or credential patterns used for gf.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6ed90e9a68b6", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-02-10T03:42:15Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "0-0eth0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50541295?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/nyxinvoke", "name": "nyxinvoke", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/NyxInvoke", "stars": 242, "language": "Rust", "description": "NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1c1ddd226c62", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-12T10:05:25Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/vulnerable-kext", "name": "Vulnerable-Kext", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/Vulnerable-Kext", "id": "6be31d272010", "stars": 239, "language": "C", "description": "A WIP \"Vulnerable by Design\" kext for iOS/macOS to play & learn *OS kernel exploitation", "type": "tool", "pushedAt": "2020-12-29T11:34:24Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Madhu Akula", "cardId": "3af4d17ee0a1e27a", "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4", "login": "madhuakula" } ], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ant4g0nist", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" }, { "login": "madhuakula", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/crystal-loaders", "name": "crystal-loaders", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/Crystal-Loaders", "stars": 234, "language": "C", "description": "A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ca1e49f2fbfe", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-11T11:37:28Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "cybercdh/kitphishr", "name": "kitphishr", "owner": "cybercdh", "url": "https://github.com/cybercdh/kitphishr", "id": "ea677526d8c3", "stars": 234, "language": "Go", "description": "A tool designed to hunt for Phishing Kit source code ", "type": "tool", "pushedAt": "2026-07-02T20:12:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Colin Hardy", "cardId": "ccdc709645f1cba2", "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "cybercdh", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "iam-py-test", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84232764?v=4", "type": "User" } ] }, { "repo": "viralmaniar/remote-desktop-caching-", "name": "remote-desktop-caching-", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Remote-Desktop-Caching-", "stars": 219, "language": "Python", "description": "This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any s", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "487340d94228", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-04T11:35:52Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "logangoins/soapy", "name": "soapy", "owner": "logangoins", "url": "https://github.com/logangoins/SOAPy", "stars": 211, "language": "Python", "description": "SOAPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) through a SOCKS5 proxy.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9c74c88645c0", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-06T00:57:16Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" }, { "login": "j4s0nmo0n", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44747728?v=4", "type": "User" } ] }, { "repo": "jackullrich/syscall-detect", "name": "syscall-detect", "owner": "jackullrich", "url": "https://github.com/jackullrich/syscall-detect", "stars": 210, "language": "C++", "description": "PoC capable of detecting manual syscalls from usermode.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "113e27474b48", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-13T16:32:39Z", "archived": false, "topContributors": [ { "login": "jackullrich", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" } ] }, { "repo": "hackinglz/gibson", "name": "gibson", "owner": "HackingLZ", "url": "https://github.com/HackingLZ/gibson", "id": "a543cfc6c9b6", "stars": 208, "language": "Rust", "description": "Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN loo", "type": "tool", "pushedAt": "2026-02-26T16:07:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HackingLZ", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "bruce30262/twindbg", "name": "twindbg", "owner": "bruce30262", "url": "https://github.com/bruce30262/TWindbg", "stars": 205, "language": "Python", "description": "PEDA-like debugger UI for WinDbg", "type": "tool", "lanes": [ "2" ], "author": { "name": "bruce30262", "cardId": "04a6b32e757c4fc9", "avatar": "https://avatars.githubusercontent.com/u/4478350?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aeaad058a977", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-29T14:57:07Z", "archived": true, "topContributors": [ { "login": "bruce30262", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/4478350?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/dlink-decrypt", "name": "dlink-decrypt", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/dlink-decrypt", "stars": 201, "language": "C", "description": "D-Link firmware decryption PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c0f981f772fe", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2023-12-21T05:03:52Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" }, { "login": "brianpow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/647087?v=4", "type": "User" }, { "login": "dolby360", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22151399?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/vegvisir", "name": "vegvisir", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/vegvisir", "stars": 199, "language": "JavaScript", "description": "A browser based GUI for **LLDB** Debugger. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ff687d733e8a", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-05-06T19:03:27Z", "archived": true, "topContributors": [ { "login": "ant4g0nist", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "rasta-mouse/process-inject-kit", "name": "process-inject-kit", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/process-inject-kit", "stars": 194, "language": "C++", "description": "Port of Cobalt Strike's Process Inject Kit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8edca8bd17b9", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-01T15:31:30Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "jprx/fractal", "name": "fractal", "owner": "jprx", "url": "https://github.com/jprx/fractal", "id": "fc786e859a1f", "stars": 168, "language": "C", "description": "Fractal is an operating system for microarchitecture reverse engineering", "type": "tool", "pushedAt": "2026-05-29T22:28:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joseph Ravichandran", "cardId": "ecea8f6ea1f778c2", "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jprx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4", "type": "User" } ] }, { "repo": "klezvirus/deser-py", "name": "deser-py", "owner": "klezvirus", "url": "https://github.com/klezVirus/deser-py", "stars": 4, "language": "Python", "description": "Python Deserialization Payload Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "05bc1dd9e14d", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-15T14:27:18Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "forensicitguy/find-logons", "name": "find-logons", "owner": "forensicitguy", "url": "https://github.com/ForensicITGuy/Find-Logons", "stars": 4, "language": "PowerShell", "description": "PowerShell tool to lookup AD user info and track down account lockouts in AD domain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "773944e001e8", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-08-25T21:29:26Z", "archived": false, "topContributors": [ { "login": "ForensicITGuy", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" } ] }, { "repo": "mayerdaniel/processinjection", "name": "processinjection", "owner": "mayerdaniel", "url": "https://github.com/MayerDaniel/ProcessInjection", "stars": 4, "language": "C++", "description": " The materials to accompany process injection blogs found on https://mayer.cool/", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "374549174465", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-21T01:48:31Z", "archived": false, "topContributors": [ { "login": "MayerDaniel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "type": "User" } ] }, { "repo": "curi0usjack/autobrute", "name": "autobrute", "owner": "curi0usjack", "url": "https://github.com/curi0usJack/autobrute", "stars": 4, "language": "Python", "description": "Simple http/ntlm brute forcer with some helpful options.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "159379620c0c", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-28T00:05:42Z", "archived": false, "topContributors": [ { "login": "curi0usJack", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4", "type": "User" } ] }, { "repo": "pn-tester/lnksphinx", "name": "lnksphinx", "owner": "pn-tester", "url": "https://github.com/PN-Tester/lnksphinx", "stars": 4, "language": "Python", "description": "Offensive Security LNK Creation tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pierre Nicolas Allard Coutu", "cardId": "d7d4eaa8ecdead31", "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8a084e023179", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-30T17:45:42Z", "archived": false, "topContributors": [ { "login": "PN-Tester", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4", "type": "User" } ] }, { "repo": "mrphrazer/sunburst_hasher", "name": "sunburst_hasher", "owner": "mrphrazer", "url": "https://github.com/mrphrazer/sunburst_hasher", "stars": 4, "language": "Rust", "description": "A parallel hash collision brute forcer for the sunburst malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Blazytko", "cardId": "e28a64d80372c361", "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e79dbd3e6c5", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-07T08:50:26Z", "archived": false, "topContributors": [ { "login": "mrphrazer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10834372?v=4", "type": "User" } ] }, { "repo": "senderend/cve-2022-35914", "name": "cve-2022-35914", "owner": "senderend", "url": "https://github.com/senderend/CVE-2022-35914", "stars": 4, "language": "Python", "description": "PoC exploit for GLPI - Command injection using a third-party library script", "type": "tool", "lanes": [ "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "927f22e1431a", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-17T17:56:45Z", "archived": false, "topContributors": [ { "login": "senderend", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" } ] }, { "repo": "klezvirus/deser-ruby", "name": "deser-ruby", "owner": "klezvirus", "url": "https://github.com/klezVirus/deser-ruby", "stars": 3, "language": "Ruby", "description": "Ruby Deserialization Payload Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6f65c373728", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-08T22:57:19Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "kingofthenops/burpsuite-extractor", "name": "burpsuite-extractor", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/BurpSuite-Extractor", "stars": 3, "language": "Python", "description": "extracting files from burp when abusing a vulnerability like an IDOR with intruder", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6457cc7158a2", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-11T20:14:22Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "p0dalirius/sharpopengraph", "name": "sharpopengraph", "owner": "p0dalirius", "url": "https://github.com/p0dalirius/sharpopengraph", "stars": 3, "language": "C#", "description": "A C# library to create BloodHound OpenGraphs easily ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3dbb3c57a770", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-26T10:04:19Z", "archived": false, "topContributors": [ { "login": "p0dalirius", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" } ] }, { "repo": "yogehi/pwn2own2020-mitminstallapp-docker", "name": "pwn2own2020-mitminstallapp-docker", "owner": "yogehi", "url": "https://github.com/Yogehi/pwn2own2020-mitmInstallApp-docker", "stars": 3, "language": "HTML", "description": "Docker image to exploit the Galaxy Apps store RCE exploit detailed at https://labs.f-secure.com/blog/samsung-s20-rce-via-samsung-galaxy-store-app/", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ken Gannon", "cardId": "cda1ad1ab035b0f5", "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "37578eadcbb8", "score": 34, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-22T18:57:40Z", "archived": false, "topContributors": [ { "login": "Yogehi", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4", "type": "User" } ] }, { "repo": "zcutlip/bowcaster", "name": "bowcaster", "owner": "zcutlip", "url": "https://github.com/zcutlip/bowcaster", "stars": 138, "language": "Python", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2013/03/crossbow/", "title": "The Shadow File - Crossbow", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2014/05/infiltrate-2014/", "title": "The Shadow File - Infiltrate 2014", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2013/04/crossbow-is-now-bowcaster/", "title": "The Shadow File - Crossbow is now Bowcaster", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/02/bowcaster-feature-multipart/form-data/", "title": "The Shadow File - Bowcaster Feature: multipart/form-data", "person": "Zachary Cutlip" } ], "referencedCount": 4, "id": "706ad6ef45a1", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-29T13:40:53Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 152, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei", "name": "nuclei", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei", "stars": 29811, "language": "Go", "description": "Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the int", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [ { "url": "https://dw1.io/blog/2020/07/06/weaponizes-nuclei/", "title": "Weaponizes nuclei Workflows to Pwn All the Things", "person": "Dwi Siswanto" }, { "url": "https://dw1.io/blog/2020/09/12/continuous-nuclei/", "title": "How to Scan Continuously with Nuclei?", "person": "Dwi Siswanto" }, { "url": "https://0xdf.gitlab.io/2025/02/01/htb-trickster.html", "title": "HTB: Trickster", "person": "0xdf" } ], "referencedCount": 3, "id": "afab219a3ec8", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 8, "contributorCount": 100, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" }, { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" } ], "pushedAt": "2026-07-17T22:36:24Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 1208, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Mzack9999", "c": 1171, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "Ice3man543", "c": 1084, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "ehsandeep", "c": 1065, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 213, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 200, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "tarunKoyalwar", "c": 175, "avatar": "https://avatars.githubusercontent.com/u/45962551?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 172, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "manuelbua", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/819314?v=4", "type": "User" }, { "login": "actions-user", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/65916846?v=4", "type": "User" }, { "login": "ShubhamRasal", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/45902122?v=4", "type": "User" }, { "login": "parrasajad", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/16835787?v=4", "type": "User" }, { "login": "vzamanillo", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/10209695?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "LuitelSamikshya", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/85764322?v=4", "type": "User" }, { "login": "kchason", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/1111099?v=4", "type": "User" }, { "login": "pmareke", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/3502075?v=4", "type": "User" }, { "login": "xm1k3", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/73166077?v=4", "type": "User" }, { "login": "5amu", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/39925709?v=4", "type": "User" }, { "login": "ehrishirajsharma", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/35542790?v=4", "type": "User" }, { "login": "zerodivisi0n", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/687694?v=4", "type": "User" }, { "login": "geeknik", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/466878?v=4", "type": "User" }, { "login": "ghost", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/10137?v=4", "type": "User" }, { "login": "alban-stourbe-wmx", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/159776828?v=4", "type": "User" }, { "login": "knakul853", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/32031946?v=4", "type": "User" }, { "login": "TerminalFi", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/32599364?v=4", "type": "User" }, { "login": "KaulSe", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/45340011?v=4", "type": "User" }, { "login": "didier-durand", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2927957?v=4", "type": "User" }, { "login": "sullo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1474884?v=4", "type": "User" }, { "login": "G360-Niek", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/268561963?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/targetedkerberoast", "name": "targetedkerberoast", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/targetedKerberoast", "stars": 672, "language": "Python", "description": "Kerberoast with ACL abuse capabilities", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2025/04/19/htb-administrator.html", "title": "HTB: Administrator", "person": "0xdf" } ], "referencedCount": 1, "id": "a9c9397763a5", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 8, "contributors": [], "pushedAt": "2024-12-16T07:32:14Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "iNoSec2", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/51358868?v=4", "type": "User" }, { "login": "lap1nou", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10383569?v=4", "type": "User" }, { "login": "rbsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3534212?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" }, { "login": "Sh0ckFR", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10033649?v=4", "type": "User" }, { "login": "TahiTi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3107859?v=4", "type": "User" }, { "login": "exploide", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/manufuzzer", "name": "manufuzzer", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/ManuFuzzer", "stars": 181, "language": "Objective-C++", "description": "Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [ { "url": "https://fuzzing.science/manufuzzer-binary-code-coverage-fuzzer-for-macos/", "title": "ManuFuzzer", "person": "Chaitanya" } ], "referencedCount": 1, "id": "f1fece755443", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-05-19T08:46:58Z", "archived": false, "topContributors": [ { "login": "ant4g0nist", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" }, { "login": "r3dsm0k3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/527535?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/rudroid", "name": "rudroid", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/rudroid", "stars": 167, "language": "Rust", "description": "Rudroid - Writing the World's worst Android Emulator in Rust 🦀", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [ { "url": "https://fuzzing.science/rudroid-worlds-worst-android-emulator/", "title": "Rudroid - Writing the World's worst Android Emulator in Rust 🦀 :: fuzzing.science", "person": "Chaitanya" } ], "referencedCount": 1, "id": "7e701f8c961f", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-09T00:40:56Z", "archived": false, "topContributors": [ { "login": "ant4g0nist", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "k0keoyo/my_vulnerabilities", "name": "my_vulnerabilities", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/my_vulnerabilities", "stars": 130, "language": "C++", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [ { "url": "https://whereisk0shl.top/post/StorSvc_writeup_and_introduction_about_my_analysis_script/", "title": "Whereisk0Shl", "person": "k0shl" } ], "referencedCount": 1, "id": "96b911ceedc3", "score": 33, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-23T03:18:32Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "lissy93/web-check", "name": "web-check", "owner": "lissy93", "url": "https://github.com/lissy93/web-check", "stars": 34178, "language": "TypeScript", "description": "🕵️‍♂️ All-in-one OSINT tool for analysing any website", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alicia Sykes", "cardId": "7eb0947e80c5b7ab", "avatar": "https://avatars.githubusercontent.com/u/1862727?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "089f9c7e575a", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 33, "contributors": [], "pushedAt": "2026-07-11T07:28:44Z", "archived": false, "topContributors": [ { "login": "lissy93", "c": 539, "avatar": "https://avatars.githubusercontent.com/u/1862727?v=4", "type": "User" }, { "login": "liss-bot", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/87835202?v=4", "type": "User" }, { "login": "tnga", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12436411?v=4", "type": "User" }, { "login": "n0a", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/14150948?v=4", "type": "User" }, { "login": "muni106", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/65845442?v=4", "type": "User" }, { "login": "ChrisCarini", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6374067?v=4", "type": "User" }, { "login": "jorgearma", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/136476946?v=4", "type": "User" }, { "login": "bolens", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1218380?v=4", "type": "User" }, { "login": "max", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/111631?v=4", "type": "User" }, { "login": "HeroGamers", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15278940?v=4", "type": "User" }, { "login": "GreyXor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/79602273?v=4", "type": "User" }, { "login": "Erwan-loot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/62173453?v=4", "type": "User" }, { "login": "brianteeman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1296369?v=4", "type": "User" }, { "login": "vitalykarasik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7628795?v=4", "type": "User" }, { "login": "dicnunz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/139033898?v=4", "type": "User" }, { "login": "Its-Just-Nans", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56606507?v=4", "type": "User" }, { "login": "robinson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/237874?v=4", "type": "User" }, { "login": "jayrizon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/119539359?v=4", "type": "User" }, { "login": "abhishekMuge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49590582?v=4", "type": "User" }, { "login": "UlisesGascon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5110813?v=4", "type": "User" }, { "login": "CrazyWolf13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/96661824?v=4", "type": "User" }, { "login": "PhiRequiem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1323576?v=4", "type": "User" }, { "login": "ntaiko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108784453?v=4", "type": "User" }, { "login": "Myzel394", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50424412?v=4", "type": "User" }, { "login": "murrple-1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5559656?v=4", "type": "User" }, { "login": "t3chn0m4g3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4318452?v=4", "type": "User" }, { "login": "treatmesubj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39680353?v=4", "type": "User" }, { "login": "Dev9269", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/157703342?v=4", "type": "User" }, { "login": "eltociear", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22633385?v=4", "type": "User" }, { "login": "Gertje823", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36937387?v=4", "type": "User" } ] }, { "repo": "reverseclabs/c3", "name": "C3", "owner": "ReversecLabs", "url": "https://github.com/ReversecLabs/C3", "id": "75aa2cd3d0fd", "stars": 1777, "language": "C++", "description": "Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.", "type": "tool", "pushedAt": "2026-01-16T14:53:32Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ReversecLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" } ], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "bcampbell-wsecure", "c": 117, "avatar": "https://avatars.githubusercontent.com/u/179821628?v=4", "type": "User" }, { "login": "Meatballs1", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "grzryc", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/4489155?v=4", "type": "User" }, { "login": "jaSzmigi", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/35449256?v=4", "type": "User" }, { "login": "mgeeky", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "adm1nPanda", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/14232737?v=4", "type": "User" }, { "login": "sunnyneo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9748813?v=4", "type": "User" }, { "login": "alexkornitzer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2750747?v=4", "type": "User" }, { "login": "felixm-pw", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/28467515?v=4", "type": "User" }, { "login": "rgmz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32133502?v=4", "type": "User" }, { "login": "FroyoRab", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49470951?v=4", "type": "User" } ] }, { "repo": "pedrib/poc", "name": "poc", "owner": "pedrib", "url": "https://github.com/pedrib/PoC", "stars": 861, "language": "Ruby", "description": "Advisories, proof of concept files and exploits that have been made public by @pedrib.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pedro Ribeiro", "cardId": "3c380592f7ef07f9", "avatar": "https://avatars.githubusercontent.com/u/5311656?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "033f83fa82ad", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-16T10:24:44Z", "archived": false, "topContributors": [ { "login": "pedrib", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/5311656?v=4", "type": "User" } ] }, { "repo": "danielbohannon/invoke-cradlecrafter", "name": "Invoke-CradleCrafter", "owner": "danielbohannon", "url": "https://github.com/danielbohannon/Invoke-CradleCrafter", "id": "c993b26f0286", "stars": 854, "language": "PowerShell", "description": "PowerShell Remote Download Cradle Generator & Obfuscator", "type": "tool", "pushedAt": "2018-03-23T12:50:21Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daniel Bohannon", "cardId": "db10af0f1bbb1ec3", "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mgreen27", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13081800?v=4", "type": "User" } ] }, { "repo": "scwuaptx/hitcon-training", "name": "HITCON-Training", "owner": "scwuaptx", "url": "https://github.com/scwuaptx/HITCON-Training", "id": "7cb8a3d8b2a1", "stars": 849, "language": "C", "description": "For Linux binary Exploitation", "type": "tool", "pushedAt": "2018-03-26T17:51:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Angelboy", "cardId": "b7d5ac7acf774706", "avatar": "https://avatars.githubusercontent.com/u/3533327?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "scwuaptx", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/3533327?v=4", "type": "User" }, { "login": "danielhenrymantilla", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9920355?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/md380tools", "name": "md380tools", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/md380tools", "stars": 848, "language": "C", "description": "Firmware patches for the TYT-MD380 handheld radio.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e325ddfd20df", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 70, "contributors": [], "pushedAt": "2026-02-22T20:23:12Z", "archived": false, "topContributors": [ { "login": "sijskes", "c": 1144, "avatar": "https://avatars.githubusercontent.com/u/1328869?v=4", "type": "User" }, { "login": "travisgoodspeed", "c": 424, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" }, { "login": "aeickho", "c": 424, "avatar": "https://avatars.githubusercontent.com/u/986535?v=4", "type": "User" }, { "login": "Wolf-DL4YHF", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/24916093?v=4", "type": "User" }, { "login": "meinhardguenther-netizen", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/271972073?v=4", "type": "User" }, { "login": "d235j", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/44988?v=4", "type": "User" }, { "login": "KD4Z", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/17788589?v=4", "type": "User" }, { "login": "DL2MF", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/1955750?v=4", "type": "User" }, { "login": "mach327", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/75515335?v=4", "type": "User" }, { "login": "phl0", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/7112907?v=4", "type": "User" }, { "login": "m0ivq", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/15026735?v=4", "type": "User" }, { "login": "xSmurf", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/525356?v=4", "type": "User" }, { "login": "dg9vh", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/13950650?v=4", "type": "User" }, { "login": "claywalker0929", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/20309739?v=4", "type": "User" }, { "login": "cr", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/170331?v=4", "type": "User" }, { "login": "stefansaraev", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/758738?v=4", "type": "User" }, { "login": "zarya", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/387694?v=4", "type": "User" }, { "login": "KG5IEN", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26757612?v=4", "type": "User" }, { "login": "W8BSD", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7404267?v=4", "type": "User" }, { "login": "docprofsky", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6558271?v=4", "type": "User" }, { "login": "dysinger", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/447?v=4", "type": "User" }, { "login": "NicoVarg99", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/15423808?v=4", "type": "User" }, { "login": "stargo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/994934?v=4", "type": "User" }, { "login": "CoMPaTech", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5751088?v=4", "type": "User" }, { "login": "der-stefan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3618939?v=4", "type": "User" }, { "login": "AndyTaylorTweet", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/18753260?v=4", "type": "User" }, { "login": "hax404", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1379411?v=4", "type": "User" }, { "login": "maushammer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18044422?v=4", "type": "User" }, { "login": "on3svb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/31344794?v=4", "type": "User" }, { "login": "shawnchain", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45704?v=4", "type": "User" } ] }, { "repo": "christophetd/censys-subdomain-finder", "name": "censys-subdomain-finder", "owner": "christophetd", "url": "https://github.com/christophetd/censys-subdomain-finder", "id": "ad8c58f1eb05", "stars": 842, "language": "Python", "description": "⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.", "type": "tool", "pushedAt": "2025-05-01T09:19:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "christophetd", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "darx0r", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/14977413?v=4", "type": "User" }, { "login": "melardev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18094815?v=4", "type": "User" }, { "login": "ajmeese7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17814535?v=4", "type": "User" }, { "login": "AmrMonier", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43762965?v=4", "type": "User" } ] }, { "repo": "0xdea/semgrep-rules", "name": "semgrep-rules", "owner": "0xdea", "url": "https://github.com/0xdea/semgrep-rules", "id": "986c3c87c3d4", "stars": 840, "language": "C", "description": "A collection of my Semgrep rules to facilitate vulnerability research.", "type": "tool", "pushedAt": "2026-07-16T06:08:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "0xdea", "c": 731, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" }, { "login": "efortuna", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2112792?v=4", "type": "User" }, { "login": "parsiya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3981231?v=4", "type": "User" }, { "login": "9iang22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48987398?v=4", "type": "User" } ] }, { "repo": "ccob/threadlessinject", "name": "threadlessinject", "owner": "ccob", "url": "https://github.com/CCob/ThreadlessInject", "stars": 825, "language": "C#", "description": "Threadless Process Injection using remote function hooking. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09a2899cd514", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-04T17:11:58Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "idov31/sandman", "name": "sandman", "owner": "idov31", "url": "https://github.com/Idov31/Sandman", "stars": 817, "language": "C#", "description": "Sandman is a NTP based backdoor for hardened networks.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "544150f9e96d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-31T17:40:15Z", "archived": false, "topContributors": [ { "login": "Idov31", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "bert-janp/incident-response-powershell", "name": "Incident-Response-Powershell", "owner": "Bert-JanP", "url": "https://github.com/Bert-JanP/Incident-Response-Powershell", "id": "ea8c427aaccc", "stars": 804, "language": "PowerShell", "description": "PowerShell Digital Forensics & Incident Response Scripts.", "type": "tool", "pushedAt": "2026-05-26T17:46:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Bert-Jan", "cardId": "e1f38ecc5b81613f", "avatar": "https://avatars.githubusercontent.com/u/91258706?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "Bert-JanP", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/91258706?v=4", "type": "User" }, { "login": "JakePeralta7", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/58475124?v=4", "type": "User" }, { "login": "flimbot", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/4925113?v=4", "type": "User" }, { "login": "ank0ku", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/103283500?v=4", "type": "User" }, { "login": "edmond-nader", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49365047?v=4", "type": "User" } ] }, { "repo": "rolfrolles/hexraysdeob", "name": "HexRaysDeob", "owner": "RolfRolles", "url": "https://github.com/RolfRolles/HexRaysDeob", "id": "38c6961df48d", "stars": 803, "language": "C++", "description": "Hex-Rays microcode API plugin for breaking an obfuscating compiler", "type": "tool", "pushedAt": "2021-02-22T03:02:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rolf Rolles", "cardId": "c28c691cb82760e4", "avatar": "https://avatars.githubusercontent.com/u/680819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ryan Stortz", "cardId": "050e1a357b1bbabc", "avatar": "https://avatars.githubusercontent.com/u/4872355?v=4", "login": "withzombies" } ], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "RolfRolles", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/680819?v=4", "type": "User" }, { "login": "eugenekolo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2424426?v=4", "type": "User" }, { "login": "withzombies", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4872355?v=4", "type": "User" }, { "login": "wnxd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14256387?v=4", "type": "User" } ] }, { "repo": "0x09al/raven", "name": "raven", "owner": "0x09AL", "url": "https://github.com/0x09AL/raven", "id": "2668b309ce2c", "stars": 798, "language": "Go", "description": "raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.", "type": "tool", "pushedAt": "2020-05-18T20:19:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x09AL", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "ccob/bof.net", "name": "bof.net", "owner": "ccob", "url": "https://github.com/CCob/BOF.NET", "stars": 785, "language": "C", "description": "A .NET Runtime for Cobalt Strike's Beacon Object Files", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2d3b06bf1eeb", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-04T17:10:23Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "vanhoefm/airsnitch", "name": "airsnitch", "owner": "vanhoefm", "url": "https://github.com/vanhoefm/airsnitch", "id": "8e14712fee10", "stars": 776, "language": "C", "description": "Generalized Wi-Fi Client Isolation Bypasses", "type": "tool", "pushedAt": "2026-03-13T20:05:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mathy Vanhoef", "cardId": "502b97785f3c5b6d", "avatar": "https://avatars.githubusercontent.com/u/637995?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "zhouxinan", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/1636502?v=4", "type": "User" }, { "login": "vanhoefm", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/637995?v=4", "type": "User" } ] }, { "repo": "tihmstar/tsschecker", "name": "tsschecker", "owner": "tihmstar", "url": "https://github.com/tihmstar/tsschecker", "id": "87563e5c0645", "stars": 764, "language": "C++", "description": "a powerfull tool to check tss signing status of various devices and firmwares", "type": "tool", "pushedAt": "2024-08-06T13:24:46Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tihmstar", "cardId": "f757d3b21c2ac97c", "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 21, "topContributors": [ { "login": "tihmstar", "c": 242, "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4", "type": "User" }, { "login": "s0uthwest", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/42713499?v=4", "type": "User" }, { "login": "Siguza", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1659374?v=4", "type": "User" }, { "login": "DanTheMann15", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/51378736?v=4", "type": "User" }, { "login": "malt3", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1780588?v=4", "type": "User" }, { "login": "ESResearchDepartment", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/108614663?v=4", "type": "User" }, { "login": "OothecaPickle", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/14017365?v=4", "type": "User" }, { "login": "1Conan", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7620342?v=4", "type": "User" }, { "login": "matteyeux", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8758978?v=4", "type": "User" }, { "login": "doggy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/443524?v=4", "type": "User" }, { "login": "nikias", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/460105?v=4", "type": "User" }, { "login": "encounter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/549122?v=4", "type": "User" }, { "login": "BryanSuero", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1574618?v=4", "type": "User" }, { "login": "0x9fff00", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10777601?v=4", "type": "User" }, { "login": "arx8x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16128407?v=4", "type": "User" }, { "login": "alvarofe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3474042?v=4", "type": "User" }, { "login": "0x15f", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17521434?v=4", "type": "User" }, { "login": "kasiimh1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23532883?v=4", "type": "User" }, { "login": "PythEch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/889400?v=4", "type": "User" }, { "login": "reloxx13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14855001?v=4", "type": "User" }, { "login": "urherenow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6448336?v=4", "type": "User" } ] }, { "repo": "saelo/pwn2own2018", "name": "pwn2own2018", "owner": "saelo", "url": "https://github.com/saelo/pwn2own2018", "stars": 758, "language": "C", "description": "A Pwn2Own exploit chain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "827381c5cfbf", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-11-08T18:17:44Z", "archived": false, "topContributors": [ { "login": "saelo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "danielbohannon/revoke-obfuscation", "name": "Revoke-Obfuscation", "owner": "danielbohannon", "url": "https://github.com/danielbohannon/Revoke-Obfuscation", "id": "553d2a9e1267", "stars": 752, "language": "PowerShell", "description": "PowerShell Obfuscation Detection Framework", "type": "tool", "pushedAt": "2023-12-01T02:04:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daniel Bohannon", "cardId": "db10af0f1bbb1ec3", "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LeeHolmes", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/11475352?v=4", "type": "User" } ] }, { "repo": "lauriewired/jadxecute", "name": "JADXecute", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/JADXecute", "id": "92117f918eae", "stars": 741, "language": "Java", "description": "JADX-gui scripting plugin for dynamic decompiler manipulation", "type": "tool", "pushedAt": "2024-02-05T00:47:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "d4stiny/spectre", "name": "spectre", "owner": "d4stiny", "url": "https://github.com/D4stiny/spectre", "stars": 724, "language": "C++", "description": "A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b90c3fd875fb", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-05T07:33:33Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "carlospolop/purplepanda", "name": "purplepanda", "owner": "carlospolop", "url": "https://github.com/carlospolop/PurplePanda", "stars": 718, "language": "Python", "description": "Identify privilege escalation paths within and across different clouds", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8a09a01e45f1", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-07-11T09:03:46Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "njmulsqb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/47940898?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "lemontreeran", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6296022?v=4", "type": "User" } ] }, { "repo": "idov31/functionstomping", "name": "functionstomping", "owner": "idov31", "url": "https://github.com/Idov31/FunctionStomping", "stars": 705, "language": "Rust", "description": "Shellcode injection technique. Given as C++ header, standalone Rust program or library.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "590116c6393d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-26T18:06:33Z", "archived": true, "topContributors": [ { "login": "Idov31", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/shadow", "name": "shadow", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/shadow", "stars": 701, "language": "Rust", "description": "Windows Kernel Rootkit in Rust", "type": "tool", "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5add890d78e8", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-10T14:35:16Z", "archived": false, "topContributors": [ { "login": "joaoviictorti", "c": 212, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" }, { "login": "harryeetsource", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/95581121?v=4", "type": "User" } ] }, { "repo": "maddiestone/idapythonembeddedtoolkit", "name": "idapythonembeddedtoolkit", "owner": "maddiestone", "url": "https://github.com/maddiestone/IDAPythonEmbeddedToolkit", "stars": 688, "language": "Python", "description": "IDA Python Embedded Toolkit -- IDAPython scripts for automating analysis of firmware of embedded devices", "type": "tool", "lanes": [ "2" ], "author": { "name": "Maddie Stone", "cardId": "426e7f08da8edb5f", "avatar": "https://avatars.githubusercontent.com/u/684899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60324cd90861", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2019-08-14T03:18:11Z", "archived": false, "topContributors": [ { "login": "maddiestone", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/684899?v=4", "type": "User" }, { "login": "GodsJoy", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7964098?v=4", "type": "User" }, { "login": "tmr232", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1386239?v=4", "type": "User" } ] }, { "repo": "brompwnie/botb", "name": "botb", "owner": "brompwnie", "url": "https://github.com/brompwnie/botb", "id": "9a4a28f2abcf", "stars": 681, "language": "Go", "description": "A container analysis and exploitation tool for pentesters and engineers.", "type": "tool", "pushedAt": "2023-09-27T08:20:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "brompwnie", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" }, { "login": "KatsuragiCSL", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44156690?v=4", "type": "User" }, { "login": "mgsalesforce", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38082140?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "fs0c131y/esfileexploreropenportvuln", "name": "esfileexploreropenportvuln", "owner": "fs0c131y", "url": "https://github.com/fs0c131y/ESFileExplorerOpenPortVuln", "stars": 679, "language": "Python", "description": "ES File Explorer Open Port Vulnerability - CVE-2019-6447", "type": "tool", "lanes": [ "2" ], "author": { "name": "Baptiste Robert", "cardId": "4e39c1e7f599b1aa", "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3bd384390176", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-09-28T18:58:28Z", "archived": false, "topContributors": [ { "login": "fs0c131y", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4", "type": "User" }, { "login": "ayush-tulsyan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18593318?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" }, { "login": "timball", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39152?v=4", "type": "User" } ] }, { "repo": "thuyimingli/backdoorbox", "name": "backdoorbox", "owner": "thuyimingli", "url": "https://github.com/THUYimingLi/BackdoorBox", "stars": 677, "language": "Python", "description": "The open-sourced Python toolbox for backdoor attacks and defenses.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yiming Li", "cardId": "17e4afe2a5635d60", "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6071a2dafaa", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 19, "contributors": [], "pushedAt": "2025-09-27T17:04:04Z", "archived": false, "topContributors": [ { "login": "THUYimingLi", "c": 224, "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4", "type": "User" }, { "login": "yamengxi", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/49829199?v=4", "type": "User" }, { "login": "KuofengGao", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/97340537?v=4", "type": "User" }, { "login": "spicy1007", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/48708022?v=4", "type": "User" }, { "login": "GuanhaoGan", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/90738926?v=4", "type": "User" }, { "login": "cyndixxxxx", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/28332268?v=4", "type": "User" }, { "login": "LandAndLand", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/32730843?v=4", "type": "User" }, { "login": "HXZhong1997", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/33387338?v=4", "type": "User" }, { "login": "20000yshust", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/53862396?v=4", "type": "User" }, { "login": "Uooga", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/33107182?v=4", "type": "User" }, { "login": "WoooooZzy", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/148868672?v=4", "type": "User" }, { "login": "MingyanZHU", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36833128?v=4", "type": "User" }, { "login": "Songsci1024", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47665382?v=4", "type": "User" }, { "login": "WhitolfChen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/52879349?v=4", "type": "User" }, { "login": "persistz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12887616?v=4", "type": "User" }, { "login": "zhangkaibin0921", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82947463?v=4", "type": "User" }, { "login": "Chengxiao-Luo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56831317?v=4", "type": "User" }, { "login": "snyk-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19733683?v=4", "type": "User" }, { "login": "doris1007", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72058122?v=4", "type": "User" } ] }, { "repo": "linushenze/fugu", "name": "fugu", "owner": "linushenze", "url": "https://github.com/LinusHenze/Fugu", "stars": 671, "language": "C", "description": "Fugu is the first open source jailbreak based on the checkm8 exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Linus Henze", "cardId": "0a5e4cfe401615ab", "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "85b271c76b9a", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-11T00:47:15Z", "archived": true, "topContributors": [ { "login": "LinusHenze", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4", "type": "User" } ] }, { "repo": "johnhammond/recaptcha-phish", "name": "recaptcha-phish", "owner": "johnhammond", "url": "https://github.com/JohnHammond/recaptcha-phish", "stars": 653, "language": "HTML", "description": "Phishing with a fake reCAPTCHA", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bcd1b4fcddc1", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-13T11:18:29Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "utkusen/shotlooter", "name": "shotlooter", "owner": "utkusen", "url": "https://github.com/utkusen/shotlooter", "stars": 647, "language": "Python", "description": "a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc", "type": "tool", "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c136fe94548", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-23T16:07:49Z", "archived": false, "topContributors": [ { "login": "utkusen", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" }, { "login": "rxall", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11737008?v=4", "type": "User" } ] }, { "repo": "tijme/dittobytes", "name": "dittobytes", "owner": "tijme", "url": "https://github.com/tijme/dittobytes", "stars": 639, "language": "C++", "description": "Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "be7e7bddbb59", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-02T21:08:55Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 192, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "h4wkst3r/invisibilitycloak", "name": "invisibilitycloak", "owner": "h4wkst3r", "url": "https://github.com/h4wkst3r/InvisibilityCloak", "stars": 627, "language": "Python", "description": "Proof-of-concept obfuscation toolkit for C# post-exploitation tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Brett Hawkins", "cardId": "07f54625c3d2e4a7", "avatar": "https://avatars.githubusercontent.com/u/10802160?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "68997a428c78", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2022-07-22T14:13:53Z", "archived": false, "topContributors": [ { "login": "h4wkst3r", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10802160?v=4", "type": "User" }, { "login": "eremit4", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/37265495?v=4", "type": "User" }, { "login": "jabra-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/585965?v=4", "type": "User" } ] }, { "repo": "samyk/samytools", "name": "samytools", "owner": "samyk", "url": "https://github.com/samyk/samytools", "id": "e70e9e505d34", "stars": 621, "language": "Perl", "description": "Simple tools to make reverse engineering and console cowboying easier, primarily by data translation and manipulation + file handle piping. Mostly *nix tools with an emphasis on macOS.", "type": "tool", "pushedAt": "2026-04-30T21:16:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Samy Kamkar", "cardId": "4ce772bcaaa08c07", "avatar": "https://avatars.githubusercontent.com/u/411832?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "samyk", "c": 234, "avatar": "https://avatars.githubusercontent.com/u/411832?v=4", "type": "User" }, { "login": "mokus0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/607740?v=4", "type": "User" }, { "login": "khodges42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7422449?v=4", "type": "User" }, { "login": "rfc6919", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30193247?v=4", "type": "User" } ] }, { "repo": "torque59/nosql-exploitation-framework", "name": "Nosql-Exploitation-Framework", "owner": "torque59", "url": "https://github.com/torque59/Nosql-Exploitation-Framework", "id": "a6091aec9e9e", "stars": 605, "language": "Python", "description": "A Python Framework For NoSQL Scanning and Exploitation ", "type": "tool", "pushedAt": "2024-12-06T14:24:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Francis Alexander", "cardId": "375485c48c91ac12", "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "torque59", "c": 129, "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4", "type": "User" }, { "login": "pyup-bot", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16239342?v=4", "type": "User" }, { "login": "ajinabraham", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4301109?v=4", "type": "User" }, { "login": "Th3R3p0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7598178?v=4", "type": "User" }, { "login": "tacone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/659801?v=4", "type": "User" } ] }, { "repo": "valdikss/tor-relay-scanner", "name": "tor-relay-scanner", "owner": "valdikss", "url": "https://github.com/ValdikSS/tor-relay-scanner", "stars": 600, "language": "Python", "description": "Tor Relay availability checker, for using it as a bridge in countries with censorship", "type": "tool", "lanes": [ "2" ], "author": { "name": "ValdikSS", "cardId": "c76eaa2d709872a9", "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f912e4e61f4d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-07-10T16:47:09Z", "archived": false, "topContributors": [ { "login": "ValdikSS", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "type": "User" }, { "login": "wildekat", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1102981?v=4", "type": "User" }, { "login": "beeyev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/326840?v=4", "type": "User" }, { "login": "gp2112", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26512375?v=4", "type": "User" }, { "login": "spalinger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17059996?v=4", "type": "User" } ] }, { "repo": "joelgmsec/invoke-stealth", "name": "Invoke-Stealth", "owner": "JoelGMSec", "url": "https://github.com/JoelGMSec/Invoke-Stealth", "id": "c03e73a87349", "stars": 594, "language": "PowerShell", "description": "Simple & Powerful PowerShell Script Obfuscator", "type": "tool", "pushedAt": "2025-05-13T19:36:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JoelGMSec", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" } ] }, { "repo": "netspi/powershell", "name": "PowerShell", "owner": "NetSPI", "url": "https://github.com/NetSPI/PowerShell", "id": "5ca19477a2c7", "stars": 345, "language": "PowerShell", "description": "NetSPI PowerShell Scripts", "type": "tool", "pushedAt": "2026-02-10T21:13:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Karl Fosaaen", "cardId": "e43baf62974d03ca", "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "login": "kfosaaen" } ], "adoptionOperators": 78, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "nullbind", "c": 291, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" }, { "login": "kfosaaen", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "type": "User" }, { "login": "RyanGandrud", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2633299?v=4", "type": "User" }, { "login": "egru", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" }, { "login": "catpipeless", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/62567556?v=4", "type": "User" }, { "login": "j4w", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12706559?v=4", "type": "User" }, { "login": "aph3rson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/838916?v=4", "type": "User" }, { "login": "redj0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24319367?v=4", "type": "User" }, { "login": "Barriuso", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16231048?v=4", "type": "User" }, { "login": "bdrecktrah", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85498000?v=4", "type": "User" }, { "login": "robertson-k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/87087315?v=4", "type": "User" }, { "login": "sazabel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/94011877?v=4", "type": "User" }, { "login": "zloether", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/149006?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/shadowcoerce", "name": "shadowcoerce", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/ShadowCoerce", "stars": 302, "language": "Python", "description": "MS-FSRVP coercion abuse PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e20df414a97d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-30T17:43:18Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" } ] }, { "repo": "mubix/netview", "name": "netview", "owner": "mubix", "url": "https://github.com/mubix/netview", "id": "3bf73fdf9d26", "stars": 301, "language": "C++", "description": "Netview enumerates systems using WinAPI calls", "type": "tool", "pushedAt": "2022-01-30T22:00:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 1, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mubix", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "n1tr0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1993682?v=4", "type": "User" }, { "login": "tsluyter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8919371?v=4", "type": "User" } ] }, { "repo": "danmcinerney/dnsspoof", "name": "dnsspoof", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/dnsspoof", "id": "a1b53f0d2565", "stars": 293, "language": "Python", "description": "DNS spoofer. Drops DNS responses from the router and replaces it with the spoofed DNS response", "type": "tool", "pushedAt": "2017-04-16T11:03:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "linushenze/keysteal", "name": "keysteal", "owner": "linushenze", "url": "https://github.com/LinusHenze/Keysteal", "stars": 248, "language": "C++", "description": "A macOS <= 10.14.3 Keychain exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Linus Henze", "cardId": "0a5e4cfe401615ab", "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "92ae01fa83ca", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 3, "contributors": [], "pushedAt": "2019-06-03T21:15:11Z", "archived": true, "topContributors": [ { "login": "LinusHenze", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "voronaam", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2351069?v=4", "type": "User" } ] }, { "repo": "itm4n/pplrevenant", "name": "pplrevenant", "owner": "itm4n", "url": "https://github.com/itm4n/PPLrevenant", "stars": 181, "language": "C", "description": "Bypass LSA protection using the BYODLL technique", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4359c8c42eb2", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-21T10:08:56Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/next-16.2.4-pocs", "name": "next-16.2.4-pocs", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/next-16.2.4-pocs", "stars": 176, "language": "Python", "description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576,", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "736860052b6e", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-12T04:28:18Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/aggressor-script", "name": "aggressor-script", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/Aggressor-Script", "stars": 172, "language": "PowerShell", "description": "Collection of Aggressor Scripts for Cobalt Strike", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "57106c1a8317", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-08T14:33:12Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/rusty-playground", "name": "rusty-playground", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/Rusty-Playground", "stars": 160, "language": "Rust", "description": "Some Rust program I wrote while learning Malware Development ", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4b2aef100432", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-04T11:56:47Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "zephrfish/loladcs", "name": "loladcs", "owner": "zephrfish", "url": "https://github.com/ZephrFish/LOLADCS", "stars": 157, "language": "PowerShell", "description": "PowerShell implementation for AD CS ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eda822502214", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-02T02:39:19Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "tokyoneon/arcane", "name": "arcane", "owner": "tokyoneon", "url": "https://github.com/tokyoneon/Arcane", "stars": 155, "language": "Shell", "description": "Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories.", "type": "tool", "lanes": [ "2" ], "author": { "name": "tokyoneon", "cardId": "e2f68312160147fa", "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "796db7678915", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-04T02:33:34Z", "archived": false, "topContributors": [ { "login": "tokyoneon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/33106572?v=4", "type": "User" } ] }, { "repo": "logangoins/stifle", "name": "stifle", "owner": "logangoins", "url": "https://github.com/logangoins/Stifle", "stars": 153, "language": "C#", "description": ".NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1a2980d4378d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-10T04:58:46Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" } ] }, { "repo": "jackullrich/memfuck", "name": "memfuck", "owner": "jackullrich", "url": "https://github.com/jackullrich/memfuck", "stars": 149, "language": "C++", "description": "A PoC designed to bypass all usermode hooks in a WoW64 environment.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c95a17f3554e", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-16T17:19:19Z", "archived": false, "topContributors": [ { "login": "jackullrich", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/fisy-fuzz", "name": "fisy-fuzz", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/fisy-fuzz", "stars": 149, "language": "Python", "description": "This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April.", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e6d7c5f7bb2d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-07-03T07:51:23Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" }, { "login": "syedkhalid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2259118?v=4", "type": "User" } ] }, { "repo": "x-c3ll/xlsxpoison", "name": "xlsxpoison", "owner": "x-c3ll", "url": "https://github.com/X-C3LL/xlsxPoison", "stars": 144, "language": "C#", "description": "Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)", "type": "tool", "lanes": [ "2" ], "author": { "name": "X-C3LL", "cardId": "0dcc4174f290a01e", "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fa16c776a0f7", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-04T09:24:22Z", "archived": false, "topContributors": [ { "login": "X-C3LL", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4", "type": "User" } ] }, { "repo": "viralmaniar/peekaboo", "name": "PeekABoo", "owner": "Viralmaniar", "url": "https://github.com/Viralmaniar/PeekABoo", "id": "28db69daca14", "stars": 144, "language": "Python", "description": "PeekABoo tool can be used during internal penetration testing when a user needs to enable Remote Desktop on the targeted machine. It uses PowerShell remoting to perform this task. Note: Remote deskto", "type": "tool", "pushedAt": "2019-04-29T06:27:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Viralmaniar", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "zephrfish/qol-bofs", "name": "qol-bofs", "owner": "zephrfish", "url": "https://github.com/ZephrFish/QoL-BOFs", "stars": 140, "language": "C", "description": "Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "752d4a6b7bb7", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-12-07T01:34:03Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "ImgBotApp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" }, { "login": "yuyudhn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116321902?v=4", "type": "User" } ] }, { "repo": "diversenok/suspending-techniques", "name": "Suspending-Techniques", "owner": "diversenok", "url": "https://github.com/diversenok/Suspending-Techniques", "id": "a73bc63da5c1", "stars": 138, "language": "Pascal", "description": "Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.", "type": "tool", "pushedAt": "2021-11-10T21:54:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "diversenok", "cardId": "d7f71751ee2709e6", "avatar": "https://avatars.githubusercontent.com/u/30962924?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "diversenok", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/30962924?v=4", "type": "User" } ] }, { "repo": "zhuowei/hvdecompile", "name": "HvDecompile", "owner": "zhuowei", "url": "https://github.com/zhuowei/HvDecompile", "id": "b14033366cfb", "stars": 134, "language": "Objective-C", "description": "Decompiling macOS Hypervisor.framework by hand", "type": "tool", "pushedAt": "2022-09-13T06:05:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "zhuowei", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/sloth", "name": "Sloth", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/Sloth", "id": "903a8cf776b7", "stars": 131, "language": "C++", "description": "Sloth 🦥 is a coverage guided fuzzing framework for fuzzing Android Native libraries that makes use of libFuzzer and QEMU user-mode emulation", "type": "tool", "pushedAt": "2023-09-18T03:12:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ant4g0nist", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "alfiecg24/trigon", "name": "trigon", "owner": "alfiecg24", "url": "https://github.com/alfiecg24/Trigon", "stars": 129, "language": "C", "description": "Deterministic kernel exploit based on CVE-2023-32434.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alfie CG", "cardId": "5ea5559470b332c7", "avatar": "https://avatars.githubusercontent.com/u/63724031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "929389db278b", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-14T20:54:50Z", "archived": false, "topContributors": [ { "login": "alfiecg24", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/63724031?v=4", "type": "User" }, { "login": "staturnzz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/118011249?v=4", "type": "User" } ] }, { "repo": "theevilbit/malware", "name": "malware", "owner": "theevilbit", "url": "https://github.com/theevilbit/malware", "stars": 2, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2bce3ee29e0e", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-06-23T07:06:06Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "theevilbit/immunity_scripts", "name": "immunity_scripts", "owner": "theevilbit", "url": "https://github.com/theevilbit/immunity_scripts", "stars": 2, "language": "Python", "description": "Scripts for Immunity Debugger", "type": "tool", "lanes": [ "2" ], "author": { "name": "Csaba Fitzl", "cardId": "67daaadda311641b", "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7bd083b16106", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-05-16T20:40:47Z", "archived": false, "topContributors": [ { "login": "theevilbit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10151085?v=4", "type": "User" } ] }, { "repo": "jonasbk/exchange-ad-acl-testing", "name": "exchange-ad-acl-testing", "owner": "jonasbk", "url": "https://github.com/JonasBK/Exchange-AD-ACL-testing", "stars": 2, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f209acf1197c", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-22T07:17:30Z", "archived": false, "topContributors": [ { "login": "JonasBK", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" } ] }, { "repo": "bandrel/hashcatrosetta", "name": "hashcatrosetta", "owner": "bandrel", "url": "https://github.com/bandrel/HashcatRosetta", "stars": 2, "language": "Python", "description": "Hashcat rule analyzer and interpreter - A Rosetta Stone for decoding hashcat rule syntax", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dbe1cfa68ad5", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-15T22:38:54Z", "archived": false, "topContributors": [ { "login": "bandrel", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" } ] }, { "repo": "frichetten/cut-out-c2", "name": "cut-out-c2", "owner": "frichetten", "url": "https://github.com/Frichetten/Cut-Out-C2", "stars": 2, "language": "JavaScript", "description": "Covert command and control system for Red-Team Operations", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Frichette", "cardId": "7beb2b9170e5b0f7", "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "27629f54b928", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-12T17:26:18Z", "archived": false, "topContributors": [ { "login": "Frichetten", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10386884?v=4", "type": "User" } ] }, { "repo": "subat0mik/shellcode-runners", "name": "shellcode-runners", "owner": "subat0mik", "url": "https://github.com/subat0mik/shellcode-runners", "stars": 2, "language": "PowerShell", "description": "Various shellcode runners", "type": "tool", "lanes": [ "2" ], "author": { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c3298de2b961", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-14T06:09:15Z", "archived": false, "topContributors": [ { "login": "subat0mik", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" } ] }, { "repo": "d00mfist/cve-2019-8656", "name": "cve-2019-8656", "owner": "d00mfist", "url": "https://github.com/D00MFist/CVE-2019-8656", "stars": 2, "language": "Shell", "description": "CVE-2019-8656 GateKeeper Bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f2cbc62fad2a", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-22T14:12:51Z", "archived": false, "topContributors": [ { "login": "D00MFist", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" } ] }, { "repo": "d00mfist/windows-privesc-check", "name": "windows-privesc-check", "owner": "d00mfist", "url": "https://github.com/D00MFist/windows-privesc-check", "stars": 2, "language": "Python", "description": "Automatically exported from code.google.com/p/windows-privesc-check", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a58d51091106", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2016-02-24T02:52:21Z", "archived": false, "topContributors": [] }, { "repo": "pn-tester/clipghost", "name": "clipghost", "owner": "pn-tester", "url": "https://github.com/PN-Tester/ClipGhost", "stars": 2, "language": "C#", "description": "Offensive clipboard history tool for windows", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pierre Nicolas Allard Coutu", "cardId": "d7d4eaa8ecdead31", "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "613527e47227", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-30T16:27:20Z", "archived": false, "topContributors": [ { "login": "PN-Tester", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/95763550?v=4", "type": "User" } ] }, { "repo": "senderend/ludus-freeipa-ad-trust-range", "name": "ludus-freeipa-ad-trust-range", "owner": "senderend", "url": "https://github.com/senderend/ludus-freeipa-ad-trust-range", "stars": 2, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "612f557b851d", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-18T07:36:01Z", "archived": false, "topContributors": [ { "login": "senderend", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" } ] }, { "repo": "synzack/cobalt-strike-aggressor-scripts", "name": "cobalt-strike-aggressor-scripts", "owner": "synzack", "url": "https://github.com/Synzack/Cobalt-Strike-Aggressor-Scripts", "stars": 2, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zach Stein", "cardId": "ed58244eaf4a39ed", "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64713e7225c1", "score": 33, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-20T12:27:03Z", "archived": false, "topContributors": [ { "login": "Synzack", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/51035066?v=4", "type": "User" } ] }, { "repo": "scriptingxss/owasp-fstm", "name": "owasp-fstm", "owner": "scriptingxss", "url": "https://github.com/scriptingxss/owasp-fstm", "stars": 479, "language": null, "description": "The Firmware Security Testing Methodology (FSTM) is composed of nine stages tailored to enable security researchers, software developers, consultants, and Information Security professionals with condu", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Aaron Guzman", "cardId": "2e92c22761520641", "avatar": "https://avatars.githubusercontent.com/u/18707651?v=4" }, "referencedBy": [ { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42886/", "title": "CVE-2021-42886: TOTOLINK EX1200T Information disclosure vulnerability", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42889/", "title": "CVE-2021-42889: Access Points information leak", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42890/", "title": "CVE-2021-42890: Hostime Remote Command Injection", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42887/", "title": "CVE-2021-42887: TOTOLINK EX1200T LOGIN BYPASS", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42888/", "title": "CVE-2021-42888: TOTOLINK EX1200T Remote Command Injection", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42885/", "title": "CVE-2021-42885: deviceMac Remote Command Injection", "person": "Zer0verflow" } ], "referencedCount": 6, "id": "7dcfa61a0731", "score": 32, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-06-08T00:42:37Z", "archived": false, "topContributors": [ { "login": "scriptingxss", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/18707651?v=4", "type": "User" }, { "login": "m-1-k-3", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/497520?v=4", "type": "User" }, { "login": "M2ayill", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/22850233?v=4", "type": "User" }, { "login": "cq674350529", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13868458?v=4", "type": "User" }, { "login": "p4cx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17053360?v=4", "type": "User" } ] }, { "repo": "zhuowei/qemu", "name": "qemu", "owner": "zhuowei", "url": "https://github.com/zhuowei/qemu", "stars": 98, "language": "C", "description": "Patched version of QEMU for exploring XNU arm64 emulation.", "type": "tool", "lanes": [ "1" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [ { "url": "https://worthdoingbadly.com/xnuqemu3/", "title": "Booting a macOS Apple Silicon kernel in QEMU", "person": "worthdoingbadly" }, { "url": "https://worthdoingbadly.com/xnuqemu2/", "title": "Tutorial - emulate an iOS kernel in QEMU up to launchd and userspace", "person": "worthdoingbadly" } ], "referencedCount": 2, "id": "ada48d113896", "score": 32, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [], "pushedAt": "2024-01-21T23:49:50Z", "archived": false, "topContributors": [ { "login": "pm215", "c": 5176, "avatar": "https://avatars.githubusercontent.com/u/1682716?v=4", "type": "User" }, { "login": "bonzini", "c": 2965, "avatar": "https://avatars.githubusercontent.com/u/42082?v=4", "type": "User" }, { "login": "rth7680", "c": 2370, "avatar": "https://avatars.githubusercontent.com/u/2529319?v=4", "type": "User" }, { "login": "aliguori", "c": 2133, "avatar": "https://avatars.githubusercontent.com/u/1153185?v=4", "type": "User" }, { "login": "kraxel", "c": 2024, "avatar": "https://avatars.githubusercontent.com/u/2860401?v=4", "type": "User" }, { "login": "blueswirl", "c": 1821, "avatar": "https://avatars.githubusercontent.com/u/2138581?v=4", "type": "User" }, { "login": "kevmw", "c": 1725, "avatar": "https://avatars.githubusercontent.com/u/166709685?v=4", "type": "User" }, { "login": "aurel32", "c": 1723, "avatar": "https://avatars.githubusercontent.com/u/7688913?v=4", "type": "User" }, { "login": "afaerber", "c": 1336, "avatar": "https://avatars.githubusercontent.com/u/309527?v=4", "type": "User" }, { "login": "elmarco", "c": 1029, "avatar": "https://avatars.githubusercontent.com/u/9381?v=4", "type": "User" }, { "login": "mstsirkin", "c": 823, "avatar": "https://avatars.githubusercontent.com/u/1062804?v=4", "type": "User" }, { "login": "stefanhaRH", "c": 805, "avatar": "https://avatars.githubusercontent.com/u/162364839?v=4", "type": "User" }, { "login": "jan-kiszka", "c": 794, "avatar": "https://avatars.githubusercontent.com/u/1571330?v=4", "type": "User" }, { "login": "ebblake", "c": 788, "avatar": "https://avatars.githubusercontent.com/u/32933908?v=4", "type": "User" }, { "login": "XanClic", "c": 764, "avatar": "https://avatars.githubusercontent.com/u/3393978?v=4", "type": "User" }, { "login": "ehabkost", "c": 748, "avatar": "https://avatars.githubusercontent.com/u/27336?v=4", "type": "User" }, { "login": "berrange", "c": 697, "avatar": "https://avatars.githubusercontent.com/u/1517315?v=4", "type": "User" }, { "login": "agraf", "c": 663, "avatar": "https://avatars.githubusercontent.com/u/367209?v=4", "type": "User" }, { "login": "stweil", "c": 638, "avatar": "https://avatars.githubusercontent.com/u/6734573?v=4", "type": "User" }, { "login": "dgibson", "c": 606, "avatar": "https://avatars.githubusercontent.com/u/676485?v=4", "type": "User" }, { "login": "huth", "c": 558, "avatar": "https://avatars.githubusercontent.com/u/681184?v=4", "type": "User" }, { "login": "edgarigl", "c": 558, "avatar": "https://avatars.githubusercontent.com/u/86901?v=4", "type": "User" }, { "login": "philmd", "c": 488, "avatar": "https://avatars.githubusercontent.com/u/71631?v=4", "type": "User" }, { "login": "balrog-kun", "c": 483, "avatar": "https://avatars.githubusercontent.com/u/387877?v=4", "type": "User" }, { "login": "avikivity", "c": 459, "avatar": "https://avatars.githubusercontent.com/u/1017210?v=4", "type": "User" }, { "login": "vivier", "c": 441, "avatar": "https://avatars.githubusercontent.com/u/380813?v=4", "type": "User" }, { "login": "pete128", "c": 403, "avatar": "https://avatars.githubusercontent.com/u/1028936?v=4", "type": "User" }, { "login": "jnsnow", "c": 400, "avatar": "https://avatars.githubusercontent.com/u/656731?v=4", "type": "User" }, { "login": "dagrh", "c": 386, "avatar": "https://avatars.githubusercontent.com/u/6329760?v=4", "type": "User" }, { "login": "stsquad", "c": 360, "avatar": "https://avatars.githubusercontent.com/u/22458?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/slackcat", "name": "slackcat", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/slackcat", "stars": 117, "language": "Go", "description": "A simple way of sending messages from the CLI output to your Slack with webhook.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [ { "url": "https://dw1.io/blog/2020/09/12/continuous-nuclei/", "title": "How to Scan Continuously with Nuclei?", "person": "Dwi Siswanto" } ], "referencedCount": 1, "id": "c25fc4ae587e", "score": 32, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-13T11:17:03Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "viralmaniar/hivejack", "name": "hivejack", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/HiveJack", "stars": 111, "language": "C#", "description": "This tool can be used during internal penetration testing to dump Windows credentials from an already-compromised host. It allows one to dump SYSTEM, SECURITY and SAM hives and once copied to the atta", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [ { "url": "https://viralmaniar.github.io/lotl/edr/internal%20pentest/HiveJack/", "title": "HiveJack", "person": "Viral Maniar" } ], "referencedCount": 1, "id": "2807543e7f21", "score": 32, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-24T12:12:05Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "brmkit/toastnotify-bof", "name": "toastnotify-bof", "owner": "brmkit", "url": "https://github.com/brmkit/toastnotify-bof", "stars": 105, "language": "C", "description": "abusing windows toast notifications for fun and user manipulation", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "_brmkit", "cardId": "e5df5d93846412ff", "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4" }, "referencedBy": [ { "url": "https://ipurple.team/2026/03/25/toast-notifications/", "title": "Toast Notifications", "person": "Panos Gkatziroulis 🦄" } ], "referencedCount": 1, "id": "6e578cfc8f3a", "score": 32, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-11T17:04:51Z", "archived": false, "topContributors": [ { "login": "brmkit", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4", "type": "User" }, { "login": "chryzsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" } ] }, { "repo": "smicallef/spiderfoot", "name": "spiderfoot", "owner": "smicallef", "url": "https://github.com/smicallef/spiderfoot", "stars": 19728, "language": "Python", "description": "SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Steve Micallef", "cardId": "584d9127dfac2780", "avatar": "https://avatars.githubusercontent.com/u/1687345?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "96e521382357", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 52, "contributors": [ { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" } ], "pushedAt": "2026-04-13T19:43:06Z", "archived": false, "topContributors": [ { "login": "smicallef", "c": 2199, "avatar": "https://avatars.githubusercontent.com/u/1687345?v=4", "type": "User" }, { "login": "bcoles", "c": 934, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "krishnasism", "c": 352, "avatar": "https://avatars.githubusercontent.com/u/21293324?v=4", "type": "User" }, { "login": "amrawadk", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/29049599?v=4", "type": "User" }, { "login": "leotrubach", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/890689?v=4", "type": "User" }, { "login": "TheTechromancer", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/20261699?v=4", "type": "User" }, { "login": "Gormogon", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/8905868?v=4", "type": "User" }, { "login": "faleksic", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/14061953?v=4", "type": "User" }, { "login": "ikp4success", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/7339334?v=4", "type": "User" }, { "login": "miaoski", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1225613?v=4", "type": "User" }, { "login": "cclauss", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "RootUp", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" }, { "login": "fallingcubes", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/64852317?v=4", "type": "User" }, { "login": "gboddin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4395092?v=4", "type": "User" }, { "login": "datasiph0n", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9292934?v=4", "type": "User" }, { "login": "Anthirian", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/704388?v=4", "type": "User" }, { "login": "code-review-doctor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/72647856?v=4", "type": "User" }, { "login": "ccsplit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2328721?v=4", "type": "User" }, { "login": "Rb64", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91498309?v=4", "type": "User" }, { "login": "RA80533", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32469082?v=4", "type": "User" }, { "login": "p-l-", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5064814?v=4", "type": "User" }, { "login": "mscherer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/230335?v=4", "type": "User" }, { "login": "bradchiappetta", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38439955?v=4", "type": "User" }, { "login": "cudeso", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/256028?v=4", "type": "User" }, { "login": "latsku", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/721875?v=4", "type": "User" }, { "login": "MarioVilas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/227923?v=4", "type": "User" }, { "login": "woodrad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1410765?v=4", "type": "User" }, { "login": "mandreko-ts", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45574076?v=4", "type": "User" }, { "login": "swedishmike", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8100625?v=4", "type": "User" }, { "login": "TheCrott", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3626597?v=4", "type": "User" } ] }, { "repo": "mxrch/ghunt", "name": "ghunt", "owner": "mxrch", "url": "https://github.com/mxrch/GHunt", "stars": 19230, "language": "Python", "description": "🕵️‍♂️ Offensive Google framework.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a7ae48551841", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 34, "contributors": [ { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "login": "soxoj" } ], "pushedAt": "2026-04-10T02:29:16Z", "archived": false, "topContributors": [ { "login": "mxrch", "c": 258, "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "type": "User" }, { "login": "NikolozCh", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/29595315?v=4", "type": "User" }, { "login": "ItsIgnacioPortal", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/46269721?v=4", "type": "User" }, { "login": "christianboyle", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1605754?v=4", "type": "User" }, { "login": "outime", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/62993?v=4", "type": "User" }, { "login": "ctrlsam", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/14855544?v=4", "type": "User" }, { "login": "hmikihth", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/79752640?v=4", "type": "User" }, { "login": "Mancy", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/353893?v=4", "type": "User" }, { "login": "Andrew-Chen-Wang", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60190294?v=4", "type": "User" }, { "login": "Epieos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/69537604?v=4", "type": "User" }, { "login": "anatolec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/90203392?v=4", "type": "User" }, { "login": "soxoj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "0xadam", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1761882?v=4", "type": "User" }, { "login": "Gh0u1L5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5785029?v=4", "type": "User" }, { "login": "HenkPoley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2931213?v=4", "type": "User" }, { "login": "4383", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1541489?v=4", "type": "User" }, { "login": "SaiKrishna0506", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16369381?v=4", "type": "User" }, { "login": "marin-m", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25437947?v=4", "type": "User" }, { "login": "titoesteves", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8153364?v=4", "type": "User" }, { "login": "Reelix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/289404?v=4", "type": "User" }, { "login": "ahmedh-i", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85946129?v=4", "type": "User" }, { "login": "SayanthD", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13906889?v=4", "type": "User" }, { "login": "tpetry", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/315686?v=4", "type": "User" }, { "login": "yldbouk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18275345?v=4", "type": "User" }, { "login": "ahmadhany", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25612085?v=4", "type": "User" }, { "login": "amydosomething", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/170425443?v=4", "type": "User" }, { "login": "ant1k9", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56701963?v=4", "type": "User" }, { "login": "kevinadhiguna", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43397636?v=4", "type": "User" }, { "login": "noalexan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/102285721?v=4", "type": "User" }, { "login": "pykereaper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74609327?v=4", "type": "User" } ] }, { "repo": "johnhammond/poor-mans-pentest", "name": "poor-mans-pentest", "owner": "johnhammond", "url": "https://github.com/JohnHammond/poor-mans-pentest", "stars": 580, "language": "Shell", "description": "This a collection of the code that I have written for the Poor Man's Pentest presentation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "43479b87d490", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2021-05-18T14:42:26Z", "archived": true, "topContributors": [ { "login": "JohnHammond", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" }, { "login": "TimDOtt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/63533217?v=4", "type": "User" }, { "login": "andreiverse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35298550?v=4", "type": "User" } ] }, { "repo": "xairy/easy-linux-pwn", "name": "easy-linux-pwn", "owner": "xairy", "url": "https://github.com/xairy/easy-linux-pwn", "id": "a0d13fc0b901", "stars": 556, "language": "Python", "description": "A set of Linux binary exploitation tasks for beginners on various architectures", "type": "tool", "pushedAt": "2021-12-26T23:55:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrey Konovalov", "cardId": "248dd96652a047b6", "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xairy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4965052?v=4", "type": "User" } ] }, { "repo": "0x09al/iis-raid", "name": "iis-raid", "owner": "0x09al", "url": "https://github.com/0x09AL/IIS-Raid", "stars": 555, "language": "C++", "description": "A native backdoor module for Microsoft IIS (Internet Information Services)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "91f5bc2939f3", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-03T13:31:42Z", "archived": false, "topContributors": [ { "login": "0x09AL", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "lauriewired/ios_reverse_engineering", "name": "iOS_Reverse_Engineering", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/iOS_Reverse_Engineering", "id": "2a9d8efc821f", "stars": 555, "language": "Python", "description": "The iOS IPA file Reverse Engineering reference", "type": "tool", "pushedAt": "2024-01-29T05:57:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "mitre-attack/attack-arsenal", "name": "attack-arsenal", "owner": "mitre-attack", "url": "https://github.com/mitre-attack/attack-arsenal", "stars": 540, "language": "PowerShell", "description": "A collection of red team and adversary emulation resources developed and released by MITRE.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Pennington", "cardId": "a6a1f6969df739fb", "avatar": "https://avatars.githubusercontent.com/u/43272913?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1d3ce78b9c34", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2021-04-20T15:05:25Z", "archived": false, "topContributors": [ { "login": "jcwilliamsATmitre", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/36889852?v=4", "type": "User" }, { "login": "leegengyu", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/35021368?v=4", "type": "User" }, { "login": "Bojak4616", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9453676?v=4", "type": "User" }, { "login": "afcidk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21095621?v=4", "type": "User" } ] }, { "repo": "christruncer/pentestscripts", "name": "PenTestScripts", "owner": "ChrisTruncer", "url": "https://github.com/ChrisTruncer/PenTestScripts", "id": "3bbbe3874a1b", "stars": 540, "language": "Python", "description": "Scripts that are useful for me on pen tests", "type": "tool", "pushedAt": "2022-06-08T19:01:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christopher Truncer", "cardId": "b422714966d948cf", "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ChrisTruncer", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "type": "User" } ] }, { "repo": "leo4j/invoke-adenum", "name": "Invoke-ADEnum", "owner": "Leo4j", "url": "https://github.com/Leo4j/Invoke-ADEnum", "id": "9e8b0359967f", "stars": 539, "language": "PowerShell", "description": "Active Directory Auditing and Enumeration", "type": "tool", "pushedAt": "2026-06-12T10:29:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Leo4j", "c": 521, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "rhynorater/cve-2018-15473-exploit", "name": "cve-2018-15473-exploit", "owner": "rhynorater", "url": "https://github.com/Rhynorater/CVE-2018-15473-Exploit", "stars": 534, "language": "Python", "description": "Exploit written in Python for CVE-2018-15473 with threading and export formats", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Gardner", "cardId": "938d5ac8a05122a1", "avatar": "https://avatars.githubusercontent.com/u/2998191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "512ac60bd7ad", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2024-07-12T08:47:49Z", "archived": false, "topContributors": [ { "login": "Rhynorater", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2998191?v=4", "type": "User" }, { "login": "techgaun", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1886670?v=4", "type": "User" }, { "login": "KonradIT", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5891284?v=4", "type": "User" }, { "login": "craig", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/99729?v=4", "type": "User" }, { "login": "ilyaglow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1165242?v=4", "type": "User" } ] }, { "repo": "ang13t/skytrack", "name": "skytrack", "owner": "ang13t", "url": "https://github.com/ANG13T/skytrack", "stars": 533, "language": "Python", "description": "skytrack is a planespotting and aircraft OSINT tool made using Python 🛩🔍", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a8afeac48b0b", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-19T20:15:20Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "mubix/post-exploitation-wiki", "name": "post-exploitation-wiki", "owner": "mubix", "url": "https://github.com/mubix/post-exploitation-wiki", "id": "24f7d92b4f9c", "stars": 527, "language": "HTML", "description": "Post Exploitation Wiki", "type": "tool", "pushedAt": "2019-12-18T18:47:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "mubix", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "WebBreacher", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/2359093?v=4", "type": "User" }, { "login": "jakxx", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/1746973?v=4", "type": "User" }, { "login": "tekwizz123", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/2746189?v=4", "type": "User" }, { "login": "wireghoul", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/92534?v=4", "type": "User" }, { "login": "lvergergsk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24945742?v=4", "type": "User" } ] }, { "repo": "kyleavery/inject-assembly", "name": "inject-assembly", "owner": "kyleavery", "url": "https://github.com/kyleavery/inject-assembly", "id": "453d0af3708d", "stars": 508, "language": "C", "description": "Inject .NET assemblies into an existing process", "type": "tool", "pushedAt": "2022-01-19T19:15:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "qtc-de/beanshooter", "name": "beanshooter", "owner": "qtc-de", "url": "https://github.com/qtc-de/beanshooter", "id": "6b127dd7dfc4", "stars": 507, "language": "Java", "description": "JMX enumeration and attacking tool.", "type": "tool", "pushedAt": "2025-06-26T13:57:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "qtc-de", "c": 445, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" } ] }, { "repo": "chompie1337/windows_lpe_afd_cve-2023-21768", "name": "windows_lpe_afd_cve-2023-21768", "owner": "chompie1337", "url": "https://github.com/chompie1337/Windows_LPE_AFD_CVE-2023-21768", "stars": 506, "language": "C", "description": "LPE exploit for CVE-2023-21768", "type": "tool", "lanes": [ "2" ], "author": { "name": "Valentina Palmiotti", "cardId": "44ba26b4768bf26a", "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4178b9cdc7ad", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-10T16:35:49Z", "archived": false, "topContributors": [ { "login": "chompie1337", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4", "type": "User" } ] }, { "repo": "wietze/windows-dll-hijacking", "name": "windows-dll-hijacking", "owner": "wietze", "url": "https://github.com/wietze/windows-dll-hijacking", "stars": 495, "language": "Python", "description": "Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "23eecf57f01e", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-13T21:25:16Z", "archived": false, "topContributors": [ { "login": "wietze", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" } ] }, { "repo": "mgeeky/elusivemice", "name": "elusivemice", "owner": "mgeeky", "url": "https://github.com/mgeeky/ElusiveMice", "stars": 491, "language": "C", "description": "Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ecee6d078811", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-07-12T17:54:07Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "v1stra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49531141?v=4", "type": "User" } ] }, { "repo": "bw3ll/sharem", "name": "sharem", "owner": "bw3ll", "url": "https://github.com/Bw3ll/sharem", "stars": 490, "language": "Python", "description": "SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features,", "type": "tool", "lanes": [ "2" ], "author": { "name": "A. Babcock", "cardId": "f364e4e6e4d25194", "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f24bb9c22a50", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 12, "contributors": [], "pushedAt": "2026-03-22T22:21:27Z", "archived": false, "topContributors": [ { "login": "ShelbyVH", "c": 305, "avatar": "https://avatars.githubusercontent.com/u/77289500?v=4", "type": "User" }, { "login": "Bw3ll", "c": 185, "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4", "type": "User" }, { "login": "alp1n3-dev", "c": 184, "avatar": "https://avatars.githubusercontent.com/u/59985265?v=4", "type": "User" }, { "login": "stackfalcon", "c": 149, "avatar": "https://avatars.githubusercontent.com/u/76199923?v=4", "type": "User" }, { "login": "SaschaWTech", "c": 127, "avatar": "https://avatars.githubusercontent.com/u/60010832?v=4", "type": "User" }, { "login": "jth55", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/54605312?v=4", "type": "User" }, { "login": "dsu-ta", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/89746347?v=4", "type": "User" }, { "login": "kade-brost", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/102683362?v=4", "type": "User" }, { "login": "DSU-ah", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/84752168?v=4", "type": "User" }, { "login": "abaker2010", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7686813?v=4", "type": "User" }, { "login": "jtf0016", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/147643769?v=4", "type": "User" }, { "login": "littlebroto1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38365568?v=4", "type": "User" } ] }, { "repo": "cryps1s/darksurgeon", "name": "darksurgeon", "owner": "cryps1s", "url": "https://github.com/cryps1s/DARKSURGEON", "stars": 471, "language": "PowerShell", "description": "DARKSURGEON is a Windows packer project to empower incident response, digital forensics, malware analysis, and network defense.", "type": "tool", "lanes": [ "2" ], "author": { "name": "DANΞ", "cardId": "0fcc78832319b28b", "avatar": "https://avatars.githubusercontent.com/u/1239206?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "241944a6e26b", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-21T19:00:09Z", "archived": false, "topContributors": [ { "login": "cryps1s", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/1239206?v=4", "type": "User" } ] }, { "repo": "antoniococo/sspiuacbypass", "name": "SspiUacBypass", "owner": "antonioCoco", "url": "https://github.com/antonioCoco/SspiUacBypass", "id": "c0eb5a251e5f", "stars": 471, "language": "C++", "description": "Bypassing UAC with SSPI Datagram Contexts ", "type": "tool", "pushedAt": "2023-09-24T17:33:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "antonioCoco", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" } ] }, { "repo": "zjorz/public-ad-scripts", "name": "public-ad-scripts", "owner": "zjorz", "url": "https://github.com/zjorz/Public-AD-Scripts", "stars": 469, "language": "PowerShell", "description": "AD Scripts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jorge de Almeida Pinto", "cardId": "ac5edee20ca75971", "avatar": "https://avatars.githubusercontent.com/u/16709877?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b75330b9c8d0", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-14T19:26:53Z", "archived": false, "topContributors": [ { "login": "zjorz", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/16709877?v=4", "type": "User" } ] }, { "repo": "dafthack/hostrecon", "name": "HostRecon", "owner": "dafthack", "url": "https://github.com/dafthack/HostRecon", "id": "ba59568d755f", "stars": 466, "language": "PowerShell", "description": "This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, a", "type": "tool", "pushedAt": "2017-10-03T13:25:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dafthack", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" }, { "login": "garrett-white", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12193621?v=4", "type": "User" } ] }, { "repo": "linushenze/webkit-regex-exploit", "name": "webkit-regex-exploit", "owner": "linushenze", "url": "https://github.com/LinusHenze/WebKit-RegEx-Exploit", "stars": 462, "language": "JavaScript", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Linus Henze", "cardId": "0a5e4cfe401615ab", "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59a14bbe5aac", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-10-04T15:38:11Z", "archived": true, "topContributors": [ { "login": "LinusHenze", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4", "type": "User" } ] }, { "repo": "xorrior/remoterecon", "name": "remoterecon", "owner": "xorrior", "url": "https://github.com/xorrior/RemoteRecon", "stars": 462, "language": "PowerShell", "description": "Remote Recon and Collection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bbba26236c1b", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-23T03:22:39Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 65, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "aaaddress1/skrull", "name": "skrull", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/Skrull", "stars": 459, "language": "C", "description": "Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting te", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b608b2928b8f", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-25T06:18:00Z", "archived": false, "topContributors": [ { "login": "aaaddress1", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "mgeeky/tomcatwardeployer", "name": "tomcatWarDeployer", "owner": "mgeeky", "url": "https://github.com/mgeeky/tomcatWarDeployer", "id": "3113cb57fa7b", "stars": 445, "language": "Python", "description": "Apache Tomcat auto WAR deployment & pwning penetration testing tool.", "type": "tool", "pushedAt": "2024-03-31T16:43:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mgeeky", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "AndreyRainchik", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20883788?v=4", "type": "User" }, { "login": "joonaskaskisola", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14326177?v=4", "type": "User" }, { "login": "comrumino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12876622?v=4", "type": "User" } ] }, { "repo": "utkusen/baitroute", "name": "baitroute", "owner": "utkusen", "url": "https://github.com/utkusen/baitroute", "id": "c753be9c081d", "stars": 438, "language": "Go", "description": "A web honeypot library to create vulnerable-looking endpoints to detect and mislead attackers", "type": "tool", "pushedAt": "2025-01-14T20:50:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "utkusen", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" }, { "login": "angryfoxx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/88541716?v=4", "type": "User" } ] }, { "repo": "yardenshafir/windbg_scripts", "name": "windbg_scripts", "owner": "yardenshafir", "url": "https://github.com/yardenshafir/WinDbg_Scripts", "stars": 436, "language": "JavaScript", "description": "Useful scripts for WinDbg using the debugger data model", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yarden Shafir", "cardId": "84641f98d959dd3f", "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7c208e4e0550", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-27T12:38:36Z", "archived": false, "topContributors": [ { "login": "yardenshafir", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4", "type": "User" } ] }, { "repo": "nahamsec/recon_profile", "name": "recon_profile", "owner": "nahamsec", "url": "https://github.com/nahamsec/recon_profile", "id": "f0decf2b3623", "stars": 436, "language": "Shell", "description": "", "type": "tool", "pushedAt": "2022-12-02T07:40:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ben Sadeghipour", "cardId": "a04c3b9e3a86a135", "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "nahamsec", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4", "type": "User" }, { "login": "arjunshibu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43996156?v=4", "type": "User" } ] }, { "repo": "d4stiny/peacemaker", "name": "peacemaker", "owner": "d4stiny", "url": "https://github.com/D4stiny/PeaceMaker", "stars": 431, "language": "C++", "description": "PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c9db240c926", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-22T05:12:41Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "wietze/argfuscator.net", "name": "ArgFuscator.net", "owner": "wietze", "url": "https://github.com/wietze/ArgFuscator.net", "id": "a1ed64e59217", "stars": 427, "language": "TypeScript", "description": "ArgFuscator.net is an open-source, stand-alone web application that helps generate obfuscated command lines for common system-native executables.", "type": "tool", "pushedAt": "2026-02-19T01:06:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wietze", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" } ] }, { "repo": "insiderphd/generic-university", "name": "Generic-University", "owner": "InsiderPhD", "url": "https://github.com/InsiderPhD/Generic-University", "id": "5a962d4bdfe0", "stars": 426, "language": "PHP", "description": "Vulnerable API", "type": "tool", "pushedAt": "2023-03-04T16:00:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Katie Paxton-Fear", "cardId": "28e628f9e41dce88", "avatar": "https://avatars.githubusercontent.com/u/36405442?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "InsiderPhD", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/36405442?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 5, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "kofler86", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24463619?v=4", "type": "User" }, { "login": "RAJANAGORI", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32300516?v=4", "type": "User" } ] }, { "repo": "transilienceai/communitytools", "name": "communitytools", "owner": "transilienceai", "url": "https://github.com/transilienceai/communitytools", "id": "c2dec135c8e9", "stars": 414, "language": "Python", "description": "Open-source Claude Code skills, agents, and slash commands for AI-powered penetration testing, bug bounty hunting, and security research", "type": "tool", "pushedAt": "2026-07-17T06:21:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "KK Mookhey", "cardId": "c82c492f97a295af", "avatar": "https://avatars.githubusercontent.com/u/164570233?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "alessiomauro", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/5937117?v=4", "type": "User" }, { "login": "Stickman230", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/123313783?v=4", "type": "User" }, { "login": "shashwatsharma12304", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/168652609?v=4", "type": "User" }, { "login": "rkreddyp", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/47548091?v=4", "type": "User" }, { "login": "AmanAgarwal041", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7565635?v=4", "type": "User" }, { "login": "muzaffar-ni", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/175935150?v=4", "type": "User" }, { "login": "ipunithgowda", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60220390?v=4", "type": "User" }, { "login": "kkmookhey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11834295?v=4", "type": "User" } ] }, { "repo": "antoniococo/mapping-injection", "name": "mapping-injection", "owner": "antoniococo", "url": "https://github.com/antonioCoco/Mapping-Injection", "stars": 409, "language": "Assembly", "description": "Just another Windows Process Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antonio Cocomazzi", "cardId": "984998e222786124", "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fd56c3b1365f", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-07T19:21:13Z", "archived": false, "topContributors": [ { "login": "antonioCoco", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/19797064?v=4", "type": "User" } ] }, { "repo": "monnappa22/limon", "name": "limon", "owner": "monnappa22", "url": "https://github.com/monnappa22/Limon", "stars": 403, "language": "Python", "description": "Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux ma", "type": "tool", "lanes": [ "2" ], "author": { "name": "Monnappa K A", "cardId": "84d6c131cbfde4cc", "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "21a8a6593a1c", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-20T04:32:23Z", "archived": false, "topContributors": [ { "login": "monnappa22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4", "type": "User" } ] }, { "repo": "mgeeky/azurert", "name": "azurert", "owner": "mgeeky", "url": "https://github.com/mgeeky/AzureRT", "stars": 233, "language": "PowerShell", "description": "AzureRT - A Powershell module implementing various Azure Red Team tactics", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "104444c53d48", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-17T18:35:45Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "mgeeky/msidump", "name": "msidump", "owner": "mgeeky", "url": "https://github.com/mgeeky/msidump", "stars": 231, "language": "Python", "description": "MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5a8db12e1760", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-03T13:29:10Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "outflanknl/presentations", "name": "Presentations", "owner": "outflanknl", "url": "https://github.com/outflanknl/Presentations", "id": "80b0601becdd", "stars": 192, "language": null, "description": "Presentation material presented by Outflank team members at public events.", "type": "tool", "pushedAt": "2026-06-05T10:06:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 184, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "MarcOverIP", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" }, { "login": "stanhegt", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" }, { "login": "kyleavery", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" }, { "login": "DaWouw", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1709023?v=4", "type": "User" } ] }, { "repo": "fortra/createprocess", "name": "CreateProcess", "owner": "fortra", "url": "https://github.com/fortra/CreateProcess", "id": "5a07bbe87e87", "stars": 188, "language": "C", "description": "A small PoC that creates processes in Windows", "type": "tool", "pushedAt": "2024-06-06T14:29:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 19, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "S4ntiagoP", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" } ] }, { "repo": "viralmaniar/phirautee", "name": "phirautee", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Phirautee", "stars": 122, "language": "PowerShell", "description": "A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. Thi", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "95572d15997a", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-11T02:23:12Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/ppenum", "name": "ppenum", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/PPEnum", "stars": 121, "language": "C", "description": "Simple BOF to read the protection level of a process", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9bc34ecc6725", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-10T16:41:09Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "viralmaniar/murmurhash", "name": "MurMurHash", "owner": "Viralmaniar", "url": "https://github.com/Viralmaniar/MurMurHash", "id": "d20b3b172deb", "stars": 120, "language": "Python", "description": "This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.", "type": "tool", "pushedAt": "2023-08-30T18:23:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Viralmaniar", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/pyre", "name": "pyre", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/pyre", "id": "d7941235cae5", "stars": 119, "language": "TypeScript", "description": "Ghidra decompiler in your browser", "type": "tool", "pushedAt": "2026-05-04T18:21:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ant4g0nist", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "itm4n/pentest-windows", "name": "pentest-windows", "owner": "itm4n", "url": "https://github.com/itm4n/Pentest-Windows", "stars": 118, "language": "C++", "description": "Windows internals and exploitation tricks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9a067116f767", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-28T12:24:01Z", "archived": false, "topContributors": [ { "login": "itm4n", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "itm4n/cdpsvcdllhijacking", "name": "cdpsvcdllhijacking", "owner": "itm4n", "url": "https://github.com/itm4n/CDPSvcDllHijacking", "stars": 118, "language": "C++", "description": "Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5e2394861c70", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-12T15:45:13Z", "archived": true, "topContributors": [ { "login": "itm4n", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "zhuowei/apple-positional-audio-codec-invalid-header", "name": "apple-positional-audio-codec-invalid-header", "owner": "zhuowei", "url": "https://github.com/zhuowei/apple-positional-audio-codec-invalid-header", "stars": 118, "language": "Kaitai Struct", "description": "CVE-2025-31200 - @Noahhw46 figured it out", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "422d9e5c341a", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-06-02T13:17:24Z", "archived": false, "topContributors": [ { "login": "Noahhw46", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/98559180?v=4", "type": "User" }, { "login": "zhuowei", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/pentestcode", "name": "pentestcode", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/pentestcode", "id": "043415b2979b", "stars": 115, "language": "TypeScript", "description": "PentestCode - Multi-agent AI penetration testing system with persistent engagement state, strategic coordination, and parallel autonomous operations.", "type": "tool", "pushedAt": "2026-07-18T05:15:39Z", "archived": false, "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "s0ld13rr", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/decompiler", "name": "decompiler", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/decompiler", "id": "4667b1c71863", "stars": 114, "language": "C++", "description": "Ghidra decompiler plugin for LLDB", "type": "tool", "pushedAt": "2026-02-15T16:54:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ant4g0nist", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "two06/linkedintel", "name": "linkedintel", "owner": "two06", "url": "https://github.com/two06/LinkedIntel", "stars": 110, "language": "Python", "description": "LinkedIn recon the easy way", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Williams", "cardId": "65321ddf2274b614", "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "500d9c1b2506", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-03T15:36:12Z", "archived": false, "topContributors": [ { "login": "two06", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4", "type": "User" } ] }, { "repo": "alfiecg24/vertex", "name": "vertex", "owner": "alfiecg24", "url": "https://github.com/alfiecg24/Vertex", "stars": 105, "language": "C", "description": "iOS kernel exploit for iOS 14 and 15", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alfie CG", "cardId": "5ea5559470b332c7", "avatar": "https://avatars.githubusercontent.com/u/63724031?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7fbc17d2edd", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-29T18:18:06Z", "archived": false, "topContributors": [ { "login": "alfiecg24", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/63724031?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/maverick", "name": "maverick", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/Maverick", "stars": 100, "language": "C", "description": "Adaptix C2 agent using Crystal Palace PIC linker and PICO module system", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3909eecfa450", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-07T07:31:46Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "jackullrich/windows-api-fuzzer", "name": "Windows-API-Fuzzer", "owner": "jackullrich", "url": "https://github.com/jackullrich/Windows-API-Fuzzer", "id": "77a5219f859d", "stars": 99, "language": "C++", "description": "Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.", "type": "tool", "pushedAt": "2020-07-07T19:56:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jackullrich", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" } ] }, { "repo": "viralmaniar/in-spectre-meltdown", "name": "in-spectre-meltdown", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/In-Spectre-Meltdown", "stars": 95, "language": "Python", "description": "This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unpri", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "999a8e2f663f", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-02-19T03:04:07Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "hackinglz/maps_scanner", "name": "maps_scanner", "owner": "hackinglz", "url": "https://github.com/HackingLZ/maps_scanner", "stars": 94, "language": "Python", "description": "MAPS cloud scanner and response parser for Microsoft Defender research.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "18d234731dfe", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-19T22:18:44Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "h0mbre/windows-exploits", "name": "Windows-Exploits", "owner": "h0mbre", "url": "https://github.com/h0mbre/Windows-Exploits", "id": "716a38cd4077", "stars": 93, "language": "C++", "description": "", "type": "tool", "pushedAt": "2020-10-17T14:09:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "h0mbre", "cardId": "494e2f03a2cee362", "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "h0mbre", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4", "type": "User" } ] }, { "repo": "cybercdh/phishfinder", "name": "phishfinder", "owner": "cybercdh", "url": "https://github.com/cybercdh/phishfinder", "id": "07df25e1208e", "stars": 92, "language": "Python", "description": "A tool designed to traverse phishing URL paths to search for phishing kit source code.", "type": "tool", "pushedAt": "2022-12-08T05:06:11Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Colin Hardy", "cardId": "ccdc709645f1cba2", "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "cybercdh", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "brmkit/ad-training-lab", "name": "ad-training-lab", "owner": "brmkit", "url": "https://github.com/brmkit/ad-training-lab", "stars": 91, "language": "HCL", "description": "Automated Active Directory lab running on Proxmox", "type": "tool", "lanes": [ "2" ], "author": { "name": "_brmkit", "cardId": "e5df5d93846412ff", "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e3479f9b842", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-08T20:39:26Z", "archived": false, "topContributors": [ { "login": "brmkit", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4", "type": "User" } ] }, { "repo": "two06/cerealkiller", "name": "CerealKiller", "owner": "two06", "url": "https://github.com/two06/CerealKiller", "id": "fe5864f44c7a", "stars": 91, "language": "C#", "description": ".NET deserialization hunter", "type": "tool", "pushedAt": "2024-07-21T06:14:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "James Williams", "cardId": "65321ddf2274b614", "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "two06", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4", "type": "User" } ] }, { "repo": "itm4n/pentest-tools", "name": "pentest-tools", "owner": "itm4n", "url": "https://github.com/itm4n/Pentest-Tools", "stars": 90, "language": "HTML", "description": " Some random tools I use for penetration testing ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "927b84573396", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-02T13:02:33Z", "archived": false, "topContributors": [ { "login": "itm4n", "c": 205, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "zhuowei/coretrustdemo", "name": "coretrustdemo", "owner": "zhuowei", "url": "https://github.com/zhuowei/CoreTrustDemo", "stars": 90, "language": "C", "description": "Proof-of-concept for CVE-2022-26766 on macOS 12.3.1", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c6093de6f466", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-02T17:14:41Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "logangoins/badtakeover-bof", "name": "badtakeover-bof", "owner": "logangoins", "url": "https://github.com/logangoins/BadTakeover-BOF", "stars": 90, "language": "C", "description": "Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "95cf3f563668", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-20T15:33:59Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/externalc2.net", "name": "externalc2.net", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/ExternalC2.NET", "stars": 89, "language": "C#", "description": ".NET implementation of Cobalt Strike's External C2 Spec", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e9c9a4e870c2", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-12T14:11:15Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "two06/amsi_handler", "name": "amsi_handler", "owner": "two06", "url": "https://github.com/two06/AMSI_Handler", "stars": 88, "language": "C#", "description": "Automate AV evasion by calling AMSI", "type": "tool", "lanes": [ "2" ], "author": { "name": "James Williams", "cardId": "65321ddf2274b614", "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "24cb3f81d04c", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-05-31T20:37:41Z", "archived": false, "topContributors": [ { "login": "two06", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/4803078?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "rasta-mouse/gadgethunter", "name": "GadgetHunter", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/GadgetHunter", "id": "21e61e670f53", "stars": 85, "language": "C#", "description": "Find jmp gadgets for call stack spoofing.", "type": "tool", "pushedAt": "2025-10-01T09:41:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "rasta-mouse", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "subat0mik/minidump", "name": "minidump", "owner": "subat0mik", "url": "https://github.com/subat0mik/minidump", "stars": 1, "language": "C#", "description": "Simple C# program to call MiniDumpWriteDump to dump LSASS memory.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dcaa581a320b", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 16, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-14T16:32:06Z", "archived": false, "topContributors": [ { "login": "subat0mik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" } ] }, { "repo": "klezvirus/posts", "name": "posts", "owner": "klezvirus", "url": "https://github.com/klezVirus/Posts", "stars": 1, "language": null, "description": "Offensive Security Certifications Reviews", "type": "tool", "lanes": [ "2" ], "author": { "name": "klez", "cardId": "1cbd2edd980e4254", "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2b51820829cb", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-11T08:07:16Z", "archived": false, "topContributors": [ { "login": "klezVirus", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/8959898?v=4", "type": "User" } ] }, { "repo": "viuleeenz/simple_server", "name": "simple_server", "owner": "viuleeenz", "url": "https://github.com/Viuleeenz/Simple_Server", "stars": 1, "language": "Python", "description": "Utility that could be used to create a simple HTTP(s) server that log incoming requests for testing purposes (es., Clickjacking, Malware endpoint communication, etc..)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Allesandro Strino", "cardId": "c845d9b00d55f6c4", "avatar": "https://avatars.githubusercontent.com/u/10214343?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "db73578f9ca0", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-10T16:45:33Z", "archived": false, "topContributors": [ { "login": "Viuleeenz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10214343?v=4", "type": "User" } ] }, { "repo": "seanheelan/ksmbd-vuln-research", "name": "ksmbd-vuln-research", "owner": "seanheelan", "url": "https://github.com/SeanHeelan/ksmbd-vuln-research", "stars": 1, "language": null, "description": "A report on my ongoing vulnerability research on ksmbd", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sean Heelan", "cardId": "1a2b14e7d51c83bd", "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "40a8e5de652f", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-15T14:33:58Z", "archived": false, "topContributors": [ { "login": "SeanHeelan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1920339?v=4", "type": "User" } ] }, { "repo": "bunnie/artybio-loader", "name": "artybio-loader", "owner": "bunnie", "url": "https://github.com/bunnie/artybio-loader", "stars": 1, "language": "Python", "description": "Loader script for Arty-based BIO eval system", "type": "tool", "lanes": [ "2" ], "author": { "name": "bunnie Huang", "cardId": "1c63f6fc164aff29", "avatar": "https://avatars.githubusercontent.com/u/1168375?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9fa6d266cb73", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-15T15:22:12Z", "archived": false, "topContributors": [ { "login": "bunnie", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1168375?v=4", "type": "User" } ] }, { "repo": "kingofthenops/queueuserapcloader", "name": "queueuserapcloader", "owner": "kingofthenops", "url": "https://github.com/KingOfTheNOPs/QueueUserAPCLoader", "stars": 1, "language": "C#", "description": "Basic C# shellcode loader using QueueUserAPC with suspended thread or alertable function", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Gomez", "cardId": "2e2469ae5ef83126", "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c19cc0faf525", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-10T19:07:49Z", "archived": false, "topContributors": [ { "login": "KingOfTheNOPs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/59070613?v=4", "type": "User" } ] }, { "repo": "forensicitguy/malware-analysis-tools", "name": "malware-analysis-tools", "owner": "forensicitguy", "url": "https://github.com/ForensicITGuy/malware-analysis-tools", "stars": 1, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "55b9fbc89c30", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-02T17:52:11Z", "archived": false, "topContributors": [ { "login": "ForensicITGuy", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" } ] }, { "repo": "forensicitguy/malware-analyst-crash-course", "name": "malware-analyst-crash-course", "owner": "forensicitguy", "url": "https://github.com/ForensicITGuy/malware-analyst-crash-course", "stars": 1, "language": null, "description": "Malware Analyst Crash Course", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2eb84e85e61f", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-15T17:46:26Z", "archived": false, "topContributors": [ { "login": "ForensicITGuy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" } ] }, { "repo": "chichou/entdb-indexer", "name": "entdb-indexer", "owner": "chichou", "url": "https://github.com/ChiChou/entdb-indexer", "stars": 1, "language": "Python", "description": "Crontab workflow to discover and index entitlements from Apple firmware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhi Zhou", "cardId": "a1c38c086f954fb5", "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "95d223325f0c", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-06T17:17:00Z", "archived": false, "topContributors": [ { "login": "ChiChou", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/2802045?v=4", "type": "User" } ] }, { "repo": "joernchen/poc-submodule", "name": "poc-submodule", "owner": "joernchen", "url": "https://github.com/joernchen/poc-submodule", "stars": 1, "language": "Shell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joernchen", "cardId": "f6bb8abb77bc86d6", "avatar": "https://avatars.githubusercontent.com/u/1334559?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87bfa3176df0", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-09-24T08:27:54Z", "archived": false, "topContributors": [ { "login": "joernchen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1334559?v=4", "type": "User" } ] }, { "repo": "senderend/openipahound", "name": "openipahound", "owner": "senderend", "url": "https://github.com/senderend/openipahound", "stars": 1, "language": "Python", "description": "FreeIPA BloodHound OpenGraph collector", "type": "tool", "lanes": [ "2" ], "author": { "name": "Allen DeMoura", "cardId": "1c6e1c62bb6ba6a0", "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a783808d4451", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-18T20:22:20Z", "archived": false, "topContributors": [ { "login": "senderend", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/90939597?v=4", "type": "User" } ] }, { "repo": "mwnickerson/pentest-timeline-workflow", "name": "pentest-timeline-workflow", "owner": "mwnickerson", "url": "https://github.com/mwnickerson/pentest-timeline-workflow", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Nickerson", "cardId": "cbb0c9a7b3c8b4a2", "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "106b0f7060a6", "score": 32, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-08T04:53:23Z", "archived": false, "topContributors": [ { "login": "mwnickerson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82531659?v=4", "type": "User" } ] }, { "repo": "epi052/feroxbuster", "name": "feroxbuster", "owner": "epi052", "url": "https://github.com/epi052/feroxbuster", "stars": 7943, "language": "Rust", "description": "A fast, simple, recursive content discovery tool written in Rust.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2023/10/14/htb-intentions.html", "title": "HTB: Intentions", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/08/24/htb-runner.html", "title": "HTB: Runner", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/03/16/htb-manager.html", "title": "HTB: Manager", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2026/04/01/htb-snapped.html", "title": "HTB: Snapped", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/05/04/htb-napper.html", "title": "HTB: Napper", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2023/01/21/htb-updown.html", "title": "HTB: UpDown", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/03/30/htb-altered.html", "title": "HTB: Altered", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/05/11/htb-fulcrum.html", "title": "HTB: Fulcrum", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/07/20/htb-headless.html", "title": "HTB: Headless", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2021/09/04/htb-unobtainium.html", "title": "HTB: Unobtainium", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/04/20/htb-surveillance.html", "title": "HTB: Surveillance", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2026/02/10/htb-breach.html", "title": "HTB: Breach", "person": "0xdf" } ], "referencedCount": 150, "id": "2a6dabb1f8a3", "score": 31, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 39, "contributors": [ { "name": "Philippe Dugre", "cardId": "936bcc469125be85", "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "login": "zer0x64" }, { "name": "Joona Hoikkala", "cardId": "b307985f6d9c402f", "avatar": "https://avatars.githubusercontent.com/u/5235109?v=4", "login": "joohoi" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2026-04-15T12:31:40Z", "archived": false, "topContributors": [ { "login": "epi052", "c": 1511, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" }, { "login": "allcontributors[bot]", "c": 187, "avatar": "https://avatars.githubusercontent.com/in/23186?v=4", "type": "Bot" }, { "login": "godylockz", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/81207744?v=4", "type": "User" }, { "login": "dsaxton", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/2658661?v=4", "type": "User" }, { "login": "evanrichter", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/330292?v=4", "type": "User" }, { "login": "aancw", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/6284204?v=4", "type": "User" }, { "login": "lavafroth", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/107522312?v=4", "type": "User" }, { "login": "MD-Levitan", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12116508?v=4", "type": "User" }, { "login": "andreademurtas", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56048157?v=4", "type": "User" }, { "login": "cortantief", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/34527333?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "EONRaider", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15611424?v=4", "type": "User" }, { "login": "karanabe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/152078880?v=4", "type": "User" }, { "login": "aidanhall34", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58670593?v=4", "type": "User" }, { "login": "spikecodes", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19519553?v=4", "type": "User" }, { "login": "sitiom", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56180050?v=4", "type": "User" }, { "login": "restyled-commits", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/65077583?v=4", "type": "User" }, { "login": "bpsizemore", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11645898?v=4", "type": "User" }, { "login": "zer0x64", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "type": "User" }, { "login": "zar3bski", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22128014?v=4", "type": "User" }, { "login": "allbilly", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53866088?v=4", "type": "User" }, { "login": "n-thumann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46975855?v=4", "type": "User" }, { "login": "n0kovo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16690056?v=4", "type": "User" }, { "login": "kmanc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14863147?v=4", "type": "User" }, { "login": "jsav0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20546041?v=4", "type": "User" }, { "login": "bsysop", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9998303?v=4", "type": "User" }, { "login": "tomtastic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/302127?v=4", "type": "User" }, { "login": "tritoke", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34941249?v=4", "type": "User" }, { "login": "herrcykel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1936757?v=4", "type": "User" } ] }, { "repo": "xorrior/randomps-scripts", "name": "randomps-scripts", "owner": "xorrior", "url": "https://github.com/xorrior/RandomPS-Scripts", "stars": 323, "language": "PowerShell", "description": "PowerShell Scripts focused on Post-Exploitation Capabilities", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [ { "url": "https://viralmaniar.github.io/internal%20pentest/internal%20infrastructure%20pentest/network%20pentest/Interesting-Repos-for-Internal-Pentest/", "title": "Internal Infrastructure Pentest - Repos For Internal Pentest", "person": "Viral Maniar" } ], "referencedCount": 1, "id": "0e849e0ae910", "score": 31, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-12-29T17:16:42Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "zcutlip/exploit-poc", "name": "exploit-poc", "owner": "zcutlip", "url": "https://github.com/zcutlip/exploit-poc", "stars": 82, "language": "Python", "description": "Proof-of-Concept code for exploits", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2014/05/infiltrate-2014/", "title": "The Shadow File - Infiltrate 2014", "person": "Zachary Cutlip" } ], "referencedCount": 1, "id": "bf6606e9211e", "score": 31, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-05T03:10:35Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 84, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "zhuowei/xnuqemuscripts", "name": "xnuqemuscripts", "owner": "zhuowei", "url": "https://github.com/zhuowei/XNUQEMUScripts", "stars": 68, "language": "Java", "description": "Some scripts I made to patch iOS device trees.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [ { "url": "https://worthdoingbadly.com/xnuqemu2/", "title": "Tutorial - emulate an iOS kernel in QEMU up to launchd and userspace", "person": "worthdoingbadly" } ], "referencedCount": 1, "id": "6af9fb10a83e", "score": 31, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-04T23:55:11Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/cve-2025-25257", "name": "cve-2025-25257", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/CVE-2025-25257", "stars": 64, "language": "Python", "description": "FortiWeb CVE-2025-25257 exploit", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2025-07-10-fortiweb-fabric-rce", "title": "FortiWeb Pre-Auth RCE (CVE-2025-25257)", "person": "pwner.gg" } ], "referencedCount": 1, "id": "e7b430e18e30", "score": 31, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-11T12:54:26Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "vxunderground/malwaresourcecode", "name": "malwaresourcecode", "owner": "vxunderground", "url": "https://github.com/vxunderground/MalwareSourceCode", "stars": 18550, "language": "Assembly", "description": "Collection of malware source code for a variety of platforms in an array of different programming languages.", "type": "tool", "lanes": [ "2" ], "author": { "name": "vx-underground", "cardId": "a93d10c655fc2e88", "avatar": "https://avatars.githubusercontent.com/u/57078196?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "67db81f01f96", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [], "pushedAt": "2026-05-30T07:11:00Z", "archived": false, "topContributors": [ { "login": "vxunderground", "c": 879, "avatar": "https://avatars.githubusercontent.com/u/57078196?v=4", "type": "User" }, { "login": "TheDuchy", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/25308360?v=4", "type": "User" }, { "login": "f0wl", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/7806106?v=4", "type": "User" }, { "login": "luca364", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26669887?v=4", "type": "User" }, { "login": "aarush-dev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74783625?v=4", "type": "User" }, { "login": "EduApps-CDG", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32627482?v=4", "type": "User" }, { "login": "hexa-decim8", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64814670?v=4", "type": "User" }, { "login": "omache", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75061755?v=4", "type": "User" } ] }, { "repo": "trustedsec/social-engineer-toolkit", "name": "social-engineer-toolkit", "owner": "trustedsec", "url": "https://github.com/trustedsec/social-engineer-toolkit", "id": "c1ee1be099c3", "stars": 15093, "language": "Python", "description": "The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.", "type": "tool", "pushedAt": "2026-06-04T21:23:34Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Omar Ωr Santos", "cardId": "4ce13817e29c7cf0", "avatar": "https://avatars.githubusercontent.com/u/1690898?v=4", "login": "santosomar" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Peter Van Eeckhoutte", "cardId": "894199d5d6dfbfdc", "avatar": "https://avatars.githubusercontent.com/u/639369?v=4", "login": "corelanc0d3r" } ], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 68, "topContributors": [ { "login": "HackingDave", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "mikecjudge", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/10080944?v=4", "type": "User" }, { "login": "crawl3r41", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/65106318?v=4", "type": "User" }, { "login": "Cabalist", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/828557?v=4", "type": "User" }, { "login": "Lin8x", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/40849996?v=4", "type": "User" }, { "login": "fabacab", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/18677?v=4", "type": "User" }, { "login": "vinnytroia", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1675215?v=4", "type": "User" }, { "login": "kas21", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/367045?v=4", "type": "User" }, { "login": "allfro", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/618125?v=4", "type": "User" }, { "login": "cclauss", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "kradical", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9980985?v=4", "type": "User" }, { "login": "BadgerOps", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/392805?v=4", "type": "User" }, { "login": "drmckay", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1202951?v=4", "type": "User" }, { "login": "j0fer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3742935?v=4", "type": "User" }, { "login": "markcda", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/35887062?v=4", "type": "User" }, { "login": "anonymous-ME", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18220411?v=4", "type": "User" }, { "login": "lnxg33k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1170490?v=4", "type": "User" }, { "login": "stasinopoulos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5289251?v=4", "type": "User" }, { "login": "xexzy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17323214?v=4", "type": "User" }, { "login": "chrisisbeef", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/622346?v=4", "type": "User" }, { "login": "crblanaru", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4752072?v=4", "type": "User" }, { "login": "ShInJaYong", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20179919?v=4", "type": "User" }, { "login": "L1ghtn1ng", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "santosomar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1690898?v=4", "type": "User" }, { "login": "addenial", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4261203?v=4", "type": "User" }, { "login": "raffaele-forte", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4272480?v=4", "type": "User" }, { "login": "fibonascii", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11827510?v=4", "type": "User" }, { "login": "buzzdeee", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8383396?v=4", "type": "User" }, { "login": "iossefy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23387530?v=4", "type": "User" }, { "login": "Zordrak", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/151241?v=4", "type": "User" } ] }, { "repo": "s0md3v/xsstrike", "name": "xsstrike", "owner": "s0md3v", "url": "https://github.com/s0md3v/XSStrike", "stars": 15083, "language": "Python", "description": "Most advanced XSS scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7c5e3d48bb7", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 25, "contributors": [], "pushedAt": "2025-04-26T08:47:06Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 426, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "IAmStoxe", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/16467875?v=4", "type": "User" }, { "login": "omergunal", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19760132?v=4", "type": "User" }, { "login": "akhal3d96", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1307905?v=4", "type": "User" }, { "login": "Monsef-Noubadji", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/67560520?v=4", "type": "User" }, { "login": "sthagen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/450800?v=4", "type": "User" }, { "login": "paralax", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "aancw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6284204?v=4", "type": "User" }, { "login": "cym13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4958985?v=4", "type": "User" }, { "login": "dan2k3k4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/158704?v=4", "type": "User" }, { "login": "faf0-addepar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28877604?v=4", "type": "User" }, { "login": "Calinou", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/180032?v=4", "type": "User" }, { "login": "JohnPeng47", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9957837?v=4", "type": "User" }, { "login": "lookfirst", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85355?v=4", "type": "User" }, { "login": "manuel-colmenero", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8163503?v=4", "type": "User" }, { "login": "mrshu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/461491?v=4", "type": "User" }, { "login": "wom-bat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2782095?v=4", "type": "User" }, { "login": "networknerd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15943151?v=4", "type": "User" }, { "login": "seqrity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52572301?v=4", "type": "User" }, { "login": "shobhit99", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38807205?v=4", "type": "User" }, { "login": "hash3liZer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29171692?v=4", "type": "User" }, { "login": "icepng", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13582980?v=4", "type": "User" }, { "login": "duolaAOA", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26339233?v=4", "type": "User" }, { "login": "pyneda", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11313340?v=4", "type": "User" }, { "login": "rubyman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16247714?v=4", "type": "User" } ] }, { "repo": "datalux/osintgram", "name": "osintgram", "owner": "datalux", "url": "https://github.com/Datalux/Osintgram", "stars": 13584, "language": "Python", "description": "Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname", "type": "tool", "lanes": [ "2" ], "author": { "name": "Giuseppe Criscione", "cardId": "26e85b3e45120301", "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "84c572a95e55", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 21, "contributors": [], "pushedAt": "2025-08-25T12:00:48Z", "archived": false, "topContributors": [ { "login": "Datalux", "c": 293, "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4", "type": "User" }, { "login": "GrantBirki", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/23362539?v=4", "type": "User" }, { "login": "anatolykopyl", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/33553182?v=4", "type": "User" }, { "login": "shadow00", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4933508?v=4", "type": "User" }, { "login": "Chrisdafur3", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/82968160?v=4", "type": "User" }, { "login": "tkuye", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/72341152?v=4", "type": "User" }, { "login": "friaca", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/41522991?v=4", "type": "User" }, { "login": "Prince-Shaikh", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/47061218?v=4", "type": "User" }, { "login": "ahmadfaizan965", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/69793423?v=4", "type": "User" }, { "login": "subzeroid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/143403577?v=4", "type": "User" }, { "login": "cclauss", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "AbdalrahmanHafez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10910517?v=4", "type": "User" }, { "login": "kappuccino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1203963?v=4", "type": "User" }, { "login": "charlesbel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37935727?v=4", "type": "User" }, { "login": "fearfulspoon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37189490?v=4", "type": "User" }, { "login": "computerscienceiscool", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/103335846?v=4", "type": "User" }, { "login": "mvarga6", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8801545?v=4", "type": "User" }, { "login": "Ritu-bhangale", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76677116?v=4", "type": "User" }, { "login": "ghostkernel-core", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17075361?v=4", "type": "User" }, { "login": "teakfi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22397284?v=4", "type": "User" }, { "login": "yves147", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54778078?v=4", "type": "User" } ] }, { "repo": "s0md3v/photon", "name": "photon", "owner": "s0md3v", "url": "https://github.com/s0md3v/Photon", "stars": 13043, "language": "Python", "description": "Incredibly fast crawler designed for OSINT.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c10a52a2a633", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 17, "contributors": [], "pushedAt": "2026-02-10T08:48:11Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 247, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "oXis", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/5463132?v=4", "type": "User" }, { "login": "connorskees", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/39542938?v=4", "type": "User" }, { "login": "fabaff", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "snehm", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20552012?v=4", "type": "User" }, { "login": "sirfoga", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/14162628?v=4", "type": "User" }, { "login": "neutrinoguy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22230280?v=4", "type": "User" }, { "login": "BBerastegui", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3830238?v=4", "type": "User" }, { "login": "alessaba", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2400384?v=4", "type": "User" }, { "login": "joeyliechty", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/60985885?v=4", "type": "User" }, { "login": "0xd0ug", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32918088?v=4", "type": "User" }, { "login": "0xInfection", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39941993?v=4", "type": "User" }, { "login": "milo2012", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/905335?v=4", "type": "User" }, { "login": "Marvzinc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5628462?v=4", "type": "User" }, { "login": "PaulRosset", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14330374?v=4", "type": "User" }, { "login": "gil2abir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8872415?v=4", "type": "User" }, { "login": "otherpirate", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4956844?v=4", "type": "User" } ] }, { "repo": "sensepost/godoh", "name": "godoh", "owner": "sensepost", "url": "https://github.com/sensepost/godoh", "id": "7092cc12c9d3", "stars": 809, "language": "Go", "description": "🕳 godoh - A DNS-over-HTTPS C2", "type": "tool", "pushedAt": "2023-12-19T07:21:45Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "leonjza", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "praetorian-inc/chromealone", "name": "ChromeAlone", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/ChromeAlone", "id": "d212cbc7b40d", "stars": 590, "language": "JavaScript", "description": "A tool to transform Chromium browsers into a C2 Implant", "type": "tool", "pushedAt": "2025-12-17T20:27:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "michaelweber", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/smartbrute", "name": "smartbrute", "owner": "ShutdownRepo", "url": "https://github.com/ShutdownRepo/smartbrute", "id": "4179e333c6fc", "stars": 388, "language": "Python", "description": "Password spraying and bruteforcing tool for Active Directory Domain Services ", "type": "tool", "pushedAt": "2024-10-27T20:47:29Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" } ], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "ShutdownRepo", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "p0dalirius", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "lap1nou", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10383569?v=4", "type": "User" }, { "login": "Dramelac", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10145128?v=4", "type": "User" }, { "login": "Clayno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15702611?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" }, { "login": "snovvcrash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" } ] }, { "repo": "christophetd/spoofing-office-macro", "name": "spoofing-office-macro", "owner": "christophetd", "url": "https://github.com/christophetd/spoofing-office-macro", "stars": 383, "language": "VBA", "description": ":fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "941814a77633", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2020-04-28T16:23:43Z", "archived": false, "topContributors": [ { "login": "christophetd", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "type": "User" }, { "login": "cnotin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "py7hagoras", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6564346?v=4", "type": "User" } ] }, { "repo": "mayyhem/maestro", "name": "maestro", "owner": "mayyhem", "url": "https://github.com/Mayyhem/Maestro", "stars": 377, "language": "C#", "description": "Abusing Azure services over C2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "470562c76871", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Daniel Heinsen", "cardId": "01fd4923819babdd", "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "login": "hotnops" } ], "pushedAt": "2026-01-20T20:10:09Z", "archived": false, "topContributors": [ { "login": "Mayyhem", "c": 143, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" }, { "login": "pl4nty", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/21111317?v=4", "type": "User" }, { "login": "hotnops", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61955543?v=4", "type": "User" }, { "login": "acap4z", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12718585?v=4", "type": "User" } ] }, { "repo": "joxeankoret/nightmare", "name": "nightmare", "owner": "joxeankoret", "url": "https://github.com/joxeankoret/nightmare", "id": "4568470a1655", "stars": 374, "language": "Python", "description": "A distributed fuzzing testing suite with web administration", "type": "tool", "pushedAt": "2019-01-14T17:44:44Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joxean Koret", "cardId": "e0c1465b5f795d4e", "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "joxeankoret", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4", "type": "User" }, { "login": "v-p-b", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/540246?v=4", "type": "User" }, { "login": "aquynh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5965536?v=4", "type": "User" }, { "login": "teddy-michel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1228905?v=4", "type": "User" }, { "login": "strazzere", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/623686?v=4", "type": "User" }, { "login": "hardik05", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22524976?v=4", "type": "User" }, { "login": "kernelsmith", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/620129?v=4", "type": "User" }, { "login": "m0t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/500273?v=4", "type": "User" }, { "login": "nixerr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7397115?v=4", "type": "User" } ] }, { "repo": "rocky/python-xdis", "name": "python-xdis", "owner": "rocky", "url": "https://github.com/rocky/python-xdis", "id": "f2d2f474aaca", "stars": 368, "language": "Python", "description": "Python cross-version bytecode library and disassembler", "type": "tool", "pushedAt": "2026-07-11T15:11:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 28, "topContributors": [ { "login": "rocky", "c": 404, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "2elli", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/89609349?v=4", "type": "User" }, { "login": "jdw170000", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/50096766?v=4", "type": "User" }, { "login": "Quinntyx", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/70780971?v=4", "type": "User" }, { "login": "moagstar", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/879561?v=4", "type": "User" }, { "login": "x746e", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/108139?v=4", "type": "User" }, { "login": "greenozon", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/765343?v=4", "type": "User" }, { "login": "laike9m", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2592205?v=4", "type": "User" }, { "login": "dperret", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/12503125?v=4", "type": "User" }, { "login": "toddrme2178", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4181796?v=4", "type": "User" }, { "login": "itamarga", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13792012?v=4", "type": "User" }, { "login": "jwilk", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/141546?v=4", "type": "User" }, { "login": "Joel-Flores123", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/73033180?v=4", "type": "User" }, { "login": "Lulzx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22330483?v=4", "type": "User" }, { "login": "Matmaus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31512884?v=4", "type": "User" }, { "login": "licy183", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45286352?v=4", "type": "User" }, { "login": "FomichevAK106", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83364948?v=4", "type": "User" }, { "login": "Arusekk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25570059?v=4", "type": "User" }, { "login": "bmwiedemann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/637990?v=4", "type": "User" }, { "login": "jeffenstein", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36918182?v=4", "type": "User" }, { "login": "julionc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/981762?v=4", "type": "User" }, { "login": "rakovskij-stanislav", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25303578?v=4", "type": "User" }, { "login": "ril3y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/231731?v=4", "type": "User" }, { "login": "c10udlnk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/73152692?v=4", "type": "User" }, { "login": "damenhello", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/209412861?v=4", "type": "User" }, { "login": "painor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30215770?v=4", "type": "User" }, { "login": "stredaa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3762390?v=4", "type": "User" }, { "login": "thurask", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7698858?v=4", "type": "User" } ] }, { "repo": "kgretzky/evilqr", "name": "evilqr", "owner": "kgretzky", "url": "https://github.com/kgretzky/evilqr", "stars": 367, "language": "JavaScript", "description": "Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kuba Gretzky", "cardId": "8be8d7866769df75", "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "822a7876025a", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-18T11:27:23Z", "archived": false, "topContributors": [ { "login": "kgretzky", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4", "type": "User" } ] }, { "repo": "ang13t/dronextract", "name": "DroneXtract", "owner": "ANG13T", "url": "https://github.com/ANG13T/DroneXtract", "id": "2bd65bdf9a63", "stars": 361, "language": "Go", "description": "DroneXtract is a digital forensics suite for DJI drones 🔍. Analyze sensor values, visualize flight maps, and audit for criminal activity 🗺", "type": "tool", "pushedAt": "2023-07-19T03:11:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ANG13T", "c": 157, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "adamshostack/eop", "name": "eop", "owner": "adamshostack", "url": "https://github.com/adamshostack/eop", "stars": 358, "language": "Rich Text Format", "description": "The Elevation of Privilege Threat Modeling Game", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Shostack", "cardId": "9d578e36e28ab8cb", "avatar": "https://avatars.githubusercontent.com/u/1176137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4d735ee1708d", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-06-20T11:35:35Z", "archived": false, "topContributors": [ { "login": "adamshostack", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/1176137?v=4", "type": "User" }, { "login": "sjgibbs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5528950?v=4", "type": "User" } ] }, { "repo": "adamdoupe/wackopicko", "name": "WackoPicko", "owner": "adamdoupe", "url": "https://github.com/adamdoupe/WackoPicko", "id": "0785f6f677cb", "stars": 351, "language": "PHP", "description": "WackoPicko is a vulnerable web application used to test web application vulnerability scanners.", "type": "tool", "pushedAt": "2024-05-25T16:13:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adam Doupé", "cardId": "add208fc8def4dda", "avatar": "https://avatars.githubusercontent.com/u/48102?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "adamdoupe", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/48102?v=4", "type": "User" }, { "login": "christopherch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49697830?v=4", "type": "User" }, { "login": "PinkSheep", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2438275?v=4", "type": "User" }, { "login": "emmax86", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35500807?v=4", "type": "User" } ] }, { "repo": "bugch3ck/sharpefspotato", "name": "sharpefspotato", "owner": "bugch3ck", "url": "https://github.com/bugch3ck/SharpEfsPotato", "stars": 349, "language": "C#", "description": "Local privilege escalation from SeImpersonatePrivilege using EfsRpc.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "86fd15206ba8", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-17T12:35:06Z", "archived": false, "topContributors": [ { "login": "bugch3ck", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" } ] }, { "repo": "mgeeky/unhookme", "name": "unhookme", "owner": "mgeeky", "url": "https://github.com/mgeeky/UnhookMe", "stars": 349, "language": "C++", "description": "UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red Teams malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc04832cd7af", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-07-03T19:44:22Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "GermanAizek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21138600?v=4", "type": "User" } ] }, { "repo": "hackingdave/btrpa-scan", "name": "btrpa-scan", "owner": "hackingdave", "url": "https://github.com/HackingDave/btrpa-scan", "stars": 347, "language": "Python", "description": "Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs) ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9cb4813f55ab", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-02-18T18:41:35Z", "archived": false, "topContributors": [] }, { "repo": "staaldraad/xxeserv", "name": "xxeserv", "owner": "staaldraad", "url": "https://github.com/staaldraad/xxeserv", "id": "848bafe89ea1", "stars": 345, "language": "Go", "description": "A mini webserver with FTP support for XXE payloads", "type": "tool", "pushedAt": "2024-01-03T13:07:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "staaldraad", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" } ] }, { "repo": "tijme/angularjs-csti-scanner", "name": "angularjs-csti-scanner", "owner": "tijme", "url": "https://github.com/tijme/angularjs-csti-scanner", "stars": 325, "language": "Python", "description": "Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "39618c38eebe", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "pushedAt": "2021-10-20T15:19:57Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 186, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "bufferbandit", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/19372721?v=4", "type": "User" }, { "login": "fenceposterror", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24934956?v=4", "type": "User" }, { "login": "random-robbie", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" } ] }, { "repo": "danmcinerney/pentest-machine", "name": "pentest-machine", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/pentest-machine", "stars": 325, "language": "Ruby", "description": "Automates some pentest jobs via nmap xml file", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6030dc83a58", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2018-09-07T20:01:41Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" }, { "login": "Anandesh-Sharma", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30695364?v=4", "type": "User" } ] }, { "repo": "joxeankoret/multiav", "name": "multiav", "owner": "joxeankoret", "url": "https://github.com/joxeankoret/multiav", "stars": 323, "language": "Python", "description": "MultiAV scanner with Python and JSON API. Disclaimer: I don't maintain it any more.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joxean Koret", "cardId": "e0c1465b5f795d4e", "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30060f8460ba", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2021-11-22T10:30:28Z", "archived": true, "topContributors": [ { "login": "joxeankoret", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4", "type": "User" }, { "login": "llazzaro", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/568181?v=4", "type": "User" }, { "login": "haruka-YNU", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/27940957?v=4", "type": "User" }, { "login": "22ca54d00f05391d6ffee4bc23a5ba60", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/806477?v=4", "type": "User" } ] }, { "repo": "johnhammond/cve-2021-34527", "name": "cve-2021-34527", "owner": "johnhammond", "url": "https://github.com/JohnHammond/CVE-2021-34527", "stars": 320, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c8ad3212a8b", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-02T12:17:50Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "rootup/bfuzz", "name": "BFuzz", "owner": "RootUp", "url": "https://github.com/RootUp/BFuzz", "id": "5f9275f595a4", "stars": 319, "language": "HTML", "description": "Fuzzing Browsers", "type": "tool", "pushedAt": "2022-12-05T11:57:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "RootUp", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" }, { "login": "bvachha", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12883975?v=4", "type": "User" } ] }, { "repo": "ang13t/netspionage", "name": "netspionage", "owner": "ang13t", "url": "https://github.com/ANG13T/netspionage", "stars": 306, "language": "Python", "description": "Network Forensics CLI utility that performs Network Scanning, OSINT, and Attack Detection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ef6d10e10df8", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-11-29T23:03:37Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" }, { "login": "D3vil0p3r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/83867734?v=4", "type": "User" } ] }, { "repo": "evanmcbroom/perfect-loader", "name": "perfect-loader", "owner": "evanmcbroom", "url": "https://github.com/EvanMcBroom/perfect-loader", "stars": 304, "language": "C++", "description": "Load a dynamic library from memory by modifying the native Windows loader", "type": "tool", "lanes": [ "2" ], "author": { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2521d50db7d4", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-05T14:29:54Z", "archived": false, "topContributors": [ { "login": "EvanMcBroom", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" } ] }, { "repo": "martyx00/vulnfanatic", "name": "VulnFanatic", "owner": "Martyx00", "url": "https://github.com/Martyx00/VulnFanatic", "id": "1becd87b4d0a", "stars": 303, "language": "Python", "description": "A Binary Ninja plugin for vulnerability research.", "type": "tool", "pushedAt": "2026-06-19T09:09:30Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Martin Petran", "cardId": "be2683b76e947cf9", "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Martyx00", "c": 152, "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4", "type": "User" }, { "login": "xHector1337", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/140441119?v=4", "type": "User" } ] }, { "repo": "0xdea/ghidra-scripts", "name": "ghidra-scripts", "owner": "0xdea", "url": "https://github.com/0xdea/ghidra-scripts", "id": "2b681220b42d", "stars": 301, "language": "Java", "description": "A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research.", "type": "tool", "pushedAt": "2026-01-31T09:15:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "0xdea", "c": 126, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" }, { "login": "matteobaccan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/200925?v=4", "type": "User" }, { "login": "TheZ3ro", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/686894?v=4", "type": "User" }, { "login": "ax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7697157?v=4", "type": "User" }, { "login": "whoismissing", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28734954?v=4", "type": "User" } ] }, { "repo": "d3lb3/keefarcereborn", "name": "keefarcereborn", "owner": "d3lb3", "url": "https://github.com/d3lb3/KeeFarceReborn", "stars": 299, "language": "C#", "description": "A standalone DLL that exports databases in cleartext once injected in the KeePass process.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Julien Bedel", "cardId": "75c76ef1107ca8cd", "avatar": "https://avatars.githubusercontent.com/u/30991560?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7610786f9d7a", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-01T15:59:38Z", "archived": false, "topContributors": [ { "login": "d3lb3", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/30991560?v=4", "type": "User" } ] }, { "repo": "0xkol/badspin", "name": "badspin", "owner": "0xkol", "url": "https://github.com/0xkol/badspin", "stars": 287, "language": "C", "description": "Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Moshe Kol", "cardId": "626be8eaa344eeba", "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7f26781f8671", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-27T15:39:41Z", "archived": false, "topContributors": [ { "login": "0xkol", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4", "type": "User" } ] }, { "repo": "mgeeky/sharpwebserver", "name": "sharpwebserver", "owner": "mgeeky", "url": "https://github.com/mgeeky/SharpWebServer", "stars": 287, "language": "C#", "description": "Red Team oriented C# Simple HTTP & WebDAV Server with Net-NTLM hashes capture functionality", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a261549d8c7f", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Craig Wright", "cardId": "566c73c2eb67c6ea", "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4", "login": "werdhaihai" } ], "pushedAt": "2023-06-26T10:50:54Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "werdhaihai", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/56405955?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/hypnus", "name": "hypnus", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/hypnus", "id": "14a471c214d4", "stars": 286, "language": "Rust", "description": "Sleep Obfuscation in Rust", "type": "tool", "pushedAt": "2025-12-01T02:35:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "joaoviictorti", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" } ] }, { "repo": "ang13t/payload-wizard", "name": "payload-wizard", "owner": "ang13t", "url": "https://github.com/ANG13T/payload-wizard", "stars": 285, "language": "TypeScript", "description": "AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads 🪄", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e37412528c6", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-23T05:20:46Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "wietze/invoke-argfuscator", "name": "Invoke-ArgFuscator", "owner": "wietze", "url": "https://github.com/wietze/Invoke-ArgFuscator", "id": "e514efab5ae2", "stars": 279, "language": "PowerShell", "description": "Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native executables.", "type": "tool", "pushedAt": "2026-02-13T14:14:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "wietze", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" }, { "login": "cyberbuff", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/27735081?v=4", "type": "User" } ] }, { "repo": "0x4d31/honeybits", "name": "honeybits", "owner": "0x4d31", "url": "https://github.com/0x4D31/honeybits", "stars": 278, "language": "Go", "description": "A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adel Karimi", "cardId": "d370c84bd65364d0", "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b311f1cd82e2", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-20T02:35:40Z", "archived": true, "topContributors": [ { "login": "0x4D31", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4", "type": "User" } ] }, { "repo": "xorrior/macostools", "name": "macostools", "owner": "xorrior", "url": "https://github.com/xorrior/macOSTools", "stars": 272, "language": "Objective-C", "description": "macOS Offensive Tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bfdfa1a6713c", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-28T14:03:07Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "idov31/mrkaplan", "name": "MrKaplan", "owner": "Idov31", "url": "https://github.com/Idov31/MrKaplan", "id": "b4d7083c7119", "stars": 272, "language": "PowerShell", "description": "MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.", "type": "tool", "pushedAt": "2023-09-26T18:09:29Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Idov31", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "ccob/mirrordump", "name": "mirrordump", "owner": "ccob", "url": "https://github.com/CCob/MirrorDump", "stars": 271, "language": "C#", "description": "Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ac7089a43b42", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-18T18:19:00Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "wetw0rk/exploit-development", "name": "exploit-development", "owner": "wetw0rk", "url": "https://github.com/wetw0rk/Exploit-Development", "stars": 83, "language": "C", "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "type": "tool", "lanes": [ "2" ], "author": { "name": "wetw0rk", "cardId": "cca3bc4f07b32950", "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7f46cad55e0", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-03-13T00:00:20Z", "archived": false, "topContributors": [ { "login": "wetw0rk", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "type": "User" }, { "login": "loganbest", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/410109?v=4", "type": "User" }, { "login": "Bad-Jubies", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62299138?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/claude-code-backdoor", "name": "claude-code-backdoor", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/claude-code-backdoor", "stars": 82, "language": "JavaScript", "description": "Backdooring Claude Code via hooks in settings.json. Authorized use only!", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cee8b466340b", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-16T07:11:54Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "morph3/windows-rpc-backdoor", "name": "windows-rpc-backdoor", "owner": "morph3", "url": "https://github.com/morph3/Windows-RPC-Backdoor", "stars": 81, "language": "C", "description": "Simple windows rpc server for research purposes only", "type": "tool", "lanes": [ "2" ], "author": { "name": "Melih Kaan Yıldız", "cardId": "373da8b89e522f77", "avatar": "https://avatars.githubusercontent.com/u/16365583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6540566bd421", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-29T03:00:07Z", "archived": false, "topContributors": [ { "login": "morph3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16365583?v=4", "type": "User" } ] }, { "repo": "nafiez/vulnerability-research", "name": "Vulnerability-Research", "owner": "nafiez", "url": "https://github.com/nafiez/Vulnerability-Research", "id": "91d7baab22df", "stars": 81, "language": "C", "description": "", "type": "tool", "pushedAt": "2025-02-26T21:04:33Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nafiez", "cardId": "6868b11a504c9d8e", "avatar": "https://avatars.githubusercontent.com/u/789149?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nafiez", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/789149?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/afl_runner", "name": "AFL_Runner", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/AFL_Runner", "id": "c306641243f5", "stars": 81, "language": "Rust", "description": "Scaling best-practice AFLPlusPlus fuzzing campaigns made easy and more", "type": "tool", "pushedAt": "2025-05-22T11:23:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "0xricksanchez", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" }, { "login": "wizche", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1062939?v=4", "type": "User" }, { "login": "dergoegge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8077169?v=4", "type": "User" } ] }, { "repo": "nopcorn/duckduckc2", "name": "duckduckc2", "owner": "nopcorn", "url": "https://github.com/nopcorn/DuckDuckC2", "stars": 77, "language": "Python", "description": "A proof-of-concept C2 channel through DuckDuckGo's image proxy service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Max CM", "cardId": "155643420d496227", "avatar": "https://avatars.githubusercontent.com/u/143365389?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e69cc1eed3a7", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-12T10:24:59Z", "archived": false, "topContributors": [ { "login": "nopcorn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/143365389?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/pt-toolkit", "name": "pt-toolkit", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/PT-ToolKit", "stars": 72, "language": "PowerShell", "description": "Exploits Scripts and other tools that are useful during Penetration-Testing or Red Team engagement ", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1c63c84fa00b", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-10T15:11:54Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 218, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "x-c3ll/sharpntlmrawunhide", "name": "SharpNTLMRawUnHide", "owner": "X-C3LL", "url": "https://github.com/X-C3LL/SharpNTLMRawUnHide", "id": "782219c0a2ea", "stars": 72, "language": "C#", "description": "C# version of NTLMRawUnHide", "type": "tool", "pushedAt": "2022-10-08T01:03:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "X-C3LL", "cardId": "0dcc4174f290a01e", "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "X-C3LL", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4", "type": "User" } ] }, { "repo": "aidansteele/openrolesanywhere", "name": "openrolesanywhere", "owner": "aidansteele", "url": "https://github.com/aidansteele/openrolesanywhere", "stars": 71, "language": "Go", "description": "Open-source proof-of-concept client for AWS IAM Roles Anywhere", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aidan Steele", "cardId": "23bb77f9e3aca89f", "avatar": "https://avatars.githubusercontent.com/u/369053?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4051dea90d8e", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-16T00:40:03Z", "archived": false, "topContributors": [ { "login": "aidansteele", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/369053?v=4", "type": "User" } ] }, { "repo": "kiwids0220/devicecode2winhello", "name": "deviceCode2WinHello", "owner": "kiwids0220", "url": "https://github.com/kiwids0220/deviceCode2WinHello", "id": "24d00efdf682", "stars": 71, "language": "Python", "description": "A small script that automates Entra ID persistence with Windows Hello For Business key", "type": "tool", "pushedAt": "2025-02-16T01:23:21Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kai Huang", "cardId": "bfccd516f1bc4cfc", "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "kiwids0220", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4", "type": "User" }, { "login": "dirkjanm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "c3c", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2326945?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2025-49844", "name": "cve-2025-49844", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/CVE-2025-49844", "stars": 65, "language": "Lua", "description": "CVE-2025-49844 – Redis Lua Parser Use-After-Free", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "938ab5914cf5", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-07T05:07:52Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/cheshire", "name": "cheshire", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/Cheshire", "stars": 61, "language": "NetLinx", "description": "Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f9e5c7f617c", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-04T12:50:13Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/cve-2024-27348", "name": "cve-2024-27348", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/CVE-2024-27348", "stars": 61, "language": "Python", "description": "Apache HugeGraph Server RCE Scanner ( CVE-2024-27348 )", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ce6284cf6bb", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-06-08T09:12:43Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/atomic-bofs", "name": "atomic-bofs", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/atomic-bofs", "stars": 60, "language": "C", "description": "Atomic test units for BOF execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d3969369b9fb", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-26T09:04:48Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2025-55182", "name": "cve-2025-55182", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/CVE-2025-55182", "stars": 59, "language": "JavaScript", "description": "Pre-auth RCE in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e0773f8b4648", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-09T16:56:22Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "zephrfish/f5-cve-2022-1388-exploit", "name": "f5-cve-2022-1388-exploit", "owner": "zephrfish", "url": "https://github.com/ZephrFish/F5-CVE-2022-1388-Exploit", "stars": 59, "language": "Python", "description": "Exploit and Check Script for CVE 2022-1388", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a0f1ca303341", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-12-07T01:31:38Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "oppastoppa31", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54377511?v=4", "type": "User" }, { "login": "BlackAp3rture", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11561473?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/nuclei-templates-dir", "name": "nuclei-templates-dir", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/nuclei-templates-dir", "stars": 57, "language": "CSS", "description": "Nuclei Templates Directory", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6ac27780272", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-17T00:45:12Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 247, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2023-50164-poc", "name": "cve-2023-50164-poc", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/cve-2023-50164-poc", "stars": 57, "language": "Go", "description": "Proof of Concept for Path Traversal in Apache Struts (\"CVE-2023-50164\")", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "39c75dd72bd6", "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-18T02:46:21Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "hackinglz/svg_phishing_tools", "name": "svg_phishing_tools", "owner": "HackingLZ", "url": "https://github.com/HackingLZ/svg_phishing_tools", "id": "fd8848007222", "stars": 57, "language": "Python", "description": "SVG Analysis and generation tools for commonly seen SVG attachment phishing", "type": "tool", "pushedAt": "2025-09-24T16:18:22Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 31, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HackingLZ", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "itm4n/cves", "name": "cves", "owner": "itm4n", "url": "https://github.com/itm4n/CVEs", "stars": 47, "language": "C++", "description": "Random CVEs", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Clément Labro", "cardId": "1a2de5538793da93", "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/cve-2020-0787-windows-bits-eop/", "title": "CVE-2020-0787 - Windows BITS - An EoP Bug Hidden in an Undocumented RPC Function", "person": "Clément Labro" }, { "url": "https://itm4n.github.io/cve-2020-0668-windows-service-tracing-eop/", "title": "CVE-2020-0668 - A Trivial Privilege Escalation Bug in Windows Service Tracing", "person": "Clément Labro" }, { "url": "https://itm4n.github.io/cve-2020-0863-windows-diagtrack-info-disclo/", "title": "CVE-2020-0863 - An Arbitrary File Read Vulnerability in Windows Diagnostic Tracking Service", "person": "Clément Labro" } ], "referencedCount": 3, "id": "c3078772506e", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-22T15:44:17Z", "archived": false, "topContributors": [ { "login": "itm4n", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/30777390?v=4", "type": "User" } ] }, { "repo": "specterops/bloodhound-legacy", "name": "bloodhound-legacy", "owner": "specterops", "url": "https://github.com/SpecterOps/BloodHound-Legacy", "stars": 10571, "language": "PowerShell", "description": "Six Degrees of Domain Admin", "type": "tool", "lanes": [ "1" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/04/11/bloodhound-course-update/", "title": "BloodHound Has Changed. Your Course Probably Hasn't.", "person": "Hugo van den Toorn" } ], "referencedCount": 1, "id": "56f007e7eaea", "score": 30, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 64, "contributors": [ { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" }, { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "login": "ShutdownRepo" }, { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Tom Porter", "cardId": "fec0a09412335bcf", "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "login": "porterhau5" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "login": "christophetd" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "John Hopper", "cardId": "61109955c224a1c5", "avatar": "https://avatars.githubusercontent.com/u/25071?v=4", "login": "zinic" } ], "pushedAt": "2026-03-02T18:29:31Z", "archived": false, "topContributors": [ { "login": "rvazarkar", "c": 1043, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "andyrobbins", "c": 340, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "JonasBK", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "cnotin", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "urangel", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/16910931?v=4", "type": "User" }, { "login": "ddlees", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8984872?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 10, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "StephenHinck", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12970156?v=4", "type": "User" }, { "login": "Scoubi", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7934465?v=4", "type": "User" }, { "login": "simondotsh", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/91923903?v=4", "type": "User" }, { "login": "pradameinhof", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/16960409?v=4", "type": "User" }, { "login": "ykaiboussiSO", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/182781928?v=4", "type": "User" }, { "login": "Hackndo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "Vulcanun", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/21147974?v=4", "type": "User" }, { "login": "dirkjanm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "lbrauns", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16474792?v=4", "type": "User" }, { "login": "Sq00ky", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44957111?v=4", "type": "User" }, { "login": "sundhaug92", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/519283?v=4", "type": "User" }, { "login": "juggernot325", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/885166?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "chadduffey", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7192541?v=4", "type": "User" }, { "login": "N7WEra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59871507?v=4", "type": "User" }, { "login": "NicolasCARPi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3043706?v=4", "type": "User" }, { "login": "paalbra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/265215?v=4", "type": "User" }, { "login": "peterhgombos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1403395?v=4", "type": "User" }, { "login": "qlemaire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29045289?v=4", "type": "User" }, { "login": "Nisserino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17592411?v=4", "type": "User" } ] }, { "repo": "porterhau5/bloodhound-owned", "name": "bloodhound-owned", "owner": "porterhau5", "url": "https://github.com/porterhau5/BloodHound-Owned", "stars": 186, "language": "Ruby", "description": "A collection of files for adding and leveraging custom properties in BloodHound.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Tom Porter", "cardId": "fec0a09412335bcf", "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/bloodhound-101/", "title": "Bloodhound 2.2 - How to Setup and Use it", "person": "Andy Gill" } ], "referencedCount": 1, "id": "2ee4bd1293b1", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-11-28T08:30:46Z", "archived": false, "topContributors": [ { "login": "porterhau5", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "type": "User" } ] }, { "repo": "zhuowei/blueshrimp", "name": "blueshrimp", "owner": "zhuowei", "url": "https://github.com/zhuowei/blueshrimp", "stars": 54, "language": "Python", "description": "Proof-of-concept for CVE-2025-48593", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [ { "url": "https://worthdoingbadly.com/bluetooth/", "title": "Proof-of-concept for CVE-2025-48593: No, this Android Bluetooth issue does NOT affect your phone or tablet", "person": "worthdoingbadly" } ], "referencedCount": 1, "id": "e715438411eb", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-02T08:02:49Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "zephrfish/goclipc2", "name": "goclipc2", "owner": "zephrfish", "url": "https://github.com/ZephrFish/GoClipC2", "stars": 53, "language": "Go", "description": "Clipboard for Command and Control between VDI, RDP and Others on Windows", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/clippy-goes-rogue/", "title": "Clippy Goes Rogue (GoClipC2)", "person": "Andy Gill" } ], "referencedCount": 1, "id": "78465e1b1167", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-12-07T01:31:52Z", "archived": false, "topContributors": [] }, { "repo": "0xbigshaq/apache-afl", "name": "apache-afl", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/apache-afl", "stars": 51, "language": "C", "description": "An automated setup for compiling & fuzzing Apache httpd server", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2022-03-12-fuzzing-smarter-part2", "title": "Fuzzing with AFL | Part 2: Trying Smarter(Apache)", "person": "pwner.gg" } ], "referencedCount": 1, "id": "affe8dbc0205", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-21T23:53:49Z", "archived": true, "topContributors": [ { "login": "0xbigshaq", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/genesisos", "name": "genesisos", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/GenesisOS", "stars": 50, "language": "C", "description": "curiosity got me here", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2024-04-22-genesis-os", "title": "GenesisOS: Publishing my micro-kernel!", "person": "pwner.gg" } ], "referencedCount": 1, "id": "bc52f2587539", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-27T14:56:33Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 117, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/crashmon", "name": "crashmon", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/crashmon", "stars": 48, "language": "C++", "description": "crashmon - A LLDB Based replacement for CrashWrangler", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [ { "url": "https://fuzzing.science/crashmon-a-lldb-based-replacement-for-crashwrangler/", "title": "Usage", "person": "Chaitanya" } ], "referencedCount": 1, "id": "b051f8a07c94", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-25T13:00:14Z", "archived": false, "topContributors": [ { "login": "ant4g0nist", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/runtime-unpack", "name": "runtime-unpack", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/runtime-unpack", "stars": 45, "language": "C", "description": "Load a statically-linked ELF binary(x86 architecture) without the execve syscall.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2020-09-20-runtime-unpack", "title": "Loading an ELF without the execve syscall", "person": "pwner.gg" } ], "referencedCount": 1, "id": "5cca3a60c3b5", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-20T13:57:10Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "elreydetoda/container_registry", "name": "container_registry", "owner": "elreydetoda", "url": "https://github.com/elreydetoda/container_registry", "stars": 0, "language": "Python", "description": "3rd party agent for Mythic to interact with container registries: https://specterops.io/blog/2026/06/16/mythic-embarking-on-the-open-seas-containerized-payload-delivery-for-kubernetes-assessments/", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Alex R. (elrey741)", "cardId": "094bd3d97d2b7633", "avatar": "https://avatars.githubusercontent.com/u/10230166?v=4" }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/06/16/mythic-embarking-on-the-open-seas-containerized-payload-delivery-for-kubernetes-assessments/", "title": "Mythic Embarking on the Open Seas: Containerized Payload Delivery for Kubernetes Assessments", "person": "Alex R. (elrey741)" } ], "referencedCount": 1, "id": "df4b979ef976", "score": 30, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-21T15:15:51Z", "archived": false, "topContributors": [ { "login": "elreydetoda", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/10230166?v=4", "type": "User" } ] }, { "repo": "laramies/theharvester", "name": "theHarvester", "owner": "laramies", "url": "https://github.com/laramies/theHarvester", "id": "d190339202c6", "stars": 16818, "language": "Python", "description": "E-mails, subdomains and names Harvester - OSINT ", "type": "tool", "pushedAt": "2026-07-17T21:20:57Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "laramies", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Adam Compton", "cardId": "5bc287d95d5ecaf3", "avatar": "https://avatars.githubusercontent.com/u/194860?v=4", "login": "tatanus" }, { "name": "Guillaume Valadon", "cardId": "20631954f9e3c2cb", "avatar": "https://avatars.githubusercontent.com/u/11683796?v=4", "login": "guedou" } ], "adoptionOperators": 2, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "L1ghtn1ng", "c": 1845, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1120, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "NotoriousRebel", "c": 557, "avatar": "https://avatars.githubusercontent.com/u/36310667?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 167, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "laramies", "c": 160, "avatar": "https://avatars.githubusercontent.com/u/543611?v=4", "type": "User" }, { "login": "leebaird", "c": 134, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "jzold", "c": 102, "avatar": "https://avatars.githubusercontent.com/u/26249175?v=4", "type": "User" }, { "login": "yoonthegoon", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/71526721?v=4", "type": "User" }, { "login": "ChrisSparksNM", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/38797357?v=4", "type": "User" }, { "login": "apehex", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/17317183?v=4", "type": "User" }, { "login": "mmynk", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/105677225?v=4", "type": "User" }, { "login": "blshkv", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/309751?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "frapava98", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/45664945?v=4", "type": "User" }, { "login": "as77c", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6859615?v=4", "type": "User" }, { "login": "cyberkimchi", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/129940045?v=4", "type": "User" }, { "login": "ibrahmsql", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/216335158?v=4", "type": "User" }, { "login": "Vizonex", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/114684698?v=4", "type": "User" }, { "login": "digininja", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/117081?v=4", "type": "User" }, { "login": "initbar", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12630151?v=4", "type": "User" }, { "login": "may55", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24497499?v=4", "type": "User" }, { "login": "KernelPan1k", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3338681?v=4", "type": "User" }, { "login": "dkasak", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/463342?v=4", "type": "User" }, { "login": "branchv", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19800529?v=4", "type": "User" }, { "login": "dbfreem", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9778569?v=4", "type": "User" }, { "login": "fproldan", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4945122?v=4", "type": "User" }, { "login": "sbajary", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7602842?v=4", "type": "User" }, { "login": "munahaf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1132506?v=4", "type": "User" }, { "login": "p3test", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/126883477?v=4", "type": "User" }, { "login": "ChrisJr404", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11917633?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/red-teaming-toolkit", "name": "Red-Teaming-Toolkit", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/Red-Teaming-Toolkit", "id": "0c5ffd3b9fd5", "stars": 10496, "language": null, "description": "This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.", "type": "tool", "pushedAt": "2026-05-07T23:44:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" }, { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "login": "Ne0nd0g" } ], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 17, "topContributors": [ { "login": "infosecn1nja", "c": 201, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" }, { "login": "simon-wessel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9195792?v=4", "type": "User" }, { "login": "yeyintminthuhtut", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6358256?v=4", "type": "User" }, { "login": "adoreste", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27815007?v=4", "type": "User" }, { "login": "uhx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11718563?v=4", "type": "User" }, { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "Hechtov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19705543?v=4", "type": "User" }, { "login": "besimaltnok", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4296962?v=4", "type": "User" }, { "login": "Green-Wolf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13748150?v=4", "type": "User" }, { "login": "mikesiegel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6181113?v=4", "type": "User" }, { "login": "Ne0nd0g", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "govolution", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6421894?v=4", "type": "User" }, { "login": "harry-prelude", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/120492853?v=4", "type": "User" }, { "login": "hudsonrock-partnerships", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/163282900?v=4", "type": "User" }, { "login": "kayila", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/925235?v=4", "type": "User" }, { "login": "BlaiseOfGlory", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5067183?v=4", "type": "User" }, { "login": "FusionCarcass", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6731925?v=4", "type": "User" } ] }, { "repo": "mrexodia/ida-pro-mcp", "name": "ida-pro-mcp", "owner": "mrexodia", "url": "https://github.com/mrexodia/ida-pro-mcp", "id": "cf19fd791b66", "stars": 10375, "language": "Python", "description": "AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.", "type": "tool", "pushedAt": "2026-07-13T12:20:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Duncan Ogilvie 🍍", "cardId": "2751962b9e4a5275", "avatar": "https://avatars.githubusercontent.com/u/2458265?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ryan Stortz", "cardId": "050e1a357b1bbabc", "avatar": "https://avatars.githubusercontent.com/u/4872355?v=4", "login": "withzombies" }, { "name": "Justas Masiulis", "cardId": "c563168e0703622b", "avatar": "https://avatars.githubusercontent.com/u/16763439?v=4", "login": "JustasMasiulis" } ], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 63, "topContributors": [ { "login": "mrexodia", "c": 289, "avatar": "https://avatars.githubusercontent.com/u/2458265?v=4", "type": "User" }, { "login": "can1357", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/11807264?v=4", "type": "User" }, { "login": "NeKroFR", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/70316327?v=4", "type": "User" }, { "login": "withzombies", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/4872355?v=4", "type": "User" }, { "login": "fireundubh", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1261664?v=4", "type": "User" }, { "login": "JohnsterID", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/69278611?v=4", "type": "User" }, { "login": "momo5502", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/4027748?v=4", "type": "User" }, { "login": "rm-NoobInCoding", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/35840559?v=4", "type": "User" }, { "login": "deadcode-walker", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/268043493?v=4", "type": "User" }, { "login": "packmad", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5713555?v=4", "type": "User" }, { "login": "hzqst", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12287588?v=4", "type": "User" }, { "login": "84634E1A607A", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/60734649?v=4", "type": "User" }, { "login": "nonetype", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/30901297?v=4", "type": "User" }, { "login": "ZehMatt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5415177?v=4", "type": "User" }, { "login": "squarepants0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57476305?v=4", "type": "User" }, { "login": "rD227", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/170849438?v=4", "type": "User" }, { "login": "oopsmishap", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/68875503?v=4", "type": "User" }, { "login": "williballenthin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/156560?v=4", "type": "User" }, { "login": "ShallowFeather", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/74778927?v=4", "type": "User" }, { "login": "widgetii", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6576495?v=4", "type": "User" }, { "login": "bukowa", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/38087302?v=4", "type": "User" }, { "login": "Aliang1337", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/35387465?v=4", "type": "User" }, { "login": "vee1e", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51952975?v=4", "type": "User" }, { "login": "neoz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/360582?v=4", "type": "User" }, { "login": "zouxianyu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29922399?v=4", "type": "User" }, { "login": "ngnl0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/57034574?v=4", "type": "User" }, { "login": "lsr00ter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3685107?v=4", "type": "User" }, { "login": "dDostalker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/146743193?v=4", "type": "User" }, { "login": "Ylarod", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30978685?v=4", "type": "User" }, { "login": "JorisVanEijden", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5211470?v=4", "type": "User" } ] }, { "repo": "1n3/sn1per", "name": "sn1per", "owner": "1n3", "url": "https://github.com/1N3/Sn1per", "stars": 10310, "language": "Shell", "description": "Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "163bc290e851", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 27, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "pushedAt": "2026-07-04T21:10:21Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 311, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "abnerrizzi", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/2419599?v=4", "type": "User" }, { "login": "ifly53e", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2816894?v=4", "type": "User" }, { "login": "r3k2", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5316229?v=4", "type": "User" }, { "login": "six2dez", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "AnonymousWP", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/50231698?v=4", "type": "User" }, { "login": "nnesetto", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/125788694?v=4", "type": "User" }, { "login": "jmchia", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/334560?v=4", "type": "User" }, { "login": "gbiagomba", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5851606?v=4", "type": "User" }, { "login": "joaomatosf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10002353?v=4", "type": "User" }, { "login": "alexoslabs2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39374140?v=4", "type": "User" }, { "login": "Anon-Exploiter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18597330?v=4", "type": "User" }, { "login": "mw3demo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4109485?v=4", "type": "User" }, { "login": "semgrep-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/170460994?v=4", "type": "User" }, { "login": "hariomv-exzeo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40633561?v=4", "type": "User" }, { "login": "hexageek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8998446?v=4", "type": "User" }, { "login": "iambrosie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4072584?v=4", "type": "User" }, { "login": "th3gundy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6793697?v=4", "type": "User" }, { "login": "MrTuxracer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17544684?v=4", "type": "User" }, { "login": "benemohamed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49129795?v=4", "type": "User" }, { "login": "menzow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5744434?v=4", "type": "User" }, { "login": "xalgord", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48483027?v=4", "type": "User" }, { "login": "m4st3rCh13f3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25395681?v=4", "type": "User" }, { "login": "eltociear", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22633385?v=4", "type": "User" }, { "login": "HacKanCuBa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7178420?v=4", "type": "User" }, { "login": "h3xx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/615684?v=4", "type": "User" }, { "login": "cyrinux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/519083?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/chainsaw", "name": "chainsaw", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/chainsaw", "id": "3d55933074d1", "stars": 3600, "language": "Rust", "description": "Rapidly Search and Hunt through Windows Forensic Artefacts", "type": "tool", "pushedAt": "2026-07-09T08:11:52Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 4, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 20, "topContributors": [ { "login": "alexkornitzer", "c": 145, "avatar": "https://avatars.githubusercontent.com/u/2750747?v=4", "type": "User" }, { "login": "fscc-alexkornitzer", "c": 94, "avatar": "https://avatars.githubusercontent.com/u/55740175?v=4", "type": "User" }, { "login": "FranticTyping", "c": 84, "avatar": "https://avatars.githubusercontent.com/u/8268953?v=4", "type": "User" }, { "login": "fscc-jamesd", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/71783749?v=4", "type": "User" }, { "login": "reece394", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/31659691?v=4", "type": "User" }, { "login": "JakePeralta7", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/58475124?v=4", "type": "User" }, { "login": "catarinadf", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/41592444?v=4", "type": "User" }, { "login": "Baniur", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/120281837?v=4", "type": "User" }, { "login": "Fuzzdkk", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50987338?v=4", "type": "User" }, { "login": "unrooted", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/30440603?v=4", "type": "User" }, { "login": "0xFFaraday", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/89433963?v=4", "type": "User" }, { "login": "GrepItAll", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32456461?v=4", "type": "User" }, { "login": "Markus98", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3738613?v=4", "type": "User" }, { "login": "Niicolaa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36470600?v=4", "type": "User" }, { "login": "deleonroselle21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/87581133?v=4", "type": "User" }, { "login": "chenrui333", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1580956?v=4", "type": "User" }, { "login": "ekt0-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/118297035?v=4", "type": "User" }, { "login": "dolly-parseton", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47218248?v=4", "type": "User" }, { "login": "eliza-louise", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/134280536?v=4", "type": "User" }, { "login": "fukusuket", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41001169?v=4", "type": "User" } ] }, { "repo": "skelsec/pypykatz", "name": "pypykatz", "owner": "skelsec", "url": "https://github.com/skelsec/pypykatz", "id": "da678e8687de", "stars": 3333, "language": "Python", "description": "Mimikatz implementation in pure Python", "type": "tool", "pushedAt": "2026-04-09T21:07:11Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "skelsec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 4, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 29, "topContributors": [ { "login": "skelsec", "c": 335, "avatar": "https://avatars.githubusercontent.com/u/19204702?v=4", "type": "User" }, { "login": "anotheronemoretime", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/25356738?v=4", "type": "User" }, { "login": "abcdywh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/118659768?v=4", "type": "User" }, { "login": "byehack", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26390254?v=4", "type": "User" }, { "login": "DidierA", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1620015?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "Signum21", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "hellocharli", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/111490544?v=4", "type": "User" }, { "login": "dadevel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/57419228?v=4", "type": "User" }, { "login": "jarlethorsen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/859603?v=4", "type": "User" }, { "login": "AdrianVollmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26064811?v=4", "type": "User" }, { "login": "AetherBlack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52674895?v=4", "type": "User" }, { "login": "Cr4sh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/534534?v=4", "type": "User" }, { "login": "dirkjanm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "mwgielen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4816201?v=4", "type": "User" }, { "login": "nikaiw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1255732?v=4", "type": "User" }, { "login": "the-rectifier", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7805274?v=4", "type": "User" }, { "login": "ProcessusT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13833925?v=4", "type": "User" }, { "login": "oxnan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66211593?v=4", "type": "User" }, { "login": "VakarisZ", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36815064?v=4", "type": "User" }, { "login": "X0RW3LL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53377798?v=4", "type": "User" }, { "login": "aconite33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" }, { "login": "brettgus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4873772?v=4", "type": "User" }, { "login": "garanews", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16938405?v=4", "type": "User" }, { "login": "mpgn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "perico2010", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4353437?v=4", "type": "User" }, { "login": "siliconblade", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1839084?v=4", "type": "User" }, { "login": "ucq", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79592?v=4", "type": "User" } ] }, { "repo": "gerenios/aadinternals", "name": "AADInternals", "owner": "Gerenios", "url": "https://github.com/Gerenios/AADInternals", "id": "d865efd80802", "stars": 1667, "language": "PowerShell", "description": "AADInternals PowerShell module for administering Azure AD and Office 365", "type": "tool", "pushedAt": "2025-09-30T18:30:24Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Gerenios", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 5, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 19, "topContributors": [ { "login": "NestoriSyynimaa", "c": 119, "avatar": "https://avatars.githubusercontent.com/u/31915053?v=4", "type": "User" }, { "login": "cnotin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "rchan-cjj", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/72082182?v=4", "type": "User" }, { "login": "skorov", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15148733?v=4", "type": "User" }, { "login": "3xpl01tc0d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33144026?v=4", "type": "User" }, { "login": "CravateRouge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16681900?v=4", "type": "User" }, { "login": "elmerguevara", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65732907?v=4", "type": "User" }, { "login": "jelliott7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54154317?v=4", "type": "User" }, { "login": "missing0x00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29318503?v=4", "type": "User" }, { "login": "ManuelBerrueta", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28192344?v=4", "type": "User" }, { "login": "martin-haller", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34276685?v=4", "type": "User" }, { "login": "maxgrim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2981208?v=4", "type": "User" }, { "login": "michaelmsonne", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49366751?v=4", "type": "User" }, { "login": "PfiatDe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47333109?v=4", "type": "User" }, { "login": "fraga", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/303538?v=4", "type": "User" }, { "login": "NgoHuy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1238112?v=4", "type": "User" }, { "login": "sfonteneau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5419492?v=4", "type": "User" }, { "login": "Cloud-Architekt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47817884?v=4", "type": "User" }, { "login": "sapirxfed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/174818854?v=4", "type": "User" } ] }, { "repo": "firefart/dirtycow", "name": "dirtycow", "owner": "firefart", "url": "https://github.com/firefart/dirtycow", "stars": 937, "language": "C", "description": "Dirty Cow exploit - CVE-2016-5195", "type": "tool", "lanes": [ "2" ], "author": { "name": "C:\\hristian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "53101275d8c9", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 4, "contributorCount": 2, "contributors": [], "pushedAt": "2025-07-30T11:31:24Z", "archived": true, "topContributors": [ { "login": "firefart", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "g0tmi1k", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/535942?v=4", "type": "User" } ] }, { "repo": "forrest-orr/moneta", "name": "moneta", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/moneta", "stars": 834, "language": "C++", "description": "Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5b1293aba040", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 3, "contributorCount": 3, "contributors": [], "pushedAt": "2024-03-16T22:58:19Z", "archived": false, "topContributors": [ { "login": "forrest-orr", "c": 155, "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4", "type": "User" }, { "login": "forrest-re", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/31349332?v=4", "type": "User" }, { "login": "gabriellandau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42078554?v=4", "type": "User" } ] }, { "repo": "nettitude/poshc2_old", "name": "PoshC2_Old", "owner": "nettitude", "url": "https://github.com/nettitude/PoshC2_Old", "id": "8d6f5064d488", "stars": 578, "language": "PowerShell", "description": "Powershell C2 Server and Implants", "type": "tool", "pushedAt": "2019-11-11T09:02:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "benpturner", "c": 443, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "davehardy20", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/874172?v=4", "type": "User" }, { "login": "Console", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/699884?v=4", "type": "User" }, { "login": "iam1980", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/101062?v=4", "type": "User" }, { "login": "riskydissonance", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" }, { "login": "rolen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1428801?v=4", "type": "User" }, { "login": "strawp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/548565?v=4", "type": "User" } ] }, { "repo": "spiderlabs/dohc2", "name": "DoHC2", "owner": "SpiderLabs", "url": "https://github.com/SpiderLabs/DoHC2", "id": "69dec2a566a3", "stars": 450, "language": "C#", "description": "DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).", "type": "tool", "pushedAt": "2020-08-07T12:48:13Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "SpiderLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dtmsecurity", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10533340?v=4", "type": "User" }, { "login": "afoxdavidi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51437167?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/turnt", "name": "turnt", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/turnt", "id": "3258dde539be", "stars": 428, "language": "Go", "description": "A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom.", "type": "tool", "pushedAt": "2026-06-09T11:46:23Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "UNC1739", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "timwhitez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36320909?v=4", "type": "User" } ] }, { "repo": "0x4d31/salt-scanner", "name": "salt-scanner", "owner": "0x4d31", "url": "https://github.com/0x4D31/salt-scanner", "stars": 262, "language": "Python", "description": "Linux vulnerability scanner based on Salt Open and Vulners audit API, with Slack notifications and JIRA integration", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adel Karimi", "cardId": "d370c84bd65364d0", "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf20bb8f9434", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-10-18T03:08:17Z", "archived": true, "topContributors": [ { "login": "0x4D31", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4", "type": "User" } ] }, { "repo": "carlospolop/fuzzhttpbypass", "name": "fuzzhttpbypass", "owner": "carlospolop", "url": "https://github.com/carlospolop/fuzzhttpbypass", "stars": 260, "language": "Python", "description": "This tool use fuuzzing to try to bypass unknown authentication methods, who knows...", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7b5a32902be7", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2024-08-09T14:58:45Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "bormaa", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23216493?v=4", "type": "User" }, { "login": "ajmeese7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17814535?v=4", "type": "User" }, { "login": "Tim-Hoekstra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135951177?v=4", "type": "User" }, { "login": "WildWestCyberSecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/167731704?v=4", "type": "User" } ] }, { "repo": "joxeankoret/cve-2017-7494", "name": "cve-2017-7494", "owner": "joxeankoret", "url": "https://github.com/joxeankoret/CVE-2017-7494", "stars": 260, "language": "Python", "description": "Remote root exploit for the SAMBA CVE-2017-7494 vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joxean Koret", "cardId": "e0c1465b5f795d4e", "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6c0a96b55d98", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-09T09:12:55Z", "archived": true, "topContributors": [ { "login": "joxeankoret", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4", "type": "User" } ] }, { "repo": "yardenshafir/ioringreadwriteprimitive", "name": "IoRingReadWritePrimitive", "owner": "yardenshafir", "url": "https://github.com/yardenshafir/IoRingReadWritePrimitive", "id": "e3e00c902178", "stars": 256, "language": "C++", "description": "Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2", "type": "tool", "pushedAt": "2022-07-05T21:48:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Yarden Shafir", "cardId": "84641f98d959dd3f", "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "yardenshafir", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4", "type": "User" } ] }, { "repo": "0x09al/wordsteal", "name": "wordsteal", "owner": "0x09al", "url": "https://github.com/0x09AL/WordSteal", "stars": 253, "language": "Python", "description": "This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8893bffecbc4", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-27T15:23:04Z", "archived": false, "topContributors": [ { "login": "0x09AL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "deletehead/pen_300_osep_prep", "name": "pen_300_osep_prep", "owner": "deletehead", "url": "https://github.com/deletehead/pen_300_osep_prep", "stars": 251, "language": null, "description": "Preparation guide for Offensive Security's PEN-300 course and OSEP certification exam", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jake Mayhew", "cardId": "96557237148df963", "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e9cedfa5a46", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-13T16:28:43Z", "archived": false, "topContributors": [ { "login": "deletehead", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4", "type": "User" } ] }, { "repo": "kgretzky/python-x86-obfuscator", "name": "python-x86-obfuscator", "owner": "kgretzky", "url": "https://github.com/kgretzky/python-x86-obfuscator", "stars": 247, "language": "Python", "description": "This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kuba Gretzky", "cardId": "8be8d7866769df75", "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "50162a5ac32c", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-06-17T08:42:11Z", "archived": false, "topContributors": [ { "login": "kgretzky", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/19260967?v=4", "type": "User" } ] }, { "repo": "0xdea/blindsight", "name": "blindsight", "owner": "0xdea", "url": "https://github.com/0xdea/blindsight", "stars": 247, "language": "Rust", "description": "Red teaming tool to dump LSASS memory, bypassing basic countermeasures.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5782f1b8ea85", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-09T11:52:24Z", "archived": false, "topContributors": [ { "login": "0xdea", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "idov31/jormungandr", "name": "jormungandr", "owner": "idov31", "url": "https://github.com/Idov31/Jormungandr", "stars": 245, "language": "C++", "description": "Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e3007750ba3", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-26T18:06:53Z", "archived": false, "topContributors": [ { "login": "Idov31", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "ang13t/fly-catcher", "name": "fly-catcher", "owner": "ANG13T", "url": "https://github.com/ANG13T/fly-catcher", "id": "f1871086ab69", "stars": 244, "language": "Jupyter Notebook", "description": "✈️ A device that detects for aircraft spoofing by monitoring for malicious ADS-B signals in the 1090MHz frequency. Built using a Raspberry Pi 3B and a FlightAware SDR", "type": "tool", "pushedAt": "2023-12-08T14:40:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ANG13T", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "d4stiny/threadject", "name": "threadject", "owner": "d4stiny", "url": "https://github.com/D4stiny/ThreadJect", "stars": 243, "language": "C++", "description": "Manual DLL Injector using Thread Hijacking.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "288f985d9614", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-24T01:00:56Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "int0x80/anti-forensics", "name": "anti-forensics", "owner": "int0x80", "url": "https://github.com/int0x80/anti-forensics", "id": "8d219fdb4dad", "stars": 242, "language": "Shell", "description": "for the louise", "type": "tool", "pushedAt": "2020-08-09T17:10:04Z", "archived": false, "lanes": [ "2" ], "author": { "name": "int eighty (of Dual Core)", "cardId": "42ee65b22947d16c", "avatar": "https://avatars.githubusercontent.com/u/1061032?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "int0x80", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1061032?v=4", "type": "User" }, { "login": "SecuritySense", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21248753?v=4", "type": "User" } ] }, { "repo": "chompie1337/s8_2019_2215_poc", "name": "s8_2019_2215_poc", "owner": "chompie1337", "url": "https://github.com/chompie1337/s8_2019_2215_poc", "stars": 237, "language": "C", "description": "PoC 2019-2215 exploit for S8/S8 active with DAC + SELinux + Knox/RKP bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Valentina Palmiotti", "cardId": "44ba26b4768bf26a", "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c5ae6f283e5", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-06-19T17:37:41Z", "archived": false, "topContributors": [ { "login": "chompie1337", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" } ] }, { "repo": "flangvik/azurec2relay", "name": "AzureC2Relay", "owner": "Flangvik", "url": "https://github.com/Flangvik/AzureC2Relay", "id": "a2c568471aff", "stars": 236, "language": "C#", "description": "AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.", "type": "tool", "pushedAt": "2021-02-15T18:06:38Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Flangvik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Flangvik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" } ] }, { "repo": "filipi86/malwareanalysis-in-pdf", "name": "MalwareAnalysis-in-PDF", "owner": "filipi86", "url": "https://github.com/filipi86/MalwareAnalysis-in-PDF", "id": "80e41c2f4f7c", "stars": 235, "language": null, "description": "Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code on ", "type": "tool", "pushedAt": "2022-02-24T19:58:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Filipi Pires", "cardId": "ad05414c70858a66", "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "filipi86", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4", "type": "User" } ] }, { "repo": "xorrior/random-csharptools", "name": "Random-CSharpTools", "owner": "xorrior", "url": "https://github.com/xorrior/Random-CSharpTools", "id": "f19ca254c461", "stars": 232, "language": "C#", "description": "Collection of CSharp Assemblies focused on Post-Exploitation Capabilities", "type": "tool", "pushedAt": "2019-05-30T23:54:39Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xorrior", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "d4stiny/forkplayground", "name": "forkplayground", "owner": "d4stiny", "url": "https://github.com/D4stiny/ForkPlayground", "stars": 231, "language": "C++", "description": "An implementation and proof-of-concept of Process Forking.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd49db5a845c", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-11-29T21:42:43Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" }, { "login": "josephH00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12785608?v=4", "type": "User" } ] }, { "repo": "joxeankoret/cosa-nostra", "name": "cosa-nostra", "owner": "joxeankoret", "url": "https://github.com/joxeankoret/cosa-nostra", "stars": 231, "language": "Python", "description": "Cosa Nostra, a FOSS graph based malware clusterization toolkit.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joxean Koret", "cardId": "e0c1465b5f795d4e", "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf7c574c4ad3", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "login": "seifreed" } ], "pushedAt": "2024-01-18T13:53:48Z", "archived": false, "topContributors": [ { "login": "joxeankoret", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4", "type": "User" }, { "login": "seifreed", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "otterhacker/m365pwned", "name": "M365Pwned", "owner": "OtterHacker", "url": "https://github.com/OtterHacker/M365Pwned", "id": "b9f772b2ca97", "stars": 226, "language": "PowerShell", "description": "Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens", "type": "tool", "pushedAt": "2026-03-04T15:16:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Yoann Dequeker", "cardId": "611896755a737879", "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "OtterHacker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4", "type": "User" } ] }, { "repo": "saaramar/execve_exploit", "name": "execve_exploit", "owner": "saaramar", "url": "https://github.com/saaramar/execve_exploit", "id": "8a26be62dcec", "stars": 221, "language": "C", "description": "Hardcore corruption of my execve() vulnerability in WSL", "type": "tool", "pushedAt": "2018-02-02T09:37:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Saar Amar", "cardId": "d86b50a17ef7263b", "avatar": "https://avatars.githubusercontent.com/u/22716990?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "saaramar", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/22716990?v=4", "type": "User" } ] }, { "repo": "tijme/cmstplua-uac-bypass", "name": "cmstplua-uac-bypass", "owner": "tijme", "url": "https://github.com/tijme/cmstplua-uac-bypass", "stars": 220, "language": "C", "description": "Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f657d897456d", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-09T15:14:17Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/uwd", "name": "uwd", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/uwd", "id": "d40a6e283852", "stars": 217, "language": "Rust", "description": "Call Stack Spoofing for Rust", "type": "tool", "pushedAt": "2026-01-28T01:08:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "joaoviictorti", "c": 116, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" }, { "login": "memN0ps", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/89628341?v=4", "type": "User" } ] }, { "repo": "mgeeky/expdevbadchars", "name": "expdevbadchars", "owner": "mgeeky", "url": "https://github.com/mgeeky/expdevBadChars", "stars": 211, "language": "Python", "description": "Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d91eebced97", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-10-05T23:00:28Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "onlylonly", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/14228756?v=4", "type": "User" } ] }, { "repo": "leo4j/invoke-sessionhunter", "name": "Invoke-SessionHunter", "owner": "Leo4j", "url": "https://github.com/Leo4j/Invoke-SessionHunter", "id": "8533ca9f06a0", "stars": 211, "language": "PowerShell", "description": "Retrieve and display information about active user sessions on remote computers. No admin privileges required.", "type": "tool", "pushedAt": "2024-08-12T13:15:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Leo4j", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "0x4d31/airt", "name": "airt", "owner": "0x4D31", "url": "https://github.com/0x4D31/airt", "id": "9dcc5bf53f88", "stars": 209, "language": "HTML", "description": "AIRT — A free, open-source AI Red Teaming course with 8 modules and hands-on Docker labs. Built with Perplexity Computer.", "type": "tool", "pushedAt": "2026-03-07T08:25:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adel Karimi", "cardId": "d370c84bd65364d0", "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x4D31", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4", "type": "User" } ] }, { "repo": "yassineaboukir/cve-2018-0296", "name": "cve-2018-0296", "owner": "yassineaboukir", "url": "https://github.com/yassineaboukir/CVE-2018-0296", "stars": 206, "language": "Python", "description": "Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ac8fff6938af", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-02-15T22:16:16Z", "archived": false, "topContributors": [ { "login": "yassineaboukir", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "type": "User" }, { "login": "ins1gn1a", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12810450?v=4", "type": "User" }, { "login": "s1kr10s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5374475?v=4", "type": "User" } ] }, { "repo": "jduck/cve-2015-1538-1", "name": "cve-2015-1538-1", "owner": "jduck", "url": "https://github.com/jduck/cve-2015-1538-1", "stars": 205, "language": "Python", "description": "An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "515eefa41a81", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-09-10T23:01:09Z", "archived": false, "topContributors": [ { "login": "jduck", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" } ] }, { "repo": "invictus-ir/invictus-aws", "name": "Invictus-AWS", "owner": "invictus-ir", "url": "https://github.com/invictus-ir/Invictus-AWS", "id": "e22508d48dbd", "stars": 204, "language": "Python", "description": "A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of incident response. ", "type": "tool", "pushedAt": "2026-01-06T14:25:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Korstiaan Stam", "cardId": "8dae1513142ed9db", "avatar": "https://avatars.githubusercontent.com/u/85489828?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "benjamin-glz", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/60100383?v=4", "type": "User" }, { "login": "invictus-korstiaan", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/21335149?v=4", "type": "User" }, { "login": "florisvanstal", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/156823612?v=4", "type": "User" }, { "login": "VZ-KHUT", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/203675327?v=4", "type": "User" }, { "login": "huanderer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61373386?v=4", "type": "User" }, { "login": "WellKnitTech", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6225711?v=4", "type": "User" } ] }, { "repo": "0xeb/gpt-analyst", "name": "gpt-analyst", "owner": "0xeb", "url": "https://github.com/0xeb/gpt-analyst", "id": "e140b76b3c01", "stars": 202, "language": null, "description": "GPT-Analyst: A GPT for GPT analysis and reverse engineering", "type": "tool", "pushedAt": "2024-03-14T04:03:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Elias Bachaalany", "cardId": "1c0a3b497cd70526", "avatar": "https://avatars.githubusercontent.com/u/230851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xeb", "c": 79, "avatar": "https://avatars.githubusercontent.com/u/230851?v=4", "type": "User" } ] }, { "repo": "saelo/cve-2014-0038", "name": "cve-2014-0038", "owner": "saelo", "url": "https://github.com/saelo/cve-2014-0038", "stars": 199, "language": "C", "description": "Linux local root exploit for CVE-2014-0038", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f699e398b9c9", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2014-04-18T10:26:02Z", "archived": false, "topContributors": [ { "login": "jvazquez-r7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1742838?v=4", "type": "User" }, { "login": "Lekensteyn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/164530?v=4", "type": "User" } ] }, { "repo": "xorrior/raven", "name": "raven", "owner": "xorrior", "url": "https://github.com/xorrior/raven", "stars": 196, "language": "C++", "description": "CobaltStrike External C2 for Websockets", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ab57f71b025", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-07-16T04:14:13Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" }, { "login": "luxcupitor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4923640?v=4", "type": "User" } ] }, { "repo": "its-a-feature/offensive_macos", "name": "offensive_macos", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/offensive_macos", "stars": 194, "language": null, "description": "Tracking of offensive macOS tooling, blogs, and related helpful information", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "081ddf437c46", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-11-18T23:12:39Z", "archived": false, "topContributors": [ { "login": "its-a-feature", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" }, { "login": "mattreduce", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/66427?v=4", "type": "User" } ] }, { "repo": "filosottile/cve-2016-2107", "name": "cve-2016-2107", "owner": "filosottile", "url": "https://github.com/FiloSottile/CVE-2016-2107", "stars": 193, "language": "Go", "description": "Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filippo Valsorda", "cardId": "9f10b11efbce4c69", "avatar": "https://avatars.githubusercontent.com/u/1225294?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "73134e340853", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-03-10T02:18:00Z", "archived": false, "topContributors": [ { "login": "FiloSottile", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1225294?v=4", "type": "User" }, { "login": "benjojo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1504626?v=4", "type": "User" } ] }, { "repo": "tihmstar/ra1nsn0w", "name": "ra1nsn0w", "owner": "tihmstar", "url": "https://github.com/tihmstar/ra1nsn0w", "id": "d56a5b4f26a0", "stars": 193, "language": "C++", "description": "A tethered booter for 64bit iOS devices vulnerable to checkm8", "type": "tool", "pushedAt": "2026-01-29T07:56:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tihmstar", "cardId": "f757d3b21c2ac97c", "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "tihmstar", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4", "type": "User" }, { "login": "ESResearchDepartment", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/108614663?v=4", "type": "User" } ] }, { "repo": "occamsxor/dragnmove", "name": "dragnmove", "owner": "occamsxor", "url": "https://github.com/OccamsXor/Dragnmove", "stars": 192, "language": "C++", "description": "Infect Shared Files In Memory for Lateral Movement", "type": "tool", "lanes": [ "2" ], "author": { "name": "Barış Akkaya", "cardId": "7d9c683fea5597da", "avatar": "https://avatars.githubusercontent.com/u/34008990?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1101ce970e1e", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-14T18:10:20Z", "archived": false, "topContributors": [ { "login": "OccamsXor", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34008990?v=4", "type": "User" } ] }, { "repo": "leo4j/invoke-smbremoting", "name": "invoke-smbremoting", "owner": "leo4j", "url": "https://github.com/Leo4j/Invoke-SMBRemoting", "stars": 189, "language": "PowerShell", "description": "Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8f72b83612bd", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-05-19T11:56:47Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" }, { "login": "The-Viper-One", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/68926315?v=4", "type": "User" } ] }, { "repo": "wietze/windows-command-line-obfuscation", "name": "windows-command-line-obfuscation", "owner": "wietze", "url": "https://github.com/wietze/windows-command-line-obfuscation", "id": "9d18725210a1", "stars": 188, "language": "Python", "description": "Project for identifying executables that have command-line options that can be obfuscated, possibly bypassing detection rules.", "type": "tool", "pushedAt": "2025-01-27T23:10:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wietze", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" } ] }, { "repo": "ccob/gssapi-abuse", "name": "gssapi-abuse", "owner": "CCob", "url": "https://github.com/CCob/gssapi-abuse", "id": "adf082a12d0c", "stars": 188, "language": "Python", "description": "A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks", "type": "tool", "pushedAt": "2025-08-16T13:36:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "CCob", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" } ] }, { "repo": "francozappa/knob", "name": "knob", "owner": "francozappa", "url": "https://github.com/francozappa/knob", "stars": 186, "language": "Python", "description": "Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniele Antonioli", "cardId": "3dc546077c56f5d8", "avatar": "https://avatars.githubusercontent.com/u/4628017?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "65887c0d3357", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-04-04T15:16:08Z", "archived": false, "topContributors": [ { "login": "francozappa", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/4628017?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "scriptingxss/iotgoat", "name": "iotgoat", "owner": "scriptingxss", "url": "https://github.com/scriptingxss/IoTGoat", "stars": 185, "language": "C", "description": " IoTGoat is a deliberately insecure firmware based on OpenWrt. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aaron Guzman", "cardId": "2e92c22761520641", "avatar": "https://avatars.githubusercontent.com/u/18707651?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7cd240c63315", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2020-03-29T23:18:00Z", "archived": false, "topContributors": [ { "login": "scriptingxss", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/18707651?v=4", "type": "User" }, { "login": "0x48piraj", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5800726?v=4", "type": "User" }, { "login": "jandress", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1542666?v=4", "type": "User" }, { "login": "paragmhatre10", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43283927?v=4", "type": "User" } ] }, { "repo": "bitsbywill/ksmbd-n-day", "name": "ksmbd-n-day", "owner": "bitsbywill", "url": "https://github.com/BitsByWill/ksmbd-n-day", "stars": 55, "language": "Python", "description": "Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130", "type": "tool", "lanes": [ "2" ], "author": { "name": "willsroot", "cardId": "36e6cec409f2fb19", "avatar": "https://avatars.githubusercontent.com/u/8272056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7f182076ac5d", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-13T20:09:19Z", "archived": false, "topContributors": [ { "login": "BitsByWill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8272056?v=4", "type": "User" } ] }, { "repo": "toweringdragoon/sacl_scanner", "name": "sacl_scanner", "owner": "toweringdragoon", "url": "https://github.com/ToweringDragoon/SACL_Scanner", "stars": 52, "language": "C", "description": "SACL Scanner is a tool designed to scan and analyze SACLs.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexander DeMine", "cardId": "650881f1f472eed6", "avatar": "https://avatars.githubusercontent.com/u/53925659?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71cc9031a235", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-13T14:52:32Z", "archived": false, "topContributors": [ { "login": "ToweringDragoon", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/53925659?v=4", "type": "User" } ] }, { "repo": "techspence/badshares", "name": "badshares", "owner": "techspence", "url": "https://github.com/techspence/BadShares", "stars": 50, "language": "PowerShell", "description": "A tool to create randomly insecure file shares that also contain unsecured credential files", "type": "tool", "lanes": [ "2" ], "author": { "name": "Spencer Alessi", "cardId": "eae812c5a3f7c337", "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "01c6322db15e", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-16T14:56:19Z", "archived": false, "topContributors": [ { "login": "techspence", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/dnswho", "name": "dnswho", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/DNSWho", "stars": 49, "language": "C#", "description": "transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25d322cda432", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-19T16:19:25Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "h0mbre/fuzzing", "name": "Fuzzing", "owner": "h0mbre", "url": "https://github.com/h0mbre/Fuzzing", "id": "0d8a733fc814", "stars": 47, "language": "C", "description": "Repo for fuzzing projects", "type": "tool", "pushedAt": "2020-06-18T14:06:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "h0mbre", "cardId": "494e2f03a2cee362", "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "h0mbre", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4", "type": "User" } ] }, { "repo": "hackinglz/litellm_1.82.8_payload", "name": "litellm_1.82.8_payload", "owner": "hackinglz", "url": "https://github.com/HackingLZ/litellm_1.82.8_payload", "stars": 41, "language": "Python", "description": "Defanged malware stages from the litellm 1.82.8 PyPI supply chain compromise — credential stealer, K8s lateral movement, C2 backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "48ec0542a7ba", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-24T14:04:11Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "hackinglz/saas_enum", "name": "saas_enum", "owner": "HackingLZ", "url": "https://github.com/HackingLZ/saas_enum", "id": "8c673b940dea", "stars": 40, "language": "Python", "description": "Command-line tool for discovering SaaS platforms a company uses via DNS enumeration", "type": "tool", "pushedAt": "2025-07-23T13:50:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HackingLZ", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "zhuowei/cve-2025-27363-proof-of-concept", "name": "cve-2025-27363-proof-of-concept", "owner": "zhuowei", "url": "https://github.com/zhuowei/CVE-2025-27363-proof-of-concept", "stars": 39, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4d3410a021d0", "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-23T23:31:00Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/webgl-fuzzer", "name": "webgl-fuzzer", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/webgl-fuzzer", "id": "bc82bea8404d", "stars": 39, "language": "JavaScript", "description": "WebGL fuzzer", "type": "tool", "pushedAt": "2023-03-13T02:48:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 30, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ant4g0nist", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "mckern3l/ragdrag", "name": "ragdrag", "owner": "mckern3l", "url": "https://github.com/McKern3l/RAGdrag", "stars": 37, "language": "Python", "description": "RAG pipeline security testing toolkit - 27 techniques across 6 kill chain phases, mapped to MITRE ATLAS", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Pete McKernan", "cardId": "0586517d7a517b2b", "avatar": "https://avatars.githubusercontent.com/u/270715770?v=4" }, "referencedBy": [ { "url": "https://itsbroken.ai/ragdrag-r5-hijack/", "title": "RAGdrag Deep Dive: Hijacking RAG Retrieval", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag/", "title": "RAGdrag: A Kill Chain for RAG Pipeline Attacks", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r4-poison/", "title": "RAGdrag Deep Dive: Poisoning the Knowledge Base", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r2-probe/", "title": "RAGdrag Deep Dive: Mapping RAG Internals Without Access", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-walkthrough/", "title": "RAGdrag Walkthrough: From Fingerprint to Exfiltration in Four Commands", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r6-evade/", "title": "RAGdrag Deep Dive: Bypassing RAG Guardrails", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/cheatsheet/", "title": "AI Security Assessment Reference", "person": "" }, { "url": "https://itsbroken.ai/ragdrag-full-kill-chain/", "title": "RAGdrag Deep Dive: The Complete Kill Chain", "person": "Pete McKernan" } ], "referencedCount": 8, "id": "e11d3abf4660", "score": 29, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-19T02:12:34Z", "archived": false, "topContributors": [ { "login": "pitl0rd", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/47712252?v=4", "type": "User" } ] }, { "repo": "zcutlip/gdbinit-mips", "name": "gdbinit-mips", "owner": "zcutlip", "url": "https://github.com/zcutlip/gdbinit-mips", "stars": 38, "language": null, "description": "A gdbinit file that makes gdb much more usable for MIPS debugging.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2015/01/remote-debugging-with-qemu-and-ida-pro/", "title": "The Shadow File - Remote Debugging with QEMU and IDA Pro", "person": "Zachary Cutlip" } ], "referencedCount": 1, "id": "577ebdfbb81f", "score": 29, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2012-09-05T13:05:12Z", "archived": false, "topContributors": [] }, { "repo": "0xbigshaq/redis-afl", "name": "redis-afl", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/redis-afl", "stars": 35, "language": "Dockerfile", "description": "An automated setup for fuzzing Redis w/ AFL++", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2022-03-10-fuzzing-harder-part1", "title": "Fuzzing with AFL | Part 1: Trying Harder(Redis)", "person": "pwner.gg" } ], "referencedCount": 1, "id": "c891abfb3243", "score": 29, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-03-12T21:56:17Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "zcutlip/crossbow", "name": "crossbow", "owner": "zcutlip", "url": "https://github.com/zcutlip/crossbow", "stars": 31, "language": "Python", "description": "Crossbow is a lightweight, cross platform exploit development framework implemented in Python. Currently, Crossbow's focus is on MIPS Linux systems.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2013/03/crossbow/", "title": "The Shadow File - Crossbow", "person": "Zachary Cutlip" } ], "referencedCount": 1, "id": "eea5e898dc4c", "score": 29, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-04-30T13:50:53Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "zephrfish/hellojackhunter", "name": "hellojackhunter", "owner": "zephrfish", "url": "https://github.com/ZephrFish/HelloJackHunter", "stars": 31, "language": "C#", "description": "Research into WinSxS binaries and finding hijackable paths", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/hellojackhunter-exploring-winsxs/", "title": "Side-by-Side with HelloJackHunter: Unveiling the Mysteries of WinSxS", "person": "Andy Gill" } ], "referencedCount": 1, "id": "a72cd41de9b9", "score": 29, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-07T01:32:06Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "six2dez/reconftw", "name": "reconftw", "owner": "six2dez", "url": "https://github.com/six2dez/reconftw", "stars": 7858, "language": "Shell", "description": "reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "31091eb3c8a5", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 70, "contributors": [], "pushedAt": "2026-06-29T16:41:46Z", "archived": false, "topContributors": [ { "login": "six2dez", "c": 1921, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "bileltechno", "c": 127, "avatar": "https://avatars.githubusercontent.com/u/5035154?v=4", "type": "User" }, { "login": "kleozzy", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/29057778?v=4", "type": "User" }, { "login": "rt-bast", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/123545705?v=4", "type": "User" }, { "login": "sidxparab", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/64590875?v=4", "type": "User" }, { "login": "0-0eth0", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/50541295?v=4", "type": "User" }, { "login": "pgrenaud", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/10713979?v=4", "type": "User" }, { "login": "frost19k", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/49780407?v=4", "type": "User" }, { "login": "lur1el", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/25422956?v=4", "type": "User" }, { "login": "ddaniboy", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/52128795?v=4", "type": "User" }, { "login": "Stoo0rmq", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/11391756?v=4", "type": "User" }, { "login": "allbilly", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/53866088?v=4", "type": "User" }, { "login": "vivekperkawar", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/64719666?v=4", "type": "User" }, { "login": "ab2pentest", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/84577967?v=4", "type": "User" }, { "login": "AnonymousWP", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/50231698?v=4", "type": "User" }, { "login": "Job-de-Bruijn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/84768439?v=4", "type": "User" }, { "login": "r4ulcl", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25440046?v=4", "type": "User" }, { "login": "j0hnZ3RA", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/82909572?v=4", "type": "User" }, { "login": "tr3ss", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/21034728?v=4", "type": "User" }, { "login": "osxtest", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/38131934?v=4", "type": "User" }, { "login": "whiskeykilo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18176030?v=4", "type": "User" }, { "login": "lorenzocamilli", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/80099484?v=4", "type": "User" }, { "login": "d3vchac", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13952914?v=4", "type": "User" }, { "login": "Anugrahsr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/44763564?v=4", "type": "User" }, { "login": "khanhnt2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11042918?v=4", "type": "User" }, { "login": "jorgectf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46056498?v=4", "type": "User" }, { "login": "saidheerajgantala", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/68076287?v=4", "type": "User" }, { "login": "rynosec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63975446?v=4", "type": "User" }, { "login": "wanetty", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23078399?v=4", "type": "User" }, { "login": "knety", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/124771971?v=4", "type": "User" } ] }, { "repo": "mandiant/commando-vm", "name": "commando-vm", "owner": "mandiant", "url": "https://github.com/mandiant/commando-vm", "id": "494fe55f97cc", "stars": 7726, "language": "PowerShell", "description": "Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com", "type": "tool", "pushedAt": "2025-10-16T04:00:43Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Mandiant", "cardId": "c8dd39c7259e3816", "avatar": "https://avatars.githubusercontent.com/u/331209?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "day1player", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/37482972?v=4", "type": "User" }, { "login": "Menn1s", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/38476987?v=4", "type": "User" }, { "login": "htnhan", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/8796047?v=4", "type": "User" }, { "login": "MalwareMechanic", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20993114?v=4", "type": "User" }, { "login": "nos3curity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72961537?v=4", "type": "User" }, { "login": "rsdoherty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3150510?v=4", "type": "User" }, { "login": "WFoy-Ortiz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/71472473?v=4", "type": "User" } ] }, { "repo": "daffainfo/allaboutbugbounty", "name": "AllAboutBugBounty", "owner": "daffainfo", "url": "https://github.com/daffainfo/AllAboutBugBounty", "id": "5f64c228ad9d", "stars": 6806, "language": null, "description": "All about bug bounty (bypasses, payloads, and etc)", "type": "tool", "pushedAt": "2023-09-08T12:00:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Muhammad Daffa", "cardId": "6e6b6c585fcb159b", "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "daffainfo", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4", "type": "User" }, { "login": "xd20111", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34960106?v=4", "type": "User" }, { "login": "valioDOTch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/800467?v=4", "type": "User" }, { "login": "zhanang19", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19884603?v=4", "type": "User" } ] }, { "repo": "urbanadventurer/whatweb", "name": "whatweb", "owner": "urbanadventurer", "url": "https://github.com/urbanadventurer/WhatWeb", "stars": 6727, "language": "Ruby", "description": "Next generation web scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Horton", "cardId": "ce17217268421b81", "avatar": "https://avatars.githubusercontent.com/u/101783?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "80f08d8f025a", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 51, "contributors": [], "pushedAt": "2026-04-02T15:43:24Z", "archived": false, "topContributors": [ { "login": "bcoles", "c": 3497, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "urbanadventurer", "c": 1132, "avatar": "https://avatars.githubusercontent.com/u/101783?v=4", "type": "User" }, { "login": "pvdl", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/1476340?v=4", "type": "User" }, { "login": "definity", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/4111455?v=4", "type": "User" }, { "login": "juananpe", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/1078305?v=4", "type": "User" }, { "login": "SamJoan", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/152786?v=4", "type": "User" }, { "login": "andrericardo", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/171730?v=4", "type": "User" }, { "login": "Code0x58", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/9309570?v=4", "type": "User" }, { "login": "Phylu", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/587332?v=4", "type": "User" }, { "login": "napz99", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/251167?v=4", "type": "User" }, { "login": "cgimenes", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2816976?v=4", "type": "User" }, { "login": "nil0x42", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3504393?v=4", "type": "User" }, { "login": "LrsK", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/827702?v=4", "type": "User" }, { "login": "themaxdavitt", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/27709025?v=4", "type": "User" }, { "login": "johndekroon", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3469454?v=4", "type": "User" }, { "login": "fabaff", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "frapava98", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/45664945?v=4", "type": "User" }, { "login": "guikcd", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/676032?v=4", "type": "User" }, { "login": "ajgon", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/150545?v=4", "type": "User" }, { "login": "csalazar", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/360285?v=4", "type": "User" }, { "login": "SlivTaMere", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6403685?v=4", "type": "User" }, { "login": "nikosk", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/142898?v=4", "type": "User" }, { "login": "sagarjunnarkar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1636796?v=4", "type": "User" }, { "login": "xambroz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/723625?v=4", "type": "User" }, { "login": "paralax", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "ashcrow", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22706?v=4", "type": "User" }, { "login": "coffeetocode", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1274965?v=4", "type": "User" }, { "login": "naglis", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/827324?v=4", "type": "User" }, { "login": "gboddin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4395092?v=4", "type": "User" }, { "login": "elcodigok", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/329758?v=4", "type": "User" } ] }, { "repo": "michenriksen/gitrob", "name": "gitrob", "owner": "michenriksen", "url": "https://github.com/michenriksen/gitrob", "id": "79b6163c08b2", "stars": 6198, "language": "Go", "description": "Reconnaissance tool for GitHub organizations", "type": "tool", "pushedAt": "2022-09-20T18:09:09Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Michael Henriksen", "cardId": "9a2720188c485b00", "avatar": "https://avatars.githubusercontent.com/u/304361?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "projectdiscovery/naabu", "name": "naabu", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/naabu", "stars": 6078, "language": "Go", "description": "A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "58c82be5bb25", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 75, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" }, { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" } ], "pushedAt": "2026-07-17T08:43:33Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 1193, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Mzack9999", "c": 383, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "ehsandeep", "c": 270, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "Ice3man543", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "LuitelSamikshya", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/85764322?v=4", "type": "User" }, { "login": "vzamanillo", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/10209695?v=4", "type": "User" }, { "login": "gaby", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/835733?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "parrasajad", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16835787?v=4", "type": "User" }, { "login": "akkuman", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7813511?v=4", "type": "User" }, { "login": "hahwul", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13212227?v=4", "type": "User" }, { "login": "xm1k3", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/73166077?v=4", "type": "User" }, { "login": "drwtsn95", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55363177?v=4", "type": "User" }, { "login": "XTeam-Wing", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25416365?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "ankh2054", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6784287?v=4", "type": "User" }, { "login": "hanXen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43023317?v=4", "type": "User" }, { "login": "ehrishirajsharma", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35542790?v=4", "type": "User" }, { "login": "ShubhamRasal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45902122?v=4", "type": "User" }, { "login": "owl0w1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17188713?v=4", "type": "User" }, { "login": "nu11zy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55335158?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "suzuki-shunsuke", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13323303?v=4", "type": "User" }, { "login": "sheikhshaheerimran", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/140874972?v=4", "type": "User" }, { "login": "chenrui333", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1580956?v=4", "type": "User" }, { "login": "Passer6y", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34622501?v=4", "type": "User" }, { "login": "Mehran-Seifalinia", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/70560051?v=4", "type": "User" }, { "login": "sttlr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/40246850?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" } ] }, { "repo": "six2dez/onelistforall", "name": "OneListForAll", "owner": "six2dez", "url": "https://github.com/six2dez/OneListForAll", "id": "1035269c9e6e", "stars": 3198, "language": "Go", "description": "Rockyou for web fuzzing", "type": "tool", "pushedAt": "2026-03-11T21:38:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "six2dez", "c": 151, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "cmaruti", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2283072?v=4", "type": "User" }, { "login": "Atom-U", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/132940619?v=4", "type": "User" }, { "login": "HackCommander", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72107500?v=4", "type": "User" }, { "login": "Josue87", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16885065?v=4", "type": "User" } ] }, { "repo": "cracked5pider/stardust", "name": "stardust", "owner": "cracked5pider", "url": "https://github.com/Cracked5pider/Stardust", "stars": 1353, "language": "C", "description": "A modern 32/64-bit position independent implant template ", "type": "tool", "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1349c878b6e6", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 2, "mentionDistinct": 2, "contributorCount": 4, "contributors": [ { "name": "Andrew Thompson", "cardId": "21baa1a49ad9835d", "avatar": "https://avatars.githubusercontent.com/u/156708357?v=4", "login": "imposecost" } ], "pushedAt": "2026-06-01T15:10:20Z", "archived": false, "topContributors": [ { "login": "Cracked5pider", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" }, { "login": "Cerbersec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58052983?v=4", "type": "User" }, { "login": "0xVavaldi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33965786?v=4", "type": "User" }, { "login": "imposecost", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/156708357?v=4", "type": "User" } ] }, { "repo": "icyguider/latloader", "name": "LatLoader", "owner": "icyguider", "url": "https://github.com/icyguider/LatLoader", "id": "447869f2e9c1", "stars": 313, "language": "C++", "description": "PoC module to demonstrate automated lateral movement with the Havoc C2 framework.", "type": "tool", "pushedAt": "2023-12-09T00:28:32Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "icyguider", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "icyguider", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/79864975?v=4", "type": "User" } ] }, { "repo": "ryhanson/externalc2", "name": "ExternalC2", "owner": "ryhanson", "url": "https://github.com/ryhanson/ExternalC2", "id": "1c7ad1172dce", "stars": 291, "language": "C#", "description": "A library for integrating communication channels with the Cobalt Strike External C2 server", "type": "tool", "pushedAt": "2017-11-23T16:47:26Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ryhanson", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ryhanson", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3486433?v=4", "type": "User" }, { "login": "tomsteele", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2497381?v=4", "type": "User" } ] }, { "repo": "ccob/sylantstrike", "name": "sylantstrike", "owner": "ccob", "url": "https://github.com/CCob/SylantStrike", "stars": 183, "language": "C", "description": "Simple EDR implementation to demonstrate bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b521c2dbabd1", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-27T18:51:28Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "invictus-ir/alfa", "name": "alfa", "owner": "invictus-ir", "url": "https://github.com/invictus-ir/ALFA", "stars": 183, "language": "Python", "description": "ALFA stands for Automated Audit Log Forensic Analysis for Google Workspace. You can use this tool to acquire all Google Workspace audit logs and to perform automated forensic analysis on the audit log", "type": "tool", "lanes": [ "2" ], "author": { "name": "Korstiaan Stam", "cardId": "8dae1513142ed9db", "avatar": "https://avatars.githubusercontent.com/u/85489828?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9a56c3f4e86", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 12, "contributors": [], "pushedAt": "2026-03-02T11:32:55Z", "archived": false, "topContributors": [ { "login": "florisvanstal", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/156823612?v=4", "type": "User" }, { "login": "invictus-korstiaan", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/21335149?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 9, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "TobiasInvictus", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/163285202?v=4", "type": "User" }, { "login": "florisvstal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/254454568?v=4", "type": "User" }, { "login": "fdelorenzi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2947565?v=4", "type": "User" }, { "login": "Matthijsy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5302372?v=4", "type": "User" }, { "login": "benjamin-glz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/60100383?v=4", "type": "User" }, { "login": "joshlemon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19796681?v=4", "type": "User" }, { "login": "paulihme", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49721517?v=4", "type": "User" }, { "login": "Synchx00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/95991754?v=4", "type": "User" }, { "login": "d3vk47", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31852938?v=4", "type": "User" } ] }, { "repo": "betab0t/cve-2017-7494", "name": "cve-2017-7494", "owner": "betab0t", "url": "https://github.com/betab0t/cve-2017-7494", "stars": 181, "language": "Python", "description": "Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Omri Ben-Bassat", "cardId": "ab54a30644a9c982", "avatar": "https://avatars.githubusercontent.com/u/40000473?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d17de29d0f7f", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-07-26T13:07:51Z", "archived": false, "topContributors": [] }, { "repo": "jofpin/brash", "name": "brash", "owner": "jofpin", "url": "https://github.com/jofpin/brash", "id": "8913286d36f9", "stars": 180, "language": "JavaScript", "description": "Chromium Browser DoS Attack via document.title Exploitation", "type": "tool", "pushedAt": "2025-10-28T16:14:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jofpin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4", "type": "User" } ] }, { "repo": "dafthack/check-localadminhash", "name": "check-localadminhash", "owner": "dafthack", "url": "https://github.com/dafthack/Check-LocalAdminHash", "stars": 179, "language": "PowerShell", "description": "Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "33043896c84d", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-11T22:05:14Z", "archived": false, "topContributors": [ { "login": "dafthack", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" } ] }, { "repo": "darmado/atomic-red-team-c2", "name": "atomic-red-team-c2", "owner": "darmado", "url": "https://github.com/darmado/Atomic-Red-Team-C2", "stars": 178, "language": "Python", "description": "ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel", "cardId": "035848ee7a3d9356", "avatar": "https://avatars.githubusercontent.com/u/40247782?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d0df213d3dc0", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-02-14T17:40:58Z", "archived": false, "topContributors": [ { "login": "N1l3shK", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/74335767?v=4", "type": "User" }, { "login": "blackbotgithub", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/76795082?v=4", "type": "User" }, { "login": "yangr0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51311097?v=4", "type": "User" }, { "login": "darmado", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/40247782?v=4", "type": "User" } ] }, { "repo": "saelo/cve-2018-4233", "name": "cve-2018-4233", "owner": "saelo", "url": "https://github.com/saelo/cve-2018-4233", "stars": 178, "language": "JavaScript", "description": "Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da2d0561fd92", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-07T23:51:49Z", "archived": false, "topContributors": [ { "login": "saelo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "jstrosch/sclauncher", "name": "sclauncher", "owner": "jstrosch", "url": "https://github.com/jstrosch/sclauncher", "stars": 177, "language": "C", "description": "A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Stroschein", "cardId": "ca3f07d87861323c", "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e520a9d63f31", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-20T14:54:58Z", "archived": false, "topContributors": [ { "login": "jstrosch", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4", "type": "User" } ] }, { "repo": "msuiche/elegant-bouncer", "name": "elegant-bouncer", "owner": "msuiche", "url": "https://github.com/msuiche/elegant-bouncer", "id": "fe2a6885e75e", "stars": 177, "language": "Rust", "description": "ELEGANTBOUNCER is a detection tool for file-based mobile exploits.", "type": "tool", "pushedAt": "2025-09-17T06:03:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Matt Suiche", "cardId": "bda3839f4b2fa897", "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "msuiche", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4", "type": "User" } ] }, { "repo": "bw3ll/shellwasp", "name": "shellwasp", "owner": "bw3ll", "url": "https://github.com/Bw3ll/ShellWasp", "stars": 176, "language": "Python", "description": "ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Windows syscalls. ShellWasp is built for 32-bit, WoW64. ShellWasp 2", "type": "tool", "lanes": [ "2" ], "author": { "name": "A. Babcock", "cardId": "f364e4e6e4d25194", "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "109730e85038", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-05T02:13:22Z", "archived": false, "topContributors": [ { "login": "Bw3ll", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4", "type": "User" } ] }, { "repo": "ccob/goreflect", "name": "goreflect", "owner": "ccob", "url": "https://github.com/CCob/goreflect", "stars": 174, "language": "C", "description": "Reflective DLL loading of your favorite Golang program", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "daed2d7f2d64", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-01-27T10:50:28Z", "archived": false, "topContributors": [] }, { "repo": "dump-guy/exe-or-dll-or-shellcode", "name": "exe-or-dll-or-shellcode", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/EXE-or-DLL-or-ShellCode", "stars": 170, "language": "C", "description": "Just a simple silly PoC demonstrating executable \"exe\" file that can be used like exe, dll or shellcode...", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eafa96642f3a", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-12T15:49:10Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "bw3ll/rop_rocket", "name": "ROP_ROCKET", "owner": "Bw3ll", "url": "https://github.com/Bw3ll/ROP_ROCKET", "id": "e45dfe3eaa04", "stars": 170, "language": "Python", "description": "ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and \"shellcodeless\" ROP. Th", "type": "tool", "pushedAt": "2025-12-05T17:40:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "A. Babcock", "cardId": "f364e4e6e4d25194", "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Bw3ll", "c": 110, "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4", "type": "User" }, { "login": "shashankpie", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/79210251?v=4", "type": "User" } ] }, { "repo": "danmcinerney/fast-recon", "name": "fast-recon", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/fast-recon", "stars": 167, "language": "Python", "description": "Does some google dorks against a domain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a3cf56baf521", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-01-20T04:34:41Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" }, { "login": "TheRealJoeDoran", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12024481?v=4", "type": "User" } ] }, { "repo": "shipcod3/mazda_getinfo", "name": "mazda_getinfo", "owner": "shipcod3", "url": "https://github.com/shipcod3/mazda_getInfo", "stars": 166, "language": "Shell", "description": "A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71b59978ab78", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-31T09:07:24Z", "archived": false, "topContributors": [ { "login": "shipcod3", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" } ] }, { "repo": "d4stiny/dell-support-assist-rce-poc", "name": "dell-support-assist-rce-poc", "owner": "d4stiny", "url": "https://github.com/D4stiny/Dell-Support-Assist-RCE-PoC", "stars": 164, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "364ff0c0e537", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-05-01T22:32:49Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "chompie1337/windows_mskssrv_lpe_cve-2023-36802", "name": "windows_mskssrv_lpe_cve-2023-36802", "owner": "chompie1337", "url": "https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802", "stars": 164, "language": "C", "description": "LPE exploit for CVE-2023-36802", "type": "tool", "lanes": [ "2" ], "author": { "name": "Valentina Palmiotti", "cardId": "44ba26b4768bf26a", "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2647d9ec7dc7", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-10T17:44:17Z", "archived": false, "topContributors": [ { "login": "chompie1337", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4", "type": "User" } ] }, { "repo": "nmantani/fileinsight-plugins", "name": "fileinsight-plugins", "owner": "nmantani", "url": "https://github.com/nmantani/FileInsight-plugins", "stars": 164, "language": "Python", "description": "FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nobutaka Mantani", "cardId": "5280025f7734855e", "avatar": "https://avatars.githubusercontent.com/u/2285962?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d4cc9fc441d4", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-15T11:56:11Z", "archived": false, "topContributors": [ { "login": "nmantani", "c": 620, "avatar": "https://avatars.githubusercontent.com/u/2285962?v=4", "type": "User" } ] }, { "repo": "aaaddress1/wowinjector", "name": "wowinjector", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/wowInjector", "stars": 163, "language": "C", "description": "PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e5b3cc17b165", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-27T11:15:11Z", "archived": false, "topContributors": [ { "login": "aaaddress1", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "0xeb/libghidra", "name": "libghidra", "owner": "0xeb", "url": "https://github.com/0xeb/libghidra", "id": "2e5318e25d10", "stars": 163, "language": "C++", "description": "SDK for automating Ghidra from Python, Rust, and C++. Decompile, rename, annotate, inspect symbols/types/xrefs, and manage project lifecycle programmatically - treat Ghidra like infrastructure, not ju", "type": "tool", "pushedAt": "2026-06-23T14:48:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Elias Bachaalany", "cardId": "1c0a3b497cd70526", "avatar": "https://avatars.githubusercontent.com/u/230851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xeb", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/230851?v=4", "type": "User" } ] }, { "repo": "abhisek/reverse-engineering-and-malware-analysis", "name": "reverse-engineering-and-malware-analysis", "owner": "abhisek", "url": "https://github.com/abhisek/reverse-engineering-and-malware-analysis", "stars": 162, "language": null, "description": "Course content and slides from my ancient training on Reverse Engineering & Malware Analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f8e908471d6", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-25T08:09:07Z", "archived": false, "topContributors": [ { "login": "abhisek", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" } ] }, { "repo": "niklasb/3dpwn", "name": "3dpwn", "owner": "niklasb", "url": "https://github.com/niklasb/3dpwn", "id": "88d51ce03e78", "stars": 162, "language": "Python", "description": "VirtualBox 3D exploits & PoCs", "type": "tool", "pushedAt": "2019-01-24T15:10:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Niklas Baumstark", "cardId": "e7e56ae52dd8ba57", "avatar": "https://avatars.githubusercontent.com/u/94819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "niklasb", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/94819?v=4", "type": "User" }, { "login": "TheOfficialFloW", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14246466?v=4", "type": "User" } ] }, { "repo": "abhisek/pe-loader-sample", "name": "pe-loader-sample", "owner": "abhisek", "url": "https://github.com/abhisek/Pe-Loader-Sample", "stars": 160, "language": "C++", "description": "Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64854b527705", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-10-29T06:18:51Z", "archived": false, "topContributors": [ { "login": "abhisek", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" } ] }, { "repo": "vanhoefm/krackattacks-poc-zerokey", "name": "krackattacks-poc-zerokey", "owner": "vanhoefm", "url": "https://github.com/vanhoefm/krackattacks-poc-zerokey", "stars": 159, "language": "C", "description": "Proof-of-concept of the KRACK attack against Linux and Android", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mathy Vanhoef", "cardId": "502b97785f3c5b6d", "avatar": "https://avatars.githubusercontent.com/u/637995?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "55f967c56daa", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [], "pushedAt": "2018-03-06T12:26:10Z", "archived": false, "topContributors": [ { "login": "jmalinen", "c": 7242, "avatar": "https://avatars.githubusercontent.com/u/5983923?v=4", "type": "User" }, { "login": "jmberg-intel", "c": 218, "avatar": "https://avatars.githubusercontent.com/u/96500427?v=4", "type": "User" }, { "login": "ilanpeer2", "c": 151, "avatar": "https://avatars.githubusercontent.com/u/2414718?v=4", "type": "User" }, { "login": "dziedjan", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/4160575?v=4", "type": "User" }, { "login": "masap", "c": 80, "avatar": "https://avatars.githubusercontent.com/u/1505016?v=4", "type": "User" }, { "login": "aotchere", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/15964803?v=4", "type": "User" }, { "login": "michael-dev", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/1722555?v=4", "type": "User" }, { "login": "greearb", "c": 71, "avatar": "https://avatars.githubusercontent.com/u/292522?v=4", "type": "User" }, { "login": "AviStern", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/15908503?v=4", "type": "User" }, { "login": "elp", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/861116?v=4", "type": "User" }, { "login": "ariknem", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/481945?v=4", "type": "User" }, { "login": "usdutt", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/51772396?v=4", "type": "User" }, { "login": "qsn", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/4687470?v=4", "type": "User" }, { "login": "DavidSpinadel", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/15218124?v=4", "type": "User" }, { "login": "dcbw", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/10926354?v=4", "type": "User" }, { "login": "mstepano", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/15964853?v=4", "type": "User" }, { "login": "vamsikrishna-593", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/263515584?v=4", "type": "User" }, { "login": "vanhoefm", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/637995?v=4", "type": "User" }, { "login": "jmberg", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/5159728?v=4", "type": "User" }, { "login": "wsowa", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/108818?v=4", "type": "User" }, { "login": "helmut-jacob", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/3501725?v=4", "type": "User" }, { "login": "akholaif", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/5952178?v=4", "type": "User" }, { "login": "bcopeland", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/199836?v=4", "type": "User" }, { "login": "rsmarples", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/6079078?v=4", "type": "User" }, { "login": "pstew-dd", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/26730348?v=4", "type": "User" }, { "login": "n-chaprana", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/14971684?v=4", "type": "User" }, { "login": "AyalaBkr", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/15907796?v=4", "type": "User" }, { "login": "assafkrauss-at-intel", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/87753072?v=4", "type": "User" }, { "login": "baruchsiach", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8298220?v=4", "type": "User" }, { "login": "sleffler", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6475681?v=4", "type": "User" } ] }, { "repo": "carlospolop/malwareworld", "name": "MalwareWorld", "owner": "carlospolop", "url": "https://github.com/carlospolop/MalwareWorld", "id": "9c3c5cea2467", "stars": 159, "language": "JavaScript", "description": "System based on +500 blacklists to detect internet potencialy malicious hosts", "type": "tool", "pushedAt": "2026-07-18T05:18:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "carlospolop", "c": 89, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" } ] }, { "repo": "its-a-feature/bifrost", "name": "bifrost", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/bifrost", "stars": 158, "language": "Objective-C", "description": "Objective-C library and console to interact with Heimdal APIs for macOS Kerberos", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5a2a40d9ea6d", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-12T19:54:32Z", "archived": false, "topContributors": [ { "login": "its-a-feature", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" } ] }, { "repo": "tijme/amd-ryzen-master-driver-v17-exploit", "name": "amd-ryzen-master-driver-v17-exploit", "owner": "tijme", "url": "https://github.com/tijme/amd-ryzen-master-driver-v17-exploit", "stars": 158, "language": "C", "description": "Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b7d8843deb72", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-21T14:15:25Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "0xdea/weggli-patterns", "name": "weggli-patterns", "owner": "0xdea", "url": "https://github.com/0xdea/weggli-patterns", "id": "578e25c6099b", "stars": 157, "language": null, "description": "A collection of my weggli patterns to facilitate vulnerability research.", "type": "tool", "pushedAt": "2026-04-03T07:58:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "utkusen/jeopardize", "name": "jeopardize", "owner": "utkusen", "url": "https://github.com/utkusen/jeopardize", "id": "51f4cf8e16a2", "stars": 156, "language": "Python", "description": "a low(zero) cost threat intelligence&response tool against phishing domains", "type": "tool", "pushedAt": "2022-12-08T03:47:05Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Utku Sen", "cardId": "7d6e08bb22636b6a", "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "utkusen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3511458?v=4", "type": "User" } ] }, { "repo": "mubix/cve-2021-44228-log4shell-hashes", "name": "cve-2021-44228-log4shell-hashes", "owner": "mubix", "url": "https://github.com/mubix/CVE-2021-44228-Log4Shell-Hashes", "stars": 155, "language": null, "description": "Hashes for vulnerable LOG4J versions", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a834b1897344", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-12-17T17:02:24Z", "archived": false, "topContributors": [ { "login": "mubix", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "securekomodo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4809643?v=4", "type": "User" } ] }, { "repo": "filipi86/drogonsec", "name": "drogonsec", "owner": "filipi86", "url": "https://github.com/filipi86/drogonsec", "stars": 154, "language": "Go", "description": "High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filipi Pires", "cardId": "ad05414c70858a66", "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f74f5ba5f5d8", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-07-15T20:49:13Z", "archived": false, "topContributors": [ { "login": "filipi86", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 16, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "dcldrn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97956844?v=4", "type": "User" }, { "login": "ocanema", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6804133?v=4", "type": "User" } ] }, { "repo": "csandker/inmemoryshellcode", "name": "inmemoryshellcode", "owner": "csandker", "url": "https://github.com/csandker/inMemoryShellcode", "stars": 152, "language": "C", "description": "A Collection of In-Memory Shellcode Execution Techniques for Windows", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carsten Sandker", "cardId": "8e4383b825a0355e", "avatar": "https://avatars.githubusercontent.com/u/4909972?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e5a265e3f48f", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-26T09:08:16Z", "archived": false, "topContributors": [ { "login": "csandker", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4909972?v=4", "type": "User" } ] }, { "repo": "jakejarvis/subtake", "name": "subtake", "owner": "jakejarvis", "url": "https://github.com/jakejarvis/subtake", "stars": 150, "language": "Go", "description": "Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jake Jarvis", "cardId": "c088b6746ecf445b", "avatar": "https://avatars.githubusercontent.com/u/1703673?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fe7961567ad4", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-29T15:18:09Z", "archived": false, "topContributors": [ { "login": "jakejarvis", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1703673?v=4", "type": "User" } ] }, { "repo": "yoda66/maas", "name": "maas", "owner": "yoda66", "url": "https://github.com/yoda66/MAAS", "stars": 150, "language": "Python", "description": "Malware As A Service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joff Thyer", "cardId": "e0210fdf4f18cb82", "avatar": "https://avatars.githubusercontent.com/u/1332275?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5643ff7664ad", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-02-26T11:39:47Z", "archived": false, "topContributors": [] }, { "repo": "albertzsigovits/malware-study", "name": "malware-study", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-study", "stars": 149, "language": null, "description": "Resources for learning malware analysis and reverse engineering", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "653747d948c2", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-07T14:44:40Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "mgeeky/visualbasicobfuscator", "name": "VisualBasicObfuscator", "owner": "mgeeky", "url": "https://github.com/mgeeky/VisualBasicObfuscator", "id": "34edfde787a9", "stars": 149, "language": "Python", "description": "Visual Basic Code universal Obfuscator intended to be used during penetration testing assignments.", "type": "tool", "pushedAt": "2021-12-13T14:24:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mgeeky", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "bayufedra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26889827?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/abyss", "name": "abyss", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Abyss", "stars": 148, "language": "C", "description": "The first publicly shared complete Windows UEFI bootkit framework for automated Ring0 rootkit deployment and APT emulation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ddeeb4e9add", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-24T17:09:29Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "mgeeky/exploit-development-tools", "name": "exploit-development-tools", "owner": "mgeeky", "url": "https://github.com/mgeeky/Exploit-Development-Tools", "stars": 148, "language": "Python", "description": "A bunch of my exploit development helper tools, collected in one place.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "008040a496ac", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-02T11:15:35Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "mgeeky/robustpentestmacro", "name": "RobustPentestMacro", "owner": "mgeeky", "url": "https://github.com/mgeeky/RobustPentestMacro", "id": "8115867a2f61", "stars": 147, "language": "VBScript", "description": "This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploitation techniques.", "type": "tool", "pushedAt": "2021-10-24T21:19:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mgeeky", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "brompwnie/uitkyk", "name": "uitkyk", "owner": "brompwnie", "url": "https://github.com/brompwnie/uitkyk", "stars": 145, "language": "Java", "description": "Runtime memory analysis framework to identify Android malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c194cc963db5", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-24T09:28:55Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "pedramamini/sandboxapi", "name": "sandboxapi", "owner": "pedramamini", "url": "https://github.com/pedramamini/sandboxapi", "stars": 144, "language": "Python", "description": "Minimal, consistent Python API for building integrations with malware sandboxes.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pedram Amini", "cardId": "86facb212b158550", "avatar": "https://avatars.githubusercontent.com/u/1253573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b54e038bc871", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [], "pushedAt": "2024-01-31T18:25:07Z", "archived": false, "topContributors": [ { "login": "rshipp", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/1382374?v=4", "type": "User" }, { "login": "cmmorrow", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/12213504?v=4", "type": "User" }, { "login": "anikobartos", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/75678714?v=4", "type": "User" }, { "login": "keathmilligan", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2936304?v=4", "type": "User" }, { "login": "pedramamini", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1253573?v=4", "type": "User" }, { "login": "nbareil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/115087?v=4", "type": "User" }, { "login": "proc-freq", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53802133?v=4", "type": "User" } ] }, { "repo": "martyx00/collare", "name": "CollaRE", "owner": "Martyx00", "url": "https://github.com/Martyx00/CollaRE", "id": "095d8770f230", "stars": 144, "language": "Python", "description": "Multi-tool reverse engineering collaboration solution.", "type": "tool", "pushedAt": "2024-03-27T12:04:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Martin Petran", "cardId": "be2683b76e947cf9", "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Martyx00", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4", "type": "User" }, { "login": "vmallet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/205806?v=4", "type": "User" } ] }, { "repo": "saelo/35c3ctf", "name": "35c3ctf", "owner": "saelo", "url": "https://github.com/saelo/35c3ctf", "id": "ee63f16b2765", "stars": 143, "language": "C", "description": "Source code and exploits for some 35c3ctf challenges.", "type": "tool", "pushedAt": "2018-12-30T12:12:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "saelo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "monnappa22/hollowfind", "name": "hollowfind", "owner": "monnappa22", "url": "https://github.com/monnappa22/HollowFind", "stars": 142, "language": "Python", "description": "Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects", "type": "tool", "lanes": [ "2" ], "author": { "name": "Monnappa K A", "cardId": "84d6c131cbfde4cc", "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a3846574a5b4", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-29T20:03:37Z", "archived": false, "topContributors": [ { "login": "monnappa22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4", "type": "User" } ] }, { "repo": "vanhoefm/blackhat17-pocs", "name": "blackhat17-pocs", "owner": "vanhoefm", "url": "https://github.com/vanhoefm/blackhat17-pocs", "id": "c37f12be0cc4", "stars": 142, "language": "Python", "description": "Proof of concepts of attacks against Wi-Fi implementations", "type": "tool", "pushedAt": "2018-10-12T09:06:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mathy Vanhoef", "cardId": "502b97785f3c5b6d", "avatar": "https://avatars.githubusercontent.com/u/637995?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "vanhoefm", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/637995?v=4", "type": "User" } ] }, { "repo": "fluxius/v2ginjector", "name": "V2GInjector", "owner": "FlUxIuS", "url": "https://github.com/FlUxIuS/V2GInjector", "id": "fa09e5748928", "stars": 141, "language": "Python", "description": "V2GInjector - Tool to intrude a V2G PowerLine network, but also to capture and inject V2G packets ", "type": "tool", "pushedAt": "2024-12-19T10:09:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Sébastien Dudek", "cardId": "c4b70c09db23a0b4", "avatar": "https://avatars.githubusercontent.com/u/715195?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "FlUxIuS", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/715195?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/coffeeldr", "name": "coffeeldr", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/coffeeldr", "stars": 139, "language": "Rust", "description": "A COFF Loader written in Rust", "type": "tool", "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cc958dcaf050", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-01T01:59:58Z", "archived": false, "topContributors": [ { "login": "joaoviictorti", "c": 132, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" }, { "login": "zumpyx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43854854?v=4", "type": "User" } ] }, { "repo": "0xdea/oneiromancer", "name": "oneiromancer", "owner": "0xdea", "url": "https://github.com/0xdea/oneiromancer", "id": "e7edc69f9af7", "stars": 139, "language": "Rust", "description": "Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.", "type": "tool", "pushedAt": "2026-07-14T14:58:29Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 255, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "johndmcmaster/open-tl866", "name": "open-tl866", "owner": "johndmcmaster", "url": "https://github.com/JohnDMcMaster/open-tl866", "stars": 138, "language": "C", "description": "Open Programming Firmware for the TL866A Programmer.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John McMaster", "cardId": "868ce8f4bdce1ea6", "avatar": "https://avatars.githubusercontent.com/u/222171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "042e05b48491", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [], "pushedAt": "2022-12-19T04:51:32Z", "archived": false, "topContributors": [ { "login": "JohnDMcMaster", "c": 135, "avatar": "https://avatars.githubusercontent.com/u/222171?v=4", "type": "User" }, { "login": "cr1901", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/6418027?v=4", "type": "User" }, { "login": "pdietl", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/10335942?v=4", "type": "User" }, { "login": "Elemecca", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/545271?v=4", "type": "User" }, { "login": "XekriRedmane", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1783950?v=4", "type": "User" }, { "login": "Kiboneu", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9668574?v=4", "type": "User" }, { "login": "PeterBortas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6524877?v=4", "type": "User" }, { "login": "danielt3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1739215?v=4", "type": "User" } ] }, { "repo": "nmatt0/bletools", "name": "bletools", "owner": "nmatt0", "url": "https://github.com/nmatt0/bletools", "id": "3d1e0efa4215", "stars": 137, "language": "Python", "description": "BLE pentesting scripts", "type": "tool", "pushedAt": "2025-10-26T21:47:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Matt Brown", "cardId": "bc22a79c210791dc", "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nmatt0", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4", "type": "User" } ] }, { "repo": "wunderwuzzi23/ropci", "name": "ropci", "owner": "wunderwuzzi23", "url": "https://github.com/wunderwuzzi23/ropci", "stars": 133, "language": "Go", "description": "So, you think you have MFA? AAD/ROPC/MFA bypass testing tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johann Rehberger", "cardId": "549d2d53d4f9b03f", "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3457090cf697", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-11-21T03:15:42Z", "archived": false, "topContributors": [ { "login": "wunderwuzzi23", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4", "type": "User" }, { "login": "ManEelyMan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54215211?v=4", "type": "User" } ] }, { "repo": "daddycocoaman/azbelt", "name": "azbelt", "owner": "daddycocoaman", "url": "https://github.com/daddycocoaman/azbelt", "id": "cadf3d636cf6", "stars": 132, "language": "Nim", "description": "AAD related enumeration in Nim", "type": "tool", "pushedAt": "2023-09-07T16:05:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "daddycocoaman", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" } ] }, { "repo": "lauriewired/android_emulators_for_reverse_engineers", "name": "android_emulators_for_reverse_engineers", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/android_emulators_for_reverse_engineers", "id": "4af421b9ed73", "stars": 131, "language": null, "description": "A guide to choosing between different Android Emulator options for Reverse Engineers", "type": "tool", "pushedAt": "2023-02-07T19:58:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "0xdea/rhabdomancer", "name": "rhabdomancer", "owner": "0xdea", "url": "https://github.com/0xdea/rhabdomancer", "id": "053a0a533bd5", "stars": 131, "language": "Rust", "description": "Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.", "type": "tool", "pushedAt": "2026-07-14T14:52:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 445, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "kyleavery/pendulum", "name": "pendulum", "owner": "kyleavery", "url": "https://github.com/kyleavery/pendulum", "id": "0834afdd29c3", "stars": 130, "language": "C", "description": "Linux Sleep Obfuscation", "type": "tool", "pushedAt": "2024-01-07T20:33:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "joaoviictorti/rustbof", "name": "rustbof", "owner": "joaoviictorti", "url": "https://github.com/joaoviictorti/rustbof", "stars": 129, "language": "Rust", "description": "A Rust template for writing Beacon Object Files (BOFs)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f7788d06ec55", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-11T16:21:17Z", "archived": false, "topContributors": [ { "login": "joaoviictorti", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" } ] }, { "repo": "cobbr/sharpshell", "name": "sharpshell", "owner": "cobbr", "url": "https://github.com/cobbr/SharpShell", "stars": 128, "language": "C#", "description": " SharpShell is a proof-of-concept offensive C# scripting engine that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applications or libraries.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a9a58de423d4", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-12-11T16:24:48Z", "archived": false, "topContributors": [ { "login": "cobbr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" } ] }, { "repo": "0xdea/haruspex", "name": "haruspex", "owner": "0xdea", "url": "https://github.com/0xdea/haruspex", "id": "f0ab45429fe7", "stars": 128, "language": "Rust", "description": "Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.", "type": "tool", "pushedAt": "2026-07-14T14:53:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 289, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "ohjeongwook/shellcodeemulator", "name": "shellcodeemulator", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/ShellCodeEmulator", "stars": 125, "language": "Python", "description": "Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "212477e32d76", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-09T17:13:05Z", "archived": false, "topContributors": [ { "login": "ohjeongwook", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "danmcinerney/msf-autopwn", "name": "msf-autopwn", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/msf-autopwn", "id": "f5452cb7ccb0", "stars": 125, "language": "Python", "description": "Autoexploitation of some of the most common vulnerabilities in wild", "type": "tool", "pushedAt": "2018-06-22T21:27:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "DanMcInerney", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "zephrfish/dynamicmsbuilder", "name": "DynamicMSBuilder", "owner": "ZephrFish", "url": "https://github.com/ZephrFish/DynamicMSBuilder", "id": "bb3a5553cfb0", "stars": 38, "language": "C#", "description": "A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation", "type": "tool", "pushedAt": "2025-12-07T01:31:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ZephrFish", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "zhuowei/pcicrash", "name": "pcicrash", "owner": "zhuowei", "url": "https://github.com/zhuowei/PCICrash", "stars": 36, "language": "Objective-C", "description": "PCIDriverKit proof-of-concept for CVE-2022-26763", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4ba6e96d2c3d", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-02T06:15:40Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "k0keoyo/hevd-arbitrary-overwrite-exploit-win10-rs3", "name": "hevd-arbitrary-overwrite-exploit-win10-rs3", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/HEVD-Arbitrary-Overwrite-Exploit-Win10-rs3", "stars": 34, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1e80ce3c514", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-17T05:09:46Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "daaximus/arch_enum", "name": "arch_enum", "owner": "daaximus", "url": "https://github.com/daaximus/arch_enum", "id": "064d0f6a4779", "stars": 34, "language": "C++", "description": "A small tool for rapid enumeration of CPUID, and MSR fields.", "type": "tool", "pushedAt": "2024-01-30T02:00:44Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daax", "cardId": "013347b1d6eab789", "avatar": "https://avatars.githubusercontent.com/u/10854342?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Justas Masiulis", "cardId": "c563168e0703622b", "avatar": "https://avatars.githubusercontent.com/u/16763439?v=4", "login": "JustasMasiulis" } ], "adoptionOperators": 0, "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "daaximus", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/10854342?v=4", "type": "User" }, { "login": "JustasMasiulis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16763439?v=4", "type": "User" } ] }, { "repo": "zephrfish/cve-2023-20198-checker", "name": "cve-2023-20198-checker", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CVE-2023-20198-Checker", "stars": 33, "language": "Python", "description": "CVE-2023-20198 & 0Day Implant Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1473b257627a", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-07T01:30:55Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "zephrfish/cve-2024-4577-php-rce", "name": "cve-2024-4577-php-rce", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CVE-2024-4577-PHP-RCE", "stars": 32, "language": "Go", "description": "PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b0fc5b83ae89", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-07T01:31:02Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "alejandro-flores-driscolls", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/119442646?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/credshunter", "name": "credshunter", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/CredsHunter", "stars": 30, "language": "Rust", "description": "PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0682ffdcbb80", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-12T08:38:56Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "hackinglz/tomcatbackdoorpoc", "name": "tomcatbackdoorpoc", "owner": "hackinglz", "url": "https://github.com/HackingLZ/TomcatBackdoorPoC", "stars": 29, "language": "Java", "description": "Tomcat backdoor based on CS blog", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c2728d54007f", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-30T14:48:21Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "0xacb/github-desktop-poc", "name": "github-desktop-poc", "owner": "0xacb", "url": "https://github.com/0xacb/github-desktop-poc", "stars": 28, "language": "Python", "description": "Github Desktop RCE PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andre Baptista", "cardId": "ca3c2b1401da319e", "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b1bb61df89fb", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-12-04T17:50:17Z", "archived": false, "topContributors": [ { "login": "0xacb", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4", "type": "User" } ] }, { "repo": "chudypb/mdaemon-advisories", "name": "mdaemon-advisories", "owner": "chudypb", "url": "https://github.com/chudyPB/MDaemon-Advisories", "stars": 2, "language": null, "description": "MDaemon Advisories - CVE-2021-27180, CVE-2021-27181, CVE-2021-27182, CVE-2021-27183", "type": "tool", "lanes": [ "2" ], "author": { "name": "Piotr Bazydlo", "cardId": "cc6ff88c7ddf4de0", "avatar": "https://avatars.githubusercontent.com/u/36897432?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "014f0a3b9259", "score": 29, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-03T10:29:42Z", "archived": false, "topContributors": [ { "login": "chudyPB", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/36897432?v=4", "type": "User" } ] }, { "repo": "zcutlip/broken_abandoned", "name": "broken_abandoned", "owner": "zcutlip", "url": "https://github.com/zcutlip/broken_abandoned", "stars": 25, "language": "Python", "description": "Example code for following along with my \"Broken, Abandoned, and Forgotten Code\" blog series", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2015/10/broken-abandoned-and-forgotten-code-part-13/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 13", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/05/broken-abandoned-and-forgotten-code-part-3/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 3", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/05/broken-abandoned-and-forgotten-code-part-6/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 6", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/05/broken-abandoned-and-forgotten-code-part-5/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 5", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/06/broken-abandoned-and-forgotten-code-part-9/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 9", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/11/broken-abandoned-and-forgotten-code-part-14/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 14", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/06/broken-abandoned-and-forgotten-code-part-7/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 7", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/06/broken-abandoned-and-forgotten-code-part-8/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 8", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/09/broken-abandoned-and-forgotten-code-part-12/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 12", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/05/broken-abandoned-and-forgotten-code-part-4/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 4", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/04/broken-abandoned-and-forgotten-code-part-2/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 2", "person": "Zachary Cutlip" }, { "url": "https://shadowfile.inode.link/blog/2015/07/broken-abandoned-and-forgotten-code-part-11/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 11", "person": "Zachary Cutlip" } ], "referencedCount": 12, "id": "f714c52face2", "score": 28, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-19T21:54:44Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/luajit-pwn", "name": "luajit-pwn", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/luajit-pwn", "stars": 20, "language": "Lua", "description": "Vuln-dev environment for LuaJIT", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2022-09-27-lua-jit-part3", "title": "LuaJIT Internals(Pt. 3/3): Crafting Shellcodes", "person": "pwner.gg" }, { "url": "https://pwner.gg/blog/2022-12-30-luajit-sandbox-escape", "title": "LuaJIT Sandbox Escape: The Saga Ends", "person": "pwner.gg" } ], "referencedCount": 2, "id": "63879d8f8d03", "score": 28, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-30T18:31:52Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "califio/ngxray", "name": "ngxray", "owner": "califio", "url": "https://github.com/califio/ngxray", "stars": 24, "language": "Python", "description": "ngxray — nginx config security scanner", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "calif", "cardId": "55a7e8597699c5e6", "avatar": "https://avatars.githubusercontent.com/u/125451309?v=4" }, "referencedBy": [ { "url": "https://blog.calif.io/p/needle-in-a-haystack-measuring-the", "title": "Needle in a haystack: measuring the impact of two nginx RCEs", "person": "calif" } ], "referencedCount": 1, "id": "17fd515d87b5", "score": 28, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-29T19:50:23Z", "archived": false, "topContributors": [ { "login": "jro-calif", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/273926274?v=4", "type": "User" }, { "login": "thaidn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7532?v=4", "type": "User" } ] }, { "repo": "0xbigshaq/apatchy", "name": "apatchy", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/apatchy", "stars": 22, "language": "Python", "description": "Fuzzing Framework for Modules in Apache HTTPD Server", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2026-03-20-apatchy", "title": "LLVM Adventures: Fuzzing Apache Modules", "person": "pwner.gg" } ], "referencedCount": 1, "id": "36a72d6ff6b2", "score": 28, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-13T13:58:01Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 336, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "jackullrich/aadbrokerdecrypt", "name": "aadbrokerdecrypt", "owner": "jackullrich", "url": "https://github.com/jackullrich/AADBrokerDecrypt", "stars": 18, "language": "C#", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Jack Ullrich", "cardId": "095988e7063ae588", "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4" }, "referencedBy": [ { "url": "https://winternl.com/aad-broker-cache/", "title": "Unpacking the AAD Broker LocalState Cache", "person": "Jack Ullrich" } ], "referencedCount": 1, "id": "caa5a4f4002a", "score": 28, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-01T15:28:53Z", "archived": false, "topContributors": [ { "login": "jackullrich", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/27821565?v=4", "type": "User" } ] }, { "repo": "bishopfox/unredacter", "name": "unredacter", "owner": "BishopFox", "url": "https://github.com/BishopFox/unredacter", "id": "4f8b3ce8c2c5", "stars": 8354, "language": "TypeScript", "description": "Never ever ever use pixelation as a redaction technique", "type": "tool", "pushedAt": "2024-03-15T00:35:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "dan-bishopfox", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/43555923?v=4", "type": "User" }, { "login": "n3rada", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "novedevo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20878868?v=4", "type": "User" } ] }, { "repo": "trustedsec/ptf", "name": "ptf", "owner": "trustedsec", "url": "https://github.com/trustedsec/ptf", "id": "21eea8881b89", "stars": 5547, "language": "Python", "description": "The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.", "type": "tool", "pushedAt": "2024-09-22T18:48:31Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "login": "cobbr" }, { "name": "Jason Lang", "cardId": "99180dd5b394d04e", "avatar": "https://avatars.githubusercontent.com/u/5608516?v=4", "login": "curi0usJack" }, { "name": "Mazin Ahmed", "cardId": "a3af90e0fe257a37", "avatar": "https://avatars.githubusercontent.com/u/8996052?v=4", "login": "mazen160" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 91, "topContributors": [ { "login": "HackingDave", "c": 129, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "4ndr3w6", "c": 83, "avatar": "https://avatars.githubusercontent.com/u/50060374?v=4", "type": "User" }, { "login": "Zawadidone", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/21525407?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "firebitsbr", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/1431005?v=4", "type": "User" }, { "login": "0xsalt", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/2264034?v=4", "type": "User" }, { "login": "kryptonsecurity", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/4234870?v=4", "type": "User" }, { "login": "ninewires", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3959047?v=4", "type": "User" }, { "login": "Su1ph3r", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/6089420?v=4", "type": "User" }, { "login": "vdbaan", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/2207005?v=4", "type": "User" }, { "login": "gazcbm", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/22750007?v=4", "type": "User" }, { "login": "BustedSec", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/7432967?v=4", "type": "User" }, { "login": "cclauss", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "GlobularOne", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/139503563?v=4", "type": "User" }, { "login": "l0stkn0wledge", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1767245?v=4", "type": "User" }, { "login": "stasinopoulos", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5289251?v=4", "type": "User" }, { "login": "shadawck", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10743909?v=4", "type": "User" }, { "login": "Onslaught", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2284746?v=4", "type": "User" }, { "login": "skapunker", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6413484?v=4", "type": "User" }, { "login": "ypcrts", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32625281?v=4", "type": "User" }, { "login": "JDogHerman", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1299282?v=4", "type": "User" }, { "login": "sidahmed-malaoui", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/19175347?v=4", "type": "User" }, { "login": "Spoonman1091", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1806514?v=4", "type": "User" }, { "login": "MikeDawg", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1027610?v=4", "type": "User" }, { "login": "citizenhax", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19285705?v=4", "type": "User" }, { "login": "meldridge", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8285554?v=4", "type": "User" }, { "login": "bandrel", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "BenDrysdale", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7750798?v=4", "type": "User" }, { "login": "th3joker3000", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/92647003?v=4", "type": "User" }, { "login": "usezfsyo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6395016?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/ad-attack-defense", "name": "ad-attack-defense", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/AD-Attack-Defense", "stars": 4839, "language": null, "description": "Attack and defend active directory using modern post exploitation adversary tradecraft activity", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "06b0f8398026", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-07-29T11:12:41Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" }, { "login": "screetsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17976841?v=4", "type": "User" }, { "login": "apanonimo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5932334?v=4", "type": "User" }, { "login": "h3xstream", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/593130?v=4", "type": "User" } ] }, { "repo": "urbanadventurer/android-pin-bruteforce", "name": "Android-PIN-Bruteforce", "owner": "urbanadventurer", "url": "https://github.com/urbanadventurer/Android-PIN-Bruteforce", "id": "c1c742d96854", "stars": 4723, "language": "Shell", "description": "Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)", "type": "tool", "pushedAt": "2023-10-10T07:00:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrew Horton", "cardId": "ce17217268421b81", "avatar": "https://avatars.githubusercontent.com/u/101783?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "urbanadventurer", "c": 272, "avatar": "https://avatars.githubusercontent.com/u/101783?v=4", "type": "User" }, { "login": "psyhomb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1824874?v=4", "type": "User" } ] }, { "repo": "pry0cc/axiom", "name": "axiom", "owner": "pry0cc", "url": "https://github.com/pry0cc/axiom", "stars": 4408, "language": "Shell", "description": "The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "53c928cb4608", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 82, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" }, { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" }, { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "login": "mxrch" } ], "pushedAt": "2024-09-30T17:18:52Z", "archived": false, "topContributors": [ { "login": "0xtavian", "c": 764, "avatar": "https://avatars.githubusercontent.com/u/21030907?v=4", "type": "User" }, { "login": "pry0cc", "c": 197, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" }, { "login": "six2dez", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "pdelteil", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/20244863?v=4", "type": "User" }, { "login": "mswell", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/2567185?v=4", "type": "User" }, { "login": "solace-10", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/63121295?v=4", "type": "User" }, { "login": "icyphox", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/17672379?v=4", "type": "User" }, { "login": "rst10124492", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/51132004?v=4", "type": "User" }, { "login": "ResistanceIsUseless", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1320169?v=4", "type": "User" }, { "login": "hahwul", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13212227?v=4", "type": "User" }, { "login": "kyleavery", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" }, { "login": "ikuamike", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5783614?v=4", "type": "User" }, { "login": "matglas", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/572208?v=4", "type": "User" }, { "login": "itsgudenuf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3944481?v=4", "type": "User" }, { "login": "ytfhgfhhhhh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/74988857?v=4", "type": "User" }, { "login": "xxzxcuzx-me", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/49043594?v=4", "type": "User" }, { "login": "sumgr0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11391119?v=4", "type": "User" }, { "login": "Mchoji", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/173761982?v=4", "type": "User" }, { "login": "klau5dev", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/70058709?v=4", "type": "User" }, { "login": "KingOfBugbounty", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/28729614?v=4", "type": "User" }, { "login": "xm1k3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/73166077?v=4", "type": "User" }, { "login": "maverickNerd", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49231687?v=4", "type": "User" }, { "login": "joaopfcruz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63175439?v=4", "type": "User" }, { "login": "mcrmonkey", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1660673?v=4", "type": "User" }, { "login": "ZultanH", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43057246?v=4", "type": "User" }, { "login": "vipinbihari", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25988511?v=4", "type": "User" }, { "login": "iambouali", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/74378500?v=4", "type": "User" }, { "login": "b4cktr4ck2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12114470?v=4", "type": "User" }, { "login": "Cgboal", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4704380?v=4", "type": "User" }, { "login": "dhauenstein", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/100454?v=4", "type": "User" } ] }, { "repo": "ghostpack/sharpdpapi", "name": "SharpDPAPI", "owner": "GhostPack", "url": "https://github.com/GhostPack/SharpDPAPI", "id": "991c9be4af65", "stars": 1432, "language": "C#", "description": "SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.", "type": "tool", "pushedAt": "2024-06-27T13:39:08Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Duane Michael", "cardId": "8cd4b548f3411994", "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "login": "subat0mik" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" } ], "adoptionOperators": 4, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "HarmJ0y", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "subat0mik", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/41414134?v=4", "type": "User" }, { "login": "leechristensen", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "rxwx", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" }, { "login": "guervild", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11190755?v=4", "type": "User" }, { "login": "Bebop79", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4398642?v=4", "type": "User" }, { "login": "fsacer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2059352?v=4", "type": "User" }, { "login": "atticuss-sra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135625870?v=4", "type": "User" }, { "login": "byinarie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20119926?v=4", "type": "User" }, { "login": "clod81", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1020921?v=4", "type": "User" }, { "login": "djhohnstein", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" }, { "login": "ptr0x1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5557407?v=4", "type": "User" } ] }, { "repo": "bishopfox/eyeballer", "name": "eyeballer", "owner": "BishopFox", "url": "https://github.com/BishopFox/eyeballer", "id": "389b34621afd", "stars": 1287, "language": "Python", "description": "Convolutional neural network for analyzing pentest screenshots", "type": "tool", "pushedAt": "2026-03-08T20:43:54Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "adoptionOperators": 4, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "dan-bishopfox", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/43555923?v=4", "type": "User" }, { "login": "bfgstroy", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/48362091?v=4", "type": "User" }, { "login": "ogtony", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/28910521?v=4", "type": "User" }, { "login": "the-bumble", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1927215?v=4", "type": "User" }, { "login": "six2dez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "kudaes/lolbits", "name": "LOLBITS", "owner": "Kudaes", "url": "https://github.com/Kudaes/LOLBITS", "id": "9f05ade7d40d", "stars": 221, "language": "C#", "description": "** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.", "type": "tool", "pushedAt": "2022-12-08T09:29:16Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Kudaes", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": true, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Kudaes", "c": 84, "avatar": "https://avatars.githubusercontent.com/u/9372136?v=4", "type": "User" }, { "login": "TheAnachronism", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/32616088?v=4", "type": "User" } ] }, { "repo": "yardenshafir/cve-2020-1034", "name": "cve-2020-1034", "owner": "yardenshafir", "url": "https://github.com/yardenshafir/CVE-2020-1034", "stars": 124, "language": "C++", "description": "PoC demonstrating the use of cve-2020-1034 for privilege escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yarden Shafir", "cardId": "84641f98d959dd3f", "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "af3531d17968", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-16T13:53:37Z", "archived": false, "topContributors": [ { "login": "yardenshafir", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4", "type": "User" } ] }, { "repo": "ang13t/esp8266-wicon-kit", "name": "ESP8266-WiCon-Kit", "owner": "ANG13T", "url": "https://github.com/ANG13T/ESP8266-WiCon-Kit", "id": "ea0a96f55840", "stars": 124, "language": "C", "description": "A compact and portable WiFi reconnaissance suite based on the ESP8266", "type": "tool", "pushedAt": "2022-11-15T19:04:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ANG13T", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" }, { "login": "coryjfowler", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5591322?v=4", "type": "User" } ] }, { "repo": "cobbr/elite", "name": "elite", "owner": "cobbr", "url": "https://github.com/cobbr/Elite", "stars": 122, "language": "C#", "description": "Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack surface of .NET, make the use of offensive .NET tradecraf", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ryan Cobb", "cardId": "ce2b42fd407902a6", "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9e31c0a80601", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-07T21:33:10Z", "archived": false, "topContributors": [ { "login": "cobbr", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/8904306?v=4", "type": "User" } ] }, { "repo": "samratashok/continuousintrusion", "name": "ContinuousIntrusion", "owner": "samratashok", "url": "https://github.com/samratashok/ContinuousIntrusion", "id": "515da50737db", "stars": 122, "language": "Python", "description": "Material related to my talks at various conferences on using Continuous Integration tools (Jenkins, Teamcity, Go, Hudson, CruiseControl) for penetration testing", "type": "tool", "pushedAt": "2016-12-11T06:31:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nikhil \"SamratAshok\" Mittal", "cardId": "9650ca02c5588a07", "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "samratashok", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1753291?v=4", "type": "User" } ] }, { "repo": "fr0gger/unprotect", "name": "unprotect", "owner": "fr0gger", "url": "https://github.com/fr0gger/unprotect", "stars": 121, "language": "Python", "description": "Unprotect is a python tool for parsing PE malware and extract evasion techniques. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Thomas Roccia 🤘", "cardId": "04e1486a92fb1587", "avatar": "https://avatars.githubusercontent.com/u/6546250?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "310a3fa0bb96", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 25, "contributorCount": 3, "contributors": [], "pushedAt": "2023-05-22T21:12:51Z", "archived": false, "topContributors": [ { "login": "fr0gger", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/6546250?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "brootware", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7734956?v=4", "type": "User" } ] }, { "repo": "philkeeble/aws-redteam-adlab", "name": "aws-redteam-adlab", "owner": "philkeeble", "url": "https://github.com/PhilKeeble/AWS-RedTeam-ADLab", "stars": 119, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Phil Keeble", "cardId": "b2cf4e8e8fceed95", "avatar": "https://avatars.githubusercontent.com/u/64729432?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a44e3511f049", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-17T15:48:02Z", "archived": false, "topContributors": [ { "login": "PhilKeeble", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/64729432?v=4", "type": "User" } ] }, { "repo": "carlospolop/su-bruteforce", "name": "su-bruteforce", "owner": "carlospolop", "url": "https://github.com/carlospolop/su-bruteforce", "id": "2b2cf4b66c58", "stars": 118, "language": "Shell", "description": "", "type": "tool", "pushedAt": "2026-07-11T09:02:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "carlospolop", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "thackeraaron", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25622825?v=4", "type": "User" }, { "login": "r3nt0n", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25709767?v=4", "type": "User" }, { "login": "Mag1cByt3s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48777549?v=4", "type": "User" }, { "login": "matt17r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19525237?v=4", "type": "User" } ] }, { "repo": "daddycocoaman/beacongraph", "name": "BeaconGraph", "owner": "daddycocoaman", "url": "https://github.com/daddycocoaman/BeaconGraph", "id": "597a2aa266be", "stars": 117, "language": "Vue", "description": "Graph visualization of wireless client and access point relationships", "type": "tool", "pushedAt": "2026-06-13T04:31:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "daddycocoaman", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" }, { "login": "jamesleytevidal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38996766?v=4", "type": "User" } ] }, { "repo": "bw3ll/jop_rocket", "name": "jop_rocket", "owner": "bw3ll", "url": "https://github.com/Bw3ll/JOP_ROCKET", "stars": 116, "language": "Python", "description": "This framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution for Windows jump-oriented programming. JOP ROCKET ", "type": "tool", "lanes": [ "2" ], "author": { "name": "A. Babcock", "cardId": "f364e4e6e4d25194", "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0a4ad2209ab2", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-31T00:25:53Z", "archived": false, "topContributors": [ { "login": "Bw3ll", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4", "type": "User" } ] }, { "repo": "urcuqui/whitehat", "name": "WhiteHat", "owner": "urcuqui", "url": "https://github.com/urcuqui/WhiteHat", "id": "f0d67073ae76", "stars": 115, "language": "Jupyter Notebook", "description": "A collection of AI-powered tools for phishing detection, adversarial machine learning, and cybersecurity research. Includes Streamlit/Flask apps, attack simulations, LoRA fine-tuning, and secure model", "type": "tool", "pushedAt": "2026-06-19T17:37:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christian Camilo Urcuqui López", "cardId": "43a6aa36e48b07d5", "avatar": "https://avatars.githubusercontent.com/u/2390479?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "urcuqui", "c": 382, "avatar": "https://avatars.githubusercontent.com/u/2390479?v=4", "type": "User" } ] }, { "repo": "0xdea/augur", "name": "augur", "owner": "0xdea", "url": "https://github.com/0xdea/augur", "id": "7599e76d5179", "stars": 114, "language": "Rust", "description": "Reverse engineering assistant that extracts strings and related pseudocode from a binary file.", "type": "tool", "pushedAt": "2026-07-14T14:54:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdea", "c": 249, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "danielmiessler/honeycrediptracker", "name": "HoneyCredIPTracker", "owner": "danielmiessler", "url": "https://github.com/danielmiessler/HoneyCredIPTracker", "id": "786d63c7afa8", "stars": 112, "language": "Shell", "description": "Quick script to gather stats on incoming credentials and IPs for a honey listener.", "type": "tool", "pushedAt": "2022-04-30T09:59:37Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Daniel Miessler", "cardId": "c714bc618cf54257", "avatar": "https://avatars.githubusercontent.com/u/50654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "danielmiessler", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/50654?v=4", "type": "User" } ] }, { "repo": "silascutler/malpipe", "name": "malpipe", "owner": "silascutler", "url": "https://github.com/silascutler/MalPipe", "stars": 110, "language": "Python", "description": "Malware/IOC ingestion and processing engine", "type": "tool", "lanes": [ "2" ], "author": { "name": "Silas Cutler (p1nk)", "cardId": "fc10e9db73947aeb", "avatar": "https://avatars.githubusercontent.com/u/2154372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b1f542f7b4b0", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-11-20T16:36:11Z", "archived": false, "topContributors": [ { "login": "silascutler", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2154372?v=4", "type": "User" } ] }, { "repo": "aaaddress1/wowgrail", "name": "wowgrail", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/wowGrail", "stars": 109, "language": "C++", "description": "PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da9469b88770", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-27T14:20:56Z", "archived": false, "topContributors": [ { "login": "aaaddress1", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "seclab-ucr/tcp_exploit", "name": "tcp_exploit", "owner": "seclab-ucr", "url": "https://github.com/seclab-ucr/tcp_exploit", "stars": 108, "language": "JavaScript", "description": "Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhiyun Qian", "cardId": "022713dbceffc744", "avatar": "https://avatars.githubusercontent.com/u/32003129?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "73b7a8ddd643", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-21T03:31:31Z", "archived": false, "topContributors": [ { "login": "CvvT", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/11675863?v=4", "type": "User" } ] }, { "repo": "saelo/jscpwn", "name": "jscpwn", "owner": "saelo", "url": "https://github.com/saelo/jscpwn", "stars": 108, "language": "JavaScript", "description": "PoC exploit for CVE-2016-4622", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "214a1534d959", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-18T16:58:56Z", "archived": false, "topContributors": [ { "login": "saelo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "danielbohannon/out-fincodedcommand", "name": "out-fincodedcommand", "owner": "danielbohannon", "url": "https://github.com/danielbohannon/Out-FINcodedCommand", "stars": 108, "language": "PowerShell", "description": "POC Highlighting Obfuscation Techniques used by FIN threat actors based on cmd.exe's replace functionality and cmd.exe/powershell.exe's stdin command invocation capabilities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniel Bohannon", "cardId": "db10af0f1bbb1ec3", "avatar": "https://avatars.githubusercontent.com/u/17295051?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e601b5f06912", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-07-02T16:32:49Z", "archived": false, "topContributors": [] }, { "repo": "its-a-feature/orchard", "name": "Orchard", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/Orchard", "id": "173b1c220c5b", "stars": 107, "language": "JavaScript", "description": "JavaScript for Automation (JXA) tool to do Active Directory enumeration.", "type": "tool", "pushedAt": "2022-02-19T19:35:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "its-a-feature", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" } ] }, { "repo": "0xeb/vibe-re", "name": "vibe-re", "owner": "0xeb", "url": "https://github.com/0xeb/vibe-re", "stars": 106, "language": "C", "description": "A collection of vibe reverse engineered binaries and malware (for educational purposes only)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Elias Bachaalany", "cardId": "1c0a3b497cd70526", "avatar": "https://avatars.githubusercontent.com/u/230851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f2773dad68fb", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-01T00:29:30Z", "archived": false, "topContributors": [ { "login": "0xeb", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/230851?v=4", "type": "User" } ] }, { "repo": "tinkersec/cve-2020-1350", "name": "cve-2020-1350", "owner": "tinkersec", "url": "https://github.com/tinkersec/cve-2020-1350", "stars": 105, "language": "Shell", "description": "Bash Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2003 up to Windows Server 2019.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tinker Secor", "cardId": "0bc4e70c69027a96", "avatar": "https://avatars.githubusercontent.com/u/35904426?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb777ee2dd4e", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" } ], "pushedAt": "2020-07-15T13:53:24Z", "archived": false, "topContributors": [ { "login": "tinkersec", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/35904426?v=4", "type": "User" }, { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "rootup/smuggleshield", "name": "SmuggleShield", "owner": "RootUp", "url": "https://github.com/RootUp/SmuggleShield", "id": "bd2c86d02998", "stars": 102, "language": "JavaScript", "description": "Protection against HTML smuggling attacks.", "type": "tool", "pushedAt": "2025-07-10T08:17:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "RootUp", "c": 183, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" } ] }, { "repo": "filipi86/cve-2024-6387-vulnerability-checker", "name": "cve-2024-6387-vulnerability-checker", "owner": "filipi86", "url": "https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker", "stars": 101, "language": "Python", "description": "This Python script checks for the CVE-2024-6387 vulnerability in OpenSSH servers. It supports multiple IP addresses, URLs, CIDR ranges, and ports. The script can also read addresses from a file.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filipi Pires", "cardId": "ad05414c70858a66", "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c8b2b008d8d6", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-10T15:24:08Z", "archived": false, "topContributors": [ { "login": "filipi86", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4", "type": "User" } ] }, { "repo": "albertzsigovits/malware-tools", "name": "malware-tools", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-tools", "stars": 100, "language": null, "description": "A curated list of malware repositories, trackers and malware analysis tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e4db3951a1c2", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-04T09:01:37Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "halpomeranz/dfis", "name": "dfis", "owner": "halpomeranz", "url": "https://github.com/halpomeranz/dfis", "stars": 99, "language": "Shell", "description": "Digital Forensic Investigative Scripts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Hal Pomeranz", "cardId": "27bd542afc2ee7e1", "avatar": "https://avatars.githubusercontent.com/u/1514372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3be16f8c8ce9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-24T19:18:43Z", "archived": false, "topContributors": [ { "login": "halpomeranz", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/1514372?v=4", "type": "User" } ] }, { "repo": "neatmonster/slabdbg", "name": "slabdbg", "owner": "NeatMonster", "url": "https://github.com/NeatMonster/slabdbg", "id": "4d36261ec137", "stars": 99, "language": "Python", "description": "GDB plug-in that helps exploiting the Linux kernel's SLUB allocator", "type": "tool", "pushedAt": "2023-03-29T19:35:33Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexandre Adamski", "cardId": "774bd26b4b8642d8", "avatar": "https://avatars.githubusercontent.com/u/775152?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "NeatMonster", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/775152?v=4", "type": "User" } ] }, { "repo": "dafthack/rdpspray", "name": "RDPSpray", "owner": "dafthack", "url": "https://github.com/dafthack/RDPSpray", "id": "6c48f59da85d", "stars": 99, "language": "Python", "description": "Tool for password spraying RDP", "type": "tool", "pushedAt": "2018-10-12T18:32:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "dafthack", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" } ] }, { "repo": "mubix/redteam-collab", "name": "redteam-collab", "owner": "mubix", "url": "https://github.com/mubix/redteam-collab", "stars": 97, "language": "Shell", "description": "Red Team Collaboration Infrastructure", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "34ced343e1e3", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-24T03:05:18Z", "archived": false, "topContributors": [ { "login": "mubix", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" } ] }, { "repo": "martyx00/ghinja", "name": "ghinja", "owner": "Martyx00", "url": "https://github.com/Martyx00/ghinja", "id": "e0596a87a4ad", "stars": 97, "language": "Python", "description": "Plugin to embed Ghidra Decompiler into Binary Ninja", "type": "tool", "pushedAt": "2022-06-08T04:26:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Martin Petran", "cardId": "be2683b76e947cf9", "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Martyx00", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/20481897?v=4", "type": "User" } ] }, { "repo": "idov31/etwleakkernel", "name": "EtwLeakKernel", "owner": "Idov31", "url": "https://github.com/Idov31/EtwLeakKernel", "id": "20072768b5c3", "stars": 94, "language": "C++", "description": "Leaking kernel addresses from ETW consumers. Requires Administrator privileges.", "type": "tool", "pushedAt": "2025-11-06T17:22:04Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Idov31", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "mgeeky/msi-shenanigans", "name": "msi-shenanigans", "owner": "mgeeky", "url": "https://github.com/mgeeky/msi-shenanigans", "stars": 92, "language": "Python", "description": "Proof of Concept code and samples presenting emerging threat of MSI installer files.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "19e155d39932", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-15T01:27:52Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "lauriewired/linux_malware_analysis_container", "name": "linux_malware_analysis_container", "owner": "lauriewired", "url": "https://github.com/LaurieWired/linux_malware_analysis_container", "stars": 89, "language": "Shell", "description": "Docker container for quickly analyzing Linux malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25a6612bd473", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-08-20T18:42:43Z", "archived": false, "topContributors": [ { "login": "LaurieWired", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" }, { "login": "ramenhost", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17592214?v=4", "type": "User" } ] }, { "repo": "seclab-ucr/koobe", "name": "koobe", "owner": "seclab-ucr", "url": "https://github.com/seclab-ucr/KOOBE", "stars": 89, "language": null, "description": "Towards Facilitating Exploit Generation of Kernel Out-Of-Bounds Write Vulnerabilities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhiyun Qian", "cardId": "022713dbceffc744", "avatar": "https://avatars.githubusercontent.com/u/32003129?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "10f848b78e20", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-07T00:07:32Z", "archived": false, "topContributors": [ { "login": "CvvT", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11675863?v=4", "type": "User" } ] }, { "repo": "ang13t/drone-swarmer", "name": "drone-swarmer", "owner": "ang13t", "url": "https://github.com/ANG13T/drone-swarmer", "stars": 88, "language": "C", "description": "Drone Swarmer is an ESP8266 device based on RemoteIDSpoofer that spoofs \"ghost\" drones by exploiting an Open Drone ID vulnerability using Wi-Fi beacon broadcasts 📡 🛜", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "70ca0aee6f2a", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-23T10:41:34Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "antojoseph/droid-ff", "name": "droid-ff", "owner": "antojoseph", "url": "https://github.com/antojoseph/droid-ff", "id": "b810e0b45570", "stars": 88, "language": "Python", "description": "Android File Fuzzing Framework ", "type": "tool", "pushedAt": "2022-06-07T20:36:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Anto Joseph", "cardId": "365bd73d3841a046", "avatar": "https://avatars.githubusercontent.com/u/2523269?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "c0dist", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18549012?v=4", "type": "User" } ] }, { "repo": "ohjeongwook/binkit", "name": "binkit", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/binkit", "id": "91346e74dfed", "stars": 88, "language": "C", "description": "Binary Reverse Engineering Data Science Kit", "type": "tool", "pushedAt": "2020-10-05T01:35:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ohjeongwook", "c": 371, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "sethsec/pycodeinjection", "name": "pycodeinjection", "owner": "sethsec", "url": "https://github.com/sethsec/PyCodeInjection", "stars": 86, "language": "Python", "description": "Automated Python Code Injection Tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "500e147042b9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-10-13T18:37:25Z", "archived": false, "topContributors": [ { "login": "sethsec", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" }, { "login": "whoami-anoint", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72187543?v=4", "type": "User" } ] }, { "repo": "torque59/garfield", "name": "garfield", "owner": "torque59", "url": "https://github.com/torque59/Garfield", "stars": 86, "language": "Python", "description": "An offensive attack framework for Distributed Layer of Modern Applications", "type": "tool", "lanes": [ "2" ], "author": { "name": "Francis Alexander", "cardId": "375485c48c91ac12", "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0da3a6a1a1e0", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-02-05T17:43:43Z", "archived": false, "topContributors": [ { "login": "flabbergastedbd", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2751016?v=4", "type": "User" }, { "login": "torque59", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4", "type": "User" } ] }, { "repo": "sethlaw/sputr", "name": "sputr", "owner": "sethlaw", "url": "https://github.com/sethlaw/sputr", "stars": 86, "language": "Python", "description": "Security Payload Unit Test Repository (SPUTR)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Seth Law", "cardId": "9dbe6e4c5d8e5049", "avatar": "https://avatars.githubusercontent.com/u/544795?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8c5352e322b", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-18T02:45:33Z", "archived": false, "topContributors": [ { "login": "nVisium-seth-law", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/26070531?v=4", "type": "User" }, { "login": "sethlaw", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/544795?v=4", "type": "User" } ] }, { "repo": "nmatt0/firmwaretools", "name": "firmwaretools", "owner": "nmatt0", "url": "https://github.com/nmatt0/firmwaretools", "stars": 86, "language": "Python", "description": "a set of scripts and tools for various firmware analysis tasks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Brown", "cardId": "bc22a79c210791dc", "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2803c0d902ec", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-04T18:40:23Z", "archived": false, "topContributors": [ { "login": "nmatt0", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7366332?v=4", "type": "User" } ] }, { "repo": "carnal0wnage/pentesty_scripts", "name": "pentesty_scripts", "owner": "carnal0wnage", "url": "https://github.com/carnal0wnage/pentesty_scripts", "id": "b5fe89fb94e3", "stars": 86, "language": "Python", "description": "scripts for pentesting ", "type": "tool", "pushedAt": "2018-08-21T23:56:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chris Gates", "cardId": "2c54f9f640a5a08f", "avatar": "https://avatars.githubusercontent.com/u/735360?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "carnal0wnage", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/735360?v=4", "type": "User" } ] }, { "repo": "sethsec/crossdomain-exploitation-framework", "name": "crossdomain-exploitation-framework", "owner": "sethsec", "url": "https://github.com/sethsec/crossdomain-exploitation-framework", "stars": 85, "language": "ActionScript", "description": "Everything you need to exploit overly permissive crossdomain.xml files", "type": "tool", "lanes": [ "2" ], "author": { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8110437c8a3c", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-11-12T20:26:25Z", "archived": false, "topContributors": [ { "login": "sethsec", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" } ] }, { "repo": "lilang-wu/ios-appstore-malware-automatic-hunting-system", "name": "ios-appstore-malware-automatic-hunting-system", "owner": "lilang-wu", "url": "https://github.com/lilang-wu/iOS-AppStore-Malware-Automatic-Hunting-System", "stars": 85, "language": "Python", "description": "Blackhat USA 2018 Arsenal", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lilang Wu", "cardId": "2557f2a9a3ca5d8f", "avatar": "https://avatars.githubusercontent.com/u/16700065?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6c307280abc5", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-12-12T06:20:36Z", "archived": false, "topContributors": [ { "login": "JuZhu1978", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/38294186?v=4", "type": "User" }, { "login": "lilang-wu", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16700065?v=4", "type": "User" } ] }, { "repo": "tijme/kernel-mii", "name": "kernel-mii", "owner": "tijme", "url": "https://github.com/tijme/kernel-mii", "stars": 85, "language": "C", "description": "Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "99338f3bab4d", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-07T18:38:29Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "qazbnm456/vwgen", "name": "VWGen", "owner": "qazbnm456", "url": "https://github.com/qazbnm456/VWGen", "id": "f93614aab57e", "stars": 85, "language": "Python", "description": "Vulnerable Web applications Generator", "type": "tool", "pushedAt": "2017-12-10T05:23:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Syue Siang Su", "cardId": "dceb1ee2dff85d88", "avatar": "https://avatars.githubusercontent.com/u/6451933?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "qazbnm456", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/6451933?v=4", "type": "User" }, { "login": "hugojosefson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67230?v=4", "type": "User" } ] }, { "repo": "var77/cve-2026-2005", "name": "cve-2026-2005", "owner": "var77", "url": "https://github.com/var77/CVE-2026-2005", "stars": 25, "language": "Python", "description": "PoC for CVE-2026-2005", "type": "tool", "lanes": [ "2" ], "author": { "name": "Varik", "cardId": "6fc3291b5432fff9", "avatar": "https://avatars.githubusercontent.com/u/17221195?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9278bf242e03", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-13T15:31:10Z", "archived": false, "topContributors": [ { "login": "var77", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17221195?v=4", "type": "User" } ] }, { "repo": "zhuowei/meta-rayban-firmware-android-emulator", "name": "meta-rayban-firmware-android-emulator", "owner": "zhuowei", "url": "https://github.com/zhuowei/meta-rayban-firmware-android-emulator", "stars": 25, "language": "Makefile", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7de948eeb26f", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-11-03T15:09:31Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" }, { "login": "ilovecats4606", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84914492?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/shellcodegenz", "name": "shellcodegenz", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/ShellcodeGenZ", "stars": 22, "language": "Python", "description": "GenZ Shellcode Generator to execute commands with winExec API", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c73c896c5cb", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-27T20:28:27Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "x-c3ll/wfp-reader", "name": "wfp-reader", "owner": "x-c3ll", "url": "https://github.com/X-C3LL/wfp-reader", "stars": 21, "language": "C#", "description": "Proof of concept - Covert Channel using Windows Filtering Platform (C#)", "type": "tool", "lanes": [ "2" ], "author": { "name": "X-C3LL", "cardId": "0dcc4174f290a01e", "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5d90eb78d432", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-29T18:43:26Z", "archived": false, "topContributors": [ { "login": "X-C3LL", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4", "type": "User" } ] }, { "repo": "viralmaniar/guided-access-mode-bypass", "name": "guided-access-mode-bypass", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Guided-Access-Mode-Bypass", "stars": 21, "language": null, "description": "This write-up will provide detailed description on how to bypass Guided Access mode on Apple iPhones. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e9ccc3be7bd9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-23T13:42:45Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "logangoins/headhunter", "name": "headhunter", "owner": "logangoins", "url": "https://github.com/logangoins/HeadHunter", "stars": 21, "language": "C", "description": "HeadHunter Command and Control (C2)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "24465b24e5e9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-01-23T14:56:22Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 225, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" }, { "login": "HullaBrian", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/62084657?v=4", "type": "User" }, { "login": "second-pumpkin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/116591201?v=4", "type": "User" } ] }, { "repo": "martinsohn/adattributehound", "name": "adattributehound", "owner": "martinsohn", "url": "https://github.com/martinsohn/ADAttributeHound", "stars": 21, "language": "PowerShell", "description": "ADAttributeHound is an OpenGraph extension for BloodHound that exports Active Directory custom attributes as node properties.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1b2c2d57253e", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-18T09:10:03Z", "archived": false, "topContributors": [ { "login": "martinsohn", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "type": "User" } ] }, { "repo": "k0keoyo/cve-2015-2546-exploit", "name": "cve-2015-2546-exploit", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/CVE-2015-2546-Exploit", "stars": 21, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e8e1c436fd2", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-05-25T14:27:39Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "blacksnufkin/odineye", "name": "odineye", "owner": "blacksnufkin", "url": "https://github.com/BlackSnufkin/OdinEye", "stars": 20, "language": null, "description": "Create a private Discord CTI \"Dashboard\" using various Discord bots It,'s a simple and effective way to stay informed and up-to-date on the latest developments and news in Offensive Security World", "type": "tool", "lanes": [ "2" ], "author": { "name": "BlackSnufkin", "cardId": "037192b32299ba1d", "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fdce9a14d549", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-16T10:28:21Z", "archived": false, "topContributors": [ { "login": "BlackSnufkin", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/61916899?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/delve-mcp", "name": "delve-mcp", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/delve-mcp", "stars": 20, "language": "TypeScript", "description": "MCP server for Delve debugger integration", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d90188ece113", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-02T17:05:49Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "hackinglz/telnyx_4.87.1_payload", "name": "telnyx_4.87.1_payload", "owner": "hackinglz", "url": "https://github.com/HackingLZ/telnyx_4.87.1_payload", "stars": 20, "language": "C", "description": "Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise — WAV steganography, credential stealer, Windows persistence", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0dc7826440e2", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-29T10:08:30Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "hackinglz/cve-2025-27237", "name": "cve-2025-27237", "owner": "hackinglz", "url": "https://github.com/HackingLZ/CVE-2025-27237", "stars": 20, "language": "Python", "description": "CVE 2025 27237 Zabbix LPE proof of concept.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "534cbb801aa7", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-26T16:39:22Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/ipq40xx_tee_exploit", "name": "ipq40xx_tee_exploit", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/ipq40xx_tee_exploit", "stars": 20, "language": "C", "description": "ARM Cortex A7 Qualcomm IPQ4018 QSEE (TrustZone) exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60c95b593a7c", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-14T08:33:26Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" } ] }, { "repo": "hackinglz/loadlibrary-patch-kit", "name": "loadlibrary-patch-kit", "owner": "hackinglz", "url": "https://github.com/HackingLZ/loadlibrary-patch-kit", "stars": 19, "language": "Python", "description": "VDM sig bypass and additional WinAPI stubs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a95de4ac48e9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-16T19:22:24Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "zephrfish/copyfail-cve-2026-31431", "name": "copyfail-cve-2026-31431", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CopyFail-CVE-2026-31431", "stars": 19, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e2f9f033c19", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-30T00:15:44Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "zephrfish/cve-2025-53770-scanner", "name": "cve-2025-53770-scanner", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CVE-2025-53770-Scanner", "stars": 18, "language": "Python", "description": "ToolShell scanner - CVE-2025-53770 and detection information", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0030a0522066", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-12-07T01:31:06Z", "archived": false, "topContributors": [] }, { "repo": "morph3/gizligizli", "name": "gizligizli", "owner": "morph3", "url": "https://github.com/morph3/gizligizli", "stars": 18, "language": "Python", "description": "A steganography based shellcode hider to bypass AV", "type": "tool", "lanes": [ "2" ], "author": { "name": "Melih Kaan Yıldız", "cardId": "373da8b89e522f77", "avatar": "https://avatars.githubusercontent.com/u/16365583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb3d9558a80e", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-07T00:30:23Z", "archived": false, "topContributors": [ { "login": "morph3", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/16365583?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/cve-2023-26818", "name": "cve-2023-26818", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/CVE-2023-26818", "stars": 18, "language": "Objective-C", "description": "CVE-2023-26818 Exploit MacOS TCC Bypass W/ Telegram", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2866067f57a9", "score": 28, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-06T20:14:42Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "besimorhino/powercat", "name": "powercat", "owner": "besimorhino", "url": "https://github.com/besimorhino/powercat", "stars": 2382, "language": "PowerShell", "description": "netshell features all in version 2 powershell", "type": "tool", "lanes": [ "1" ], "author": { "name": "besimorhino", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2019/04/15/commando-vm-lessons.html", "title": "Commando VM: Lessons Learned", "person": "0xdf" }, { "url": "https://itm4n.github.io/localservice-privileges/", "title": "Give Me Back My Privileges! Please?", "person": "Clément Labro" } ], "referencedCount": 2, "id": "7d49906c20de", "score": 27, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 3, "mentionDistinct": 3, "contributorCount": 4, "contributors": [], "pushedAt": "2024-03-05T18:05:07Z", "archived": false, "topContributors": [ { "login": "lukebaggett", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/3998892?v=4", "type": "User" }, { "login": "besimorhino", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2036208?v=4", "type": "User" }, { "login": "kjacobsen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2404128?v=4", "type": "User" }, { "login": "nnamon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1039311?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/impacket", "name": "impacket", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/impacket", "stars": 78, "language": "Python", "description": "Impacket is a collection of Python classes for working with network protocols.", "type": "tool", "lanes": [ "1" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2023/05/27/htb-absolute.html", "title": "HTB: Absolute", "person": "0xdf" }, { "url": "https://blog.tw1sm.io/p/keeping-up-with-the-ntlm-relay", "title": "Keeping Up with the NTLM Relay", "person": "Matt Creel" } ], "referencedCount": 2, "id": "573d35ebfcd2", "score": 27, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 30, "contributorCount": 100, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" }, { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "login": "ropnop" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" }, { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" }, { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "login": "mxrch" } ], "pushedAt": "2024-08-19T19:57:08Z", "archived": false, "topContributors": [ { "login": "asolino", "c": 1333, "avatar": "https://avatars.githubusercontent.com/u/11577828?v=4", "type": "User" }, { "login": "0xdeaddood", "c": 192, "avatar": "https://avatars.githubusercontent.com/u/56035084?v=4", "type": "User" }, { "login": "dirkjanm", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "mohemiv", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/5724896?v=4", "type": "User" }, { "login": "kacpern", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/1493775?v=4", "type": "User" }, { "login": "snovvcrash", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "franferrax", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/8713657?v=4", "type": "User" }, { "login": "rmaksimov", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "cnotin", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "alexisbalbachan", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/8486486?v=4", "type": "User" }, { "login": "MrAnde7son", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/15673250?v=4", "type": "User" }, { "login": "p0dalirius", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "cclauss", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "rdubourguais", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/12847917?v=4", "type": "User" }, { "login": "anadrianmanrique", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/60896207?v=4", "type": "User" }, { "login": "martinuy", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/22035856?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "cube0x0", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/39370848?v=4", "type": "User" }, { "login": "UNC1739", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "Sanmopre", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/40120264?v=4", "type": "User" }, { "login": "gabrielg5", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1108902?v=4", "type": "User" }, { "login": "zexusx26", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/35561605?v=4", "type": "User" }, { "login": "NtAlexio2", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/110637492?v=4", "type": "User" }, { "login": "contactr2m", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13003246?v=4", "type": "User" }, { "login": "mpgn", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "Dramelac", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/10145128?v=4", "type": "User" }, { "login": "exploide", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "real-datagram", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/20213337?v=4", "type": "User" }, { "login": "Gifts", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1255811?v=4", "type": "User" } ] }, { "repo": "var77/cheat-engine-rs", "name": "cheat-engine-rs", "owner": "var77", "url": "https://github.com/var77/cheat-engine-rs", "stars": 14, "language": "Rust", "description": "CheatEngine implementation written in Rust for terminal.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Varik", "cardId": "6fc3291b5432fff9", "avatar": "https://avatars.githubusercontent.com/u/17221195?v=4" }, "referencedBy": [ { "url": "https://varik.dev/blog/cheat-engine-rs", "title": "Rewriting CheatEngine in Rust for the Terminal", "person": "Varik" } ], "referencedCount": 1, "id": "c7d3df3ca653", "score": 27, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-22T22:35:49Z", "archived": false, "topContributors": [ { "login": "var77", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/17221195?v=4", "type": "User" } ] }, { "repo": "thomaspreece/esp32-a1s_squeezebox_case", "name": "esp32-a1s_squeezebox_case", "owner": "thomaspreece", "url": "https://github.com/thomaspreece/ESP32-A1S_Squeezebox_Case", "stars": 12, "language": null, "description": "A 3D printable case for an ESP-A1S running Squeezebox", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Thomas Preece", "cardId": "bdfa0f008f8407dc", "avatar": "https://avatars.githubusercontent.com/u/2067021?v=4" }, "referencedBy": [ { "url": "https://thomaspreece.com/2019/12/10/project-multi-room-synchronised-audio/", "title": "Project: Multi-room Synchronised Audio - Thomas Preece", "person": "Thomas Preece" } ], "referencedCount": 1, "id": "4a055547f3a6", "score": 27, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-22T07:52:49Z", "archived": false, "topContributors": [ { "login": "thomaspreece", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2067021?v=4", "type": "User" } ] }, { "repo": "k0keoyo/ksrpc_analysis_script", "name": "ksrpc_analysis_script", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/ksRPC_analysis_script", "stars": 12, "language": "PowerShell", "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [ { "url": "https://whereisk0shl.top/post/StorSvc_writeup_and_introduction_about_my_analysis_script/", "title": "Whereisk0Shl", "person": "k0shl" } ], "referencedCount": 1, "id": "45b62764e02e", "score": 27, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-27T06:37:47Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "dnspy/dnspy", "name": "dnSpy", "owner": "dnSpy", "url": "https://github.com/dnSpy/dnSpy", "id": "42620fcd8271", "stars": 29666, "language": "C#", "description": ".NET debugger and assembly editor", "type": "tool", "pushedAt": "2020-12-20T23:55:15Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "dnSpy", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 25, "topContributors": [ { "login": "wtfsck", "c": 3874, "avatar": "https://avatars.githubusercontent.com/u/77994853?v=4", "type": "User" }, { "login": "SlowLogicBoy", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/3121637?v=4", "type": "User" }, { "login": "holly-hacker", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/13605369?v=4", "type": "User" }, { "login": "patricksadowski", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9739149?v=4", "type": "User" }, { "login": "LFriede", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16451532?v=4", "type": "User" }, { "login": "InlineAsm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6095763?v=4", "type": "User" }, { "login": "pawlos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1296768?v=4", "type": "User" }, { "login": "fireundubh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1261664?v=4", "type": "User" }, { "login": "josteink", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/411338?v=4", "type": "User" }, { "login": "MirekVales", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9898074?v=4", "type": "User" }, { "login": "umair-me", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/834935?v=4", "type": "User" }, { "login": "smourier", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5328574?v=4", "type": "User" }, { "login": "Symbai", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14368203?v=4", "type": "User" }, { "login": "honeyakshat999", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37788408?v=4", "type": "User" }, { "login": "kapsiR", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7165033?v=4", "type": "User" }, { "login": "kidkaneda", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/795500?v=4", "type": "User" }, { "login": "s809", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43530948?v=4", "type": "User" }, { "login": "FailedShack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39192928?v=4", "type": "User" }, { "login": "fdncred", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/343840?v=4", "type": "User" }, { "login": "Danghor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7728268?v=4", "type": "User" }, { "login": "CXuesong", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11611687?v=4", "type": "User" }, { "login": "augustoproiete", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/177608?v=4", "type": "User" }, { "login": "pardeike", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/853584?v=4", "type": "User" }, { "login": "AzazKamaz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12931951?v=4", "type": "User" }, { "login": "adamdriscoll", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1256531?v=4", "type": "User" } ] }, { "repo": "shuvonsec/claude-bug-bounty", "name": "claude-bug-bounty", "owner": "shuvonsec", "url": "https://github.com/shuvonsec/claude-bug-bounty", "stars": 3981, "language": "Python", "description": "AI-powered bug bounty hunting from your terminal - recon, 20 vuln classes, autonomous hunting, and report generation. All inside Claude Code.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Md Shariar Shanaz Shuvon", "cardId": "6cf9e09eb4b1508c", "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d194af5adcb", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 18, "contributors": [], "pushedAt": "2026-07-09T02:04:23Z", "archived": false, "topContributors": [ { "login": "shuvonsec", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4", "type": "User" }, { "login": "shuv0n", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/178245351?v=4", "type": "User" }, { "login": "letztek", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/56811154?v=4", "type": "User" }, { "login": "bertolikimberly", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/134340724?v=4", "type": "User" }, { "login": "venkatas", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1777272?v=4", "type": "User" }, { "login": "adityaax", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/98630015?v=4", "type": "User" }, { "login": "BeargleIndustries", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/258064049?v=4", "type": "User" }, { "login": "ultra-supara", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/67861004?v=4", "type": "User" }, { "login": "AurisDSP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/235008503?v=4", "type": "User" }, { "login": "Edneam", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97353024?v=4", "type": "User" }, { "login": "Realgagenichols", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18178876?v=4", "type": "User" }, { "login": "savioruz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34295920?v=4", "type": "User" }, { "login": "Paebak", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/142461031?v=4", "type": "User" }, { "login": "nurazhardotcom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/96178154?v=4", "type": "User" }, { "login": "SeekAndExploit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/201153956?v=4", "type": "User" }, { "login": "Shawanga", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10569053?v=4", "type": "User" }, { "login": "Copilot", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "kevinaimonster", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/172621334?v=4", "type": "User" } ] }, { "repo": "trustedsec/unicorn", "name": "unicorn", "owner": "trustedsec", "url": "https://github.com/trustedsec/unicorn", "id": "49bd7db65ce7", "stars": 3929, "language": "Python", "description": "Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented ", "type": "tool", "pushedAt": "2026-06-04T20:58:58Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" } ], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 15, "topContributors": [ { "login": "HackingDave", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "iam1980", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/101062?v=4", "type": "User" }, { "login": "computerscienceiscool", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/103335846?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "mandreko", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/419731?v=4", "type": "User" }, { "login": "th3joker3000", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/92647003?v=4", "type": "User" }, { "login": "hannestrunde", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7830222?v=4", "type": "User" }, { "login": "jonaslejon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/190150?v=4", "type": "User" }, { "login": "yonasuriv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59540565?v=4", "type": "User" }, { "login": "llamasoft", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4632450?v=4", "type": "User" }, { "login": "SmolinskiP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49648588?v=4", "type": "User" }, { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "cvtgreat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44908489?v=4", "type": "User" }, { "login": "rikvanduijn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7839269?v=4", "type": "User" }, { "login": "kosmokato", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58893728?v=4", "type": "User" } ] }, { "repo": "hasherezade/pe-sieve", "name": "pe-sieve", "owner": "hasherezade", "url": "https://github.com/hasherezade/pe-sieve", "id": "95846d372819", "stars": 3813, "language": "C++", "description": "Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).", "type": "tool", "pushedAt": "2026-06-06T12:46:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "hasherezade", "c": 1925, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "baranpirincal", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/37786733?v=4", "type": "User" }, { "login": "secDre4mer", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/61268450?v=4", "type": "User" }, { "login": "Neo23x0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2851492?v=4", "type": "User" }, { "login": "Fmk0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45094435?v=4", "type": "User" }, { "login": "Jack-McDowell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10685137?v=4", "type": "User" }, { "login": "CerebralMischief", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1329219?v=4", "type": "User" }, { "login": "hillu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173211?v=4", "type": "User" }, { "login": "ya0guang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12580159?v=4", "type": "User" }, { "login": "jpohls1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105008167?v=4", "type": "User" }, { "login": "mauronz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19782194?v=4", "type": "User" } ] }, { "repo": "swisskyrepo/ssrfmap", "name": "ssrfmap", "owner": "swisskyrepo", "url": "https://github.com/swisskyrepo/SSRFmap", "stars": 3591, "language": "Python", "description": "Automatic SSRF fuzzer and exploitation tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c18cf24aef12", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 16, "contributors": [], "pushedAt": "2025-09-04T07:44:11Z", "archived": false, "topContributors": [ { "login": "swisskyrepo", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" }, { "login": "xyzkab", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13573557?v=4", "type": "User" }, { "login": "daniel-corbett", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38925638?v=4", "type": "User" }, { "login": "ScarletTeam", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8682492?v=4", "type": "User" }, { "login": "sengkyaut", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15218612?v=4", "type": "User" }, { "login": "tarunkant", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20815966?v=4", "type": "User" }, { "login": "ttffdd", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5412272?v=4", "type": "User" }, { "login": "C1ph3rX13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80873500?v=4", "type": "User" }, { "login": "kxynos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/784290?v=4", "type": "User" }, { "login": "mbharanya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10432831?v=4", "type": "User" }, { "login": "makim0n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50366771?v=4", "type": "User" }, { "login": "mashaz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17065267?v=4", "type": "User" }, { "login": "Ne0re0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/120590235?v=4", "type": "User" }, { "login": "Sdussault", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9085797?v=4", "type": "User" }, { "login": "AlekKras", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21290310?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "t3l3machus/hoaxshell", "name": "hoaxshell", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/hoaxshell", "stars": 3480, "language": "Python", "description": "A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8607357f6041", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-01-19T12:29:35Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 148, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" }, { "login": "shariqmalik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19536819?v=4", "type": "User" }, { "login": "brightio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65655412?v=4", "type": "User" } ] }, { "repo": "addyosmani/basket.js", "name": "basket.js", "owner": "addyosmani", "url": "https://github.com/addyosmani/basket.js", "stars": 3351, "language": "JavaScript", "description": "A script and resource loader for caching & loading files with localStorage", "type": "tool", "lanes": [ "2" ], "author": { "name": "Addy Osmani", "cardId": "8d94591d6660fba4", "avatar": "https://avatars.githubusercontent.com/u/110953?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e97c13739daa", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 23, "contributors": [], "pushedAt": "2025-03-02T06:16:58Z", "archived": false, "topContributors": [ { "login": "addyosmani", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/110953?v=4", "type": "User" }, { "login": "sindresorhus", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/170270?v=4", "type": "User" }, { "login": "peol", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/83221?v=4", "type": "User" }, { "login": "wibblymat", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/393358?v=4", "type": "User" }, { "login": "rwaldron", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/27985?v=4", "type": "User" }, { "login": "jschilli", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/122509?v=4", "type": "User" }, { "login": "mhmxs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4972503?v=4", "type": "User" }, { "login": "prawnsalad", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/725880?v=4", "type": "User" }, { "login": "itsuryev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/852848?v=4", "type": "User" }, { "login": "hereandnow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/245526?v=4", "type": "User" }, { "login": "zenorocha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/398893?v=4", "type": "User" }, { "login": "ReadmeCritic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15367484?v=4", "type": "User" }, { "login": "Hemphill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10413?v=4", "type": "User" }, { "login": "donaldpcook", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/335256?v=4", "type": "User" }, { "login": "dlepaux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3735879?v=4", "type": "User" }, { "login": "evocateur", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5605?v=4", "type": "User" }, { "login": "bry4n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/73400?v=4", "type": "User" }, { "login": "bkardell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/870501?v=4", "type": "User" }, { "login": "c0bra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105007?v=4", "type": "User" }, { "login": "BlakeSandes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5839214?v=4", "type": "User" }, { "login": "bnjmnt4n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/813865?v=4", "type": "User" }, { "login": "pyprism", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1469242?v=4", "type": "User" }, { "login": "acconrad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/422184?v=4", "type": "User" } ] }, { "repo": "codingo/nosqlmap", "name": "NoSQLMap", "owner": "codingo", "url": "https://github.com/codingo/NoSQLMap", "id": "128e7a794fa0", "stars": 3318, "language": "Python", "description": "Automated NoSQL database enumeration and web application exploitation tool.", "type": "tool", "pushedAt": "2026-02-20T00:37:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 32, "topContributors": [ { "login": "tcstool", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/3258846?v=4", "type": "User" }, { "login": "codingo", "c": 65, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "za", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/409455?v=4", "type": "User" }, { "login": "youngyangyang04", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/8636020?v=4", "type": "User" }, { "login": "akash0x53", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1938635?v=4", "type": "User" }, { "login": "adriendb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1918063?v=4", "type": "User" }, { "login": "dkegel-fastly", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/79674949?v=4", "type": "User" }, { "login": "alexdetrano", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13913633?v=4", "type": "User" }, { "login": "maurizioabba", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15870453?v=4", "type": "User" }, { "login": "sdcampbell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10532268?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "andresriancho", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/865200?v=4", "type": "User" }, { "login": "blshkv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/309751?v=4", "type": "User" }, { "login": "augustd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1258191?v=4", "type": "User" }, { "login": "bbeale", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9686813?v=4", "type": "User" }, { "login": "shoebpate1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20478531?v=4", "type": "User" }, { "login": "Dannnno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6121935?v=4", "type": "User" }, { "login": "gu4xin1m", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54176981?v=4", "type": "User" }, { "login": "gabu-b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37980500?v=4", "type": "User" }, { "login": "VanTekken", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20387444?v=4", "type": "User" }, { "login": "JeromeNaucelle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24714694?v=4", "type": "User" }, { "login": "khbecker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/658139?v=4", "type": "User" }, { "login": "0x0D1n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23523771?v=4", "type": "User" }, { "login": "Mhapankar123", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22360258?v=4", "type": "User" }, { "login": "Nythiennzo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16918311?v=4", "type": "User" }, { "login": "Qwokka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7696485?v=4", "type": "User" }, { "login": "RasPhilCo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1666444?v=4", "type": "User" }, { "login": "SudhanshuC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2325647?v=4", "type": "User" }, { "login": "abdilahrf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6015012?v=4", "type": "User" }, { "login": "darinrogers", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4040910?v=4", "type": "User" } ] }, { "repo": "hacksysteam/hacksysextremevulnerabledriver", "name": "HackSysExtremeVulnerableDriver", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/HackSysExtremeVulnerableDriver", "id": "5a0d1f37c556", "stars": 3036, "language": "C", "description": "HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux", "type": "tool", "pushedAt": "2025-02-24T12:19:16Z", "archived": false, "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "login": "abhisek" }, { "name": "wetw0rk", "cardId": "cca3bc4f07b32950", "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "login": "wetw0rk" }, { "name": "Yarden Shafir", "cardId": "84641f98d959dd3f", "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4", "login": "yardenshafir" } ], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 17, "topContributors": [ { "login": "hacksysteam", "c": 153, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" }, { "login": "abhisek", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" }, { "login": "m0t", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/500273?v=4", "type": "User" }, { "login": "w4fz5uck5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32375656?v=4", "type": "User" }, { "login": "nu1lptr0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/168084200?v=4", "type": "User" }, { "login": "0xDivyanshu-new", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135882723?v=4", "type": "User" }, { "login": "eegeek1986", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8055744?v=4", "type": "User" }, { "login": "Fullmetal5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3742968?v=4", "type": "User" }, { "login": "glslang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14957728?v=4", "type": "User" }, { "login": "Kristal-g", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61376744?v=4", "type": "User" }, { "login": "wetw0rk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "type": "User" }, { "login": "OctavioGalland", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2702822?v=4", "type": "User" }, { "login": "sam-b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/997395?v=4", "type": "User" }, { "login": "Shoshkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4984039?v=4", "type": "User" }, { "login": "takubokudori", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16149911?v=4", "type": "User" }, { "login": "yardenshafir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12428647?v=4", "type": "User" }, { "login": "FULLSHADE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54753063?v=4", "type": "User" } ] }, { "repo": "endermanch/malwaredatabase", "name": "malwaredatabase", "owner": "endermanch", "url": "https://github.com/Endermanch/MalwareDatabase", "stars": 2855, "language": "Python", "description": "One of a few malware collections on the GitHub.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Enderman", "cardId": "d8dfb8d6364e4c37", "avatar": "https://avatars.githubusercontent.com/u/44542704?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2dd4008c6413", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2025-08-01T11:03:21Z", "archived": false, "topContributors": [ { "login": "Endermanch", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/44542704?v=4", "type": "User" }, { "login": "indexerrowaty", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/39349444?v=4", "type": "User" }, { "login": "ShiSHcat", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/51242428?v=4", "type": "User" }, { "login": "Da2dalus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63458929?v=4", "type": "User" }, { "login": "iProgramMC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17717494?v=4", "type": "User" } ] }, { "repo": "hasherezade/pe_to_shellcode", "name": "pe_to_shellcode", "owner": "hasherezade", "url": "https://github.com/hasherezade/pe_to_shellcode", "stars": 2781, "language": "C++", "description": "Converts PE into a shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b38acef9333", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-08-30T15:50:53Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 158, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "86hh", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/45062586?v=4", "type": "User" }, { "login": "nofiv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41523109?v=4", "type": "User" } ] }, { "repo": "login-securite/lsassy", "name": "lsassy", "owner": "login-securite", "url": "https://github.com/login-securite/lsassy", "id": "1e06458a39ec", "stars": 2205, "language": "Python", "description": "Extract credentials from lsass remotely", "type": "tool", "pushedAt": "2026-03-23T09:18:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "login-securite", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 3, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 20, "topContributors": [ { "login": "Hackndo", "c": 511, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "Marshall-Hallenbeck", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1518719?v=4", "type": "User" }, { "login": "blurbdust", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9424589?v=4", "type": "User" }, { "login": "snovvcrash", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "viaccoz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/42694303?v=4", "type": "User" }, { "login": "zblurx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/68540460?v=4", "type": "User" }, { "login": "laxa", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/450587?v=4", "type": "User" }, { "login": "philippmao", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22954598?v=4", "type": "User" }, { "login": "n3rada", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "mpgn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5891788?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "3gstudent", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15814408?v=4", "type": "User" }, { "login": "D-XIII", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43643142?v=4", "type": "User" }, { "login": "ITPPA", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2368380?v=4", "type": "User" }, { "login": "themaks", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6764424?v=4", "type": "User" }, { "login": "RemiEscourrou", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22934796?v=4", "type": "User" }, { "login": "T1erno", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78065668?v=4", "type": "User" }, { "login": "Xenorf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90411648?v=4", "type": "User" }, { "login": "blackndoor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28482630?v=4", "type": "User" }, { "login": "exploide", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" } ] }, { "repo": "jxy-s/herpaderping", "name": "herpaderping", "owner": "jxy-s", "url": "https://github.com/jxy-s/herpaderping", "stars": 1207, "language": "C++", "description": "Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johnny Shaw", "cardId": "db65269d7e82b1fd", "avatar": "https://avatars.githubusercontent.com/u/11687482?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ce36813ae3e", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 2, "contributorCount": 2, "contributors": [], "pushedAt": "2023-07-05T17:04:57Z", "archived": false, "topContributors": [ { "login": "jxy-s", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11687482?v=4", "type": "User" }, { "login": "lilhoser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3084961?v=4", "type": "User" } ] }, { "repo": "lauriewired/ghostwriteexploit", "name": "GhostWriteExploit", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/GhostWriteExploit", "id": "11b1ff72b8ed", "stars": 84, "language": "C", "description": "Supporting code for exploiting the RISC-V GhostWrite vulnerability", "type": "tool", "pushedAt": "2024-11-22T19:22:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "joelgmsec/azuregraph", "name": "azuregraph", "owner": "joelgmsec", "url": "https://github.com/JoelGMSec/AzureGraph", "stars": 82, "language": "PowerShell", "description": "Azure AD enumeration over MS Graph", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f412ed6c0328", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-30T18:25:18Z", "archived": false, "topContributors": [ { "login": "JoelGMSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" } ] }, { "repo": "dafthack/passphrasegen", "name": "passphrasegen", "owner": "dafthack", "url": "https://github.com/dafthack/PassphraseGen", "stars": 82, "language": "PowerShell", "description": "A script for generating custom passphrase lists to be used for password cracking with hashcat rules", "type": "tool", "lanes": [ "2" ], "author": { "name": "Beau Bullock", "cardId": "8793f0618ee47d1f", "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "13f7eae13b13", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-06-27T15:34:49Z", "archived": false, "topContributors": [ { "login": "dafthack", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2296229?v=4", "type": "User" } ] }, { "repo": "rootup/redteam", "name": "redteam", "owner": "rootup", "url": "https://github.com/RootUp/RedTeam", "stars": 81, "language": "PowerShell", "description": "One line PS scripts that may come handy during your network assesment", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "14deb4dd635f", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 11, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-08T11:31:03Z", "archived": false, "topContributors": [ { "login": "RootUp", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" } ] }, { "repo": "ccob/pinswipe", "name": "pinswipe", "owner": "ccob", "url": "https://github.com/CCob/PinSwipe", "stars": 80, "language": "C", "description": "Smart Card PIN swiping DLL", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7b1cdaf967fd", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-10-04T19:32:15Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "galoget/ghidra-headless-scripts", "name": "ghidra-headless-scripts", "owner": "galoget", "url": "https://github.com/galoget/ghidra-headless-scripts", "id": "42cd6065d22f", "stars": 80, "language": "Python", "description": "Ghidra Headless Scripts for Automated Analysis (Decompilation and Disassembly)", "type": "tool", "pushedAt": "2022-11-03T00:05:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Galoget Latorre", "cardId": "38fb4b9abe4642f1", "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "galoget", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "type": "User" } ] }, { "repo": "linushenze/unrootless-kext", "name": "unrootless-kext", "owner": "linushenze", "url": "https://github.com/LinusHenze/Unrootless-Kext", "stars": 79, "language": "C", "description": "A Kext that can be used to disable Rootless in OS X El Capitan/macOS Sierra. You need to sign it OR use an exploit to make OS X load it.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Linus Henze", "cardId": "0a5e4cfe401615ab", "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2eefe43a0dc9", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-26T20:11:09Z", "archived": true, "topContributors": [ { "login": "LinusHenze", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/12863929?v=4", "type": "User" } ] }, { "repo": "lauriewired/reverseengineeringandroidmalware", "name": "reverseengineeringandroidmalware", "owner": "lauriewired", "url": "https://github.com/LaurieWired/ReverseEngineeringAndroidMalware", "stars": 79, "language": null, "description": "This contains notes and slides for my talk on Reverse Engineering Android Malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8ba8dd019a33", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-06T21:55:09Z", "archived": false, "topContributors": [ { "login": "LaurieWired", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "gentilkiwi/curveball", "name": "curveball", "owner": "gentilkiwi", "url": "https://github.com/gentilkiwi/curveball", "stars": 78, "language": "C", "description": "CVE-2020-0601 #curveball - Alternative Key Calculator", "type": "tool", "lanes": [ "2" ], "author": { "name": "🥝🏳️‍🌈 Benjamin Delpy", "cardId": "f3e89338be6de6f6", "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3b37b06c775a", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2020-01-20T23:00:14Z", "archived": false, "topContributors": [ { "login": "gentilkiwi", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4", "type": "User" } ] }, { "repo": "shipcod3/irc-bot-hunters", "name": "irc-bot-hunters", "owner": "shipcod3", "url": "https://github.com/shipcod3/IRC-Bot-Hunters", "stars": 78, "language": "C", "description": "a collection of Metasploit PoC exploits I wrote for IRC Botnets that allows RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8ff8596dd6b", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-05T11:42:58Z", "archived": false, "topContributors": [ { "login": "shipcod3", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" } ] }, { "repo": "xorrior/emailraider", "name": "EmailRaider", "owner": "xorrior", "url": "https://github.com/xorrior/EmailRaider", "id": "0150b721a738", "stars": 77, "language": "PowerShell", "description": "Powershell MS Outlook enumeration and phishing tool", "type": "tool", "pushedAt": "2016-05-26T02:06:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xorrior", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "madhuakula/spotter", "name": "spotter", "owner": "madhuakula", "url": "https://github.com/madhuakula/spotter", "stars": 76, "language": "Go", "description": "Spotter is a comprehensive Kubernetes security scanner that uses CEL-based rules to identify security vulnerabilities, misconfigurations, and compliance violations across your Kubernetes clusters, man", "type": "tool", "lanes": [ "2" ], "author": { "name": "Madhu Akula", "cardId": "3af4d17ee0a1e27a", "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "664b71c4031c", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-09-13T20:24:15Z", "archived": false, "topContributors": [ { "login": "manjunathb4461", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/31785721?v=4", "type": "User" }, { "login": "madhuakula", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/6764192?v=4", "type": "User" }, { "login": "apvarun", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8411309?v=4", "type": "User" } ] }, { "repo": "jduck/challack", "name": "challack", "owner": "jduck", "url": "https://github.com/jduck/challack", "stars": 76, "language": "C", "description": "Proof-of-concept exploit code for CVE-2016-5696", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "924f17c3a70d", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-08-30T06:32:43Z", "archived": false, "topContributors": [ { "login": "jduck", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" } ] }, { "repo": "zardus/idalink", "name": "idalink", "owner": "zardus", "url": "https://github.com/zardus/idalink", "id": "ed27b8870779", "stars": 76, "language": "Python", "description": "Some glue facilitating remote use of IDA (the Interactive DisAssembler) Python API.", "type": "tool", "pushedAt": "2020-07-14T01:44:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Yan Shoshitaishvili", "cardId": "75ad8f4ca839e0cc", "avatar": "https://avatars.githubusercontent.com/u/3453847?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "zardus", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/3453847?v=4", "type": "User" }, { "login": "cao", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/4066561?v=4", "type": "User" }, { "login": "rhelmot", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2498805?v=4", "type": "User" }, { "login": "ltfish", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5071575?v=4", "type": "User" }, { "login": "adrianherrera", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8626578?v=4", "type": "User" }, { "login": "doronz88", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19665147?v=4", "type": "User" }, { "login": "badnack", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1037156?v=4", "type": "User" }, { "login": "TheRealTroff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19474485?v=4", "type": "User" } ] }, { "repo": "alexhude/leicahacks", "name": "leicahacks", "owner": "alexhude", "url": "https://github.com/alexhude/LeicaHacks", "stars": 74, "language": "C++", "description": "Various tools and scripts for reversing Leica M firmware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Kovrizhnykh", "cardId": "a0463ec63f501e5e", "avatar": "https://avatars.githubusercontent.com/u/13582677?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ac4ce3b52b5", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-23T21:47:29Z", "archived": false, "topContributors": [ { "login": "alexhude", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13582677?v=4", "type": "User" } ] }, { "repo": "danmcinerney/autorelay", "name": "autorelay", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/autorelay", "stars": 73, "language": "Python", "description": "Automatically performs the SMB relay attack", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5841eda406c5", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-13T16:06:54Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "chompie1337/phrackctf", "name": "PhrackCTF", "owner": "chompie1337", "url": "https://github.com/chompie1337/PhrackCTF", "id": "c5ccaa75cb65", "stars": 73, "language": "C", "description": "Binary Exploitation Phrack CTF Challenge", "type": "tool", "pushedAt": "2025-08-21T19:34:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Valentina Palmiotti", "cardId": "44ba26b4768bf26a", "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "chompie1337", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56364411?v=4", "type": "User" } ] }, { "repo": "rhynorater/okta-password-sprayer", "name": "Okta-Password-Sprayer", "owner": "Rhynorater", "url": "https://github.com/Rhynorater/Okta-Password-Sprayer", "id": "42978eedda7d", "stars": 73, "language": "Python", "description": "This script is a multi-threaded Okta password sprayer.", "type": "tool", "pushedAt": "2024-01-05T16:24:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Justin Gardner", "cardId": "938d5ac8a05122a1", "avatar": "https://avatars.githubusercontent.com/u/2998191?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Rhynorater", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2998191?v=4", "type": "User" } ] }, { "repo": "adulau/active-scanning-techniques", "name": "active-scanning-techniques", "owner": "adulau", "url": "https://github.com/adulau/active-scanning-techniques", "id": "bcd8b6693269", "stars": 73, "language": null, "description": "A compilation of network scanning strategies to find vulnerable devices", "type": "tool", "pushedAt": "2022-11-06T15:37:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexandre Dulaunoy", "cardId": "ce61bec31cf8c835", "avatar": "https://avatars.githubusercontent.com/u/3309?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "adulau", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "type": "User" } ] }, { "repo": "fs0c131y/cve-2018-20555", "name": "cve-2018-20555", "owner": "fs0c131y", "url": "https://github.com/fs0c131y/CVE-2018-20555", "stars": 72, "language": "Python", "description": "Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555", "type": "tool", "lanes": [ "2" ], "author": { "name": "Baptiste Robert", "cardId": "4e39c1e7f599b1aa", "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd0d0da63b36", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-10-20T14:30:01Z", "archived": false, "topContributors": [ { "login": "fs0c131y", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4", "type": "User" }, { "login": "loubouchet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8341129?v=4", "type": "User" } ] }, { "repo": "yassineaboukir/cve-2020-5902", "name": "cve-2020-5902", "owner": "yassineaboukir", "url": "https://github.com/yassineaboukir/CVE-2020-5902", "stars": 71, "language": null, "description": "Proof of concept for CVE-2020-5902", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "242e7ecd1cad", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-06T17:47:17Z", "archived": false, "topContributors": [ { "login": "yassineaboukir", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/benthic", "name": "benthic", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Benthic", "stars": 71, "language": "C", "description": "Windows Kernel Rootkit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "342a63e01ea9", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-24T17:09:48Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "ang13t/satnow-scraper", "name": "satnow-scraper", "owner": "ang13t", "url": "https://github.com/ANG13T/satnow-scraper", "stars": 71, "language": "Python", "description": "OSINT web scraper for SatNow to extract details about satellite components and subsystem specs for in-depth reconnaissance 🛸 ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c47a43ee631d", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-23T20:21:45Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "fs0c131y/samsunglocker", "name": "SamsungLocker", "owner": "fs0c131y", "url": "https://github.com/fs0c131y/SamsungLocker", "id": "265928ff0ad7", "stars": 71, "language": "Kotlin", "description": "Samsung ContainerAgent Vulnerability - Local DoS for Samsung smartphone", "type": "tool", "pushedAt": "2019-05-15T07:57:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Baptiste Robert", "cardId": "4e39c1e7f599b1aa", "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "fs0c131y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4", "type": "User" } ] }, { "repo": "cryptosubtlety/00", "name": "00", "owner": "cryptosubtlety", "url": "https://github.com/cryptosubtlety/00", "id": "d6f050be8d38", "stars": 71, "language": null, "description": "Critical vulnerabilities. Using zero to attack zero-knowledge proof (ZKP) PLONK C++ and ECDSA, $15000 award", "type": "tool", "pushedAt": "2023-03-05T15:44:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Quan Thoi Minh Nguyen", "cardId": "57cd862bb2a17278", "avatar": "https://avatars.githubusercontent.com/u/1834775?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "cryptosubtlety", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1834775?v=4", "type": "User" } ] }, { "repo": "saw-your-packet/ec2stepshell", "name": "EC2StepShell", "owner": "saw-your-packet", "url": "https://github.com/saw-your-packet/EC2StepShell", "id": "9f38f7e11df9", "stars": 71, "language": "Python", "description": "EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.", "type": "tool", "pushedAt": "2024-09-20T10:24:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Eduard Agavriloae", "cardId": "83961bcda3158861", "avatar": "https://avatars.githubusercontent.com/u/38787278?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "saw-your-packet", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/38787278?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" } ] }, { "repo": "antonio-morales/apache-http-fuzzing", "name": "Apache-HTTP-Fuzzing", "owner": "antonio-morales", "url": "https://github.com/antonio-morales/Apache-HTTP-Fuzzing", "id": "4e66c9fbc88b", "stars": 70, "language": "C", "description": "", "type": "tool", "pushedAt": "2022-01-25T20:27:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Antonio Morales", "cardId": "82c53420e78c6b2b", "avatar": "https://avatars.githubusercontent.com/u/55253029?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "antonio-morales", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/55253029?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/httpmethods", "name": "httpmethods", "owner": "ShutdownRepo", "url": "https://github.com/ShutdownRepo/httpmethods", "id": "b61d73693c80", "stars": 69, "language": "Python", "description": "HTTP verb tampering & methods enumeration", "type": "tool", "pushedAt": "2026-03-07T09:26:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rémi Gascou", "cardId": "b5a4ad805600bd50", "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "login": "p0dalirius" } ], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "p0dalirius", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/79218792?v=4", "type": "User" }, { "login": "ShutdownRepo", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "TahiTi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3107859?v=4", "type": "User" }, { "login": "apache-strike", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28286318?v=4", "type": "User" }, { "login": "lalvarezt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16566531?v=4", "type": "User" }, { "login": "NatV33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56080454?v=4", "type": "User" }, { "login": "wlayzz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34021743?v=4", "type": "User" } ] }, { "repo": "tatanus/apt2", "name": "apt2", "owner": "tatanus", "url": "https://github.com/tatanus/apt2", "stars": 67, "language": "Python", "description": "APT2 is a pentest automation framework that can be used to assist pentesters, blue team members, and others in identifying easily exploitable issues and common attack paths.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Compton", "cardId": "5bc287d95d5ecaf3", "avatar": "https://avatars.githubusercontent.com/u/194860?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "22726b946aff", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [ { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "login": "Ne0nd0g" } ], "pushedAt": "2018-11-02T15:39:40Z", "archived": false, "topContributors": [ { "login": "tatanus", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/194860?v=4", "type": "User" }, { "login": "acompton-r7", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/34523942?v=4", "type": "User" }, { "login": "alane-coffeesec", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/11396618?v=4", "type": "User" }, { "login": "Ne0nd0g", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "Marx314", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1593248?v=4", "type": "User" }, { "login": "YouSysAdmin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1385374?v=4", "type": "User" }, { "login": "Sinderella", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1926450?v=4", "type": "User" } ] }, { "repo": "tijme/nimplant-beacon-position-independent-c-code", "name": "nimplant-beacon-position-independent-c-code", "owner": "tijme", "url": "https://github.com/tijme/nimplant-beacon-position-independent-c-code", "stars": 67, "language": "C", "description": "A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "119e860b4628", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-11T20:34:57Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "joxeankoret/maltindex", "name": "maltindex", "owner": "joxeankoret", "url": "https://github.com/joxeankoret/maltindex", "stars": 67, "language": "Python", "description": "Mal Tindex is an Open Source tool for indexing binaries and help attributing malware campaigns", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joxean Koret", "cardId": "e0c1465b5f795d4e", "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd52c11435a4", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-06-26T20:58:05Z", "archived": false, "topContributors": [ { "login": "joxeankoret", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2945834?v=4", "type": "User" } ] }, { "repo": "mgeeky/hevd_kernel_exploit", "name": "HEVD_Kernel_Exploit", "owner": "mgeeky", "url": "https://github.com/mgeeky/HEVD_Kernel_Exploit", "id": "75982b5b23c3", "stars": 67, "language": "C++", "description": "Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.", "type": "tool", "pushedAt": "2021-10-24T21:15:41Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mgeeky", "c": 104, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "bgeesaman/malicious-compliance", "name": "malicious-compliance", "owner": "bgeesaman", "url": "https://github.com/bgeesaman/malicious-compliance", "id": "66ab2de3ad00", "stars": 67, "language": "Makefile", "description": "Supporting code and demos for KubeCon EU 2023 talk \"Malicious Compliance: Reflections on Trusting Container Image Scanners\"", "type": "tool", "pushedAt": "2023-12-09T01:21:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Brad Geesaman", "cardId": "e9ea317205f8c648", "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "bgeesaman", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4", "type": "User" }, { "login": "sa7mon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3712226?v=4", "type": "User" } ] }, { "repo": "dump-guy/sc2pe", "name": "sc2pe", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/sc2pe", "stars": 66, "language": "C#", "description": "Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fdf93c26a835", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-01T08:09:48Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "tijme/kong-loader", "name": "kong-loader", "owner": "tijme", "url": "https://github.com/tijme/kong-loader", "stars": 66, "language": "C", "description": "Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible in memory.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b09b73be84db", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-02T16:28:37Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "niklasb/elgoog", "name": "elgoog", "owner": "niklasb", "url": "https://github.com/niklasb/elgoog", "stars": 66, "language": "C", "description": "elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Niklas Baumstark", "cardId": "e7e56ae52dd8ba57", "avatar": "https://avatars.githubusercontent.com/u/94819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "39dd4526f23d", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-07-09T12:45:32Z", "archived": false, "topContributors": [ { "login": "niklasb", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/94819?v=4", "type": "User" } ] }, { "repo": "jduck/canhazaxs", "name": "canhazaxs", "owner": "jduck", "url": "https://github.com/jduck/canhazaxs", "id": "e29b6ce47ff4", "stars": 66, "language": "C", "description": "A tool for enumerating the access to entries in the file system of an Android device.", "type": "tool", "pushedAt": "2018-11-07T20:22:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "jduck", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" }, { "login": "anestisb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/428644?v=4", "type": "User" }, { "login": "Brumstar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7912841?v=4", "type": "User" }, { "login": "strazzere", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/623686?v=4", "type": "User" } ] }, { "repo": "joelgmsec/thunderstorm", "name": "thunderstorm", "owner": "joelgmsec", "url": "https://github.com/JoelGMSec/Thunderstorm", "stars": 65, "language": "Python", "description": "Modular framework to exploit UPS devices", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59034051c792", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-01T10:14:43Z", "archived": false, "topContributors": [ { "login": "JoelGMSec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" } ] }, { "repo": "wietze/windows-dll-env-hijacking", "name": "windows-dll-env-hijacking", "owner": "wietze", "url": "https://github.com/wietze/windows-dll-env-hijacking", "stars": 65, "language": "Shell", "description": "Project for identifying executables and DLLs vulnerable to environment-variable based DLL hijacking.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5dab5606e099", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-15T16:17:05Z", "archived": false, "topContributors": [ { "login": "wietze", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" } ] }, { "repo": "johnhammond/binnim", "name": "binnim", "owner": "johnhammond", "url": "https://github.com/JohnHammond/binnim", "stars": 65, "language": "Nim", "description": "Shitty Nim code that reads in a file and converts it into \\x hex representation, for the use of shellcode binaries.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8823b01de08e", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-28T05:37:16Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "adulau/misp-osint-collection", "name": "misp-osint-collection", "owner": "adulau", "url": "https://github.com/adulau/misp-osint-collection", "stars": 65, "language": "HTML", "description": "Collection of best practices to add OSINT into MISP and/or MISP communities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre Dulaunoy", "cardId": "ce61bec31cf8c835", "avatar": "https://avatars.githubusercontent.com/u/3309?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "92da2005a3ca", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-09-29T20:33:27Z", "archived": false, "topContributors": [ { "login": "adulau", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "type": "User" }, { "login": "Nedfire2347", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15346748?v=4", "type": "User" }, { "login": "C00kie-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10437682?v=4", "type": "User" }, { "login": "Vincent-CIRCL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47740166?v=4", "type": "User" } ] }, { "repo": "jofpin/backcookie", "name": "backcookie", "owner": "jofpin", "url": "https://github.com/jofpin/backcookie", "stars": 64, "language": "Python", "description": "Small backdoor using cookie.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1434440d4724", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2016-10-18T23:36:32Z", "archived": false, "topContributors": [ { "login": "dasouch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1742818?v=4", "type": "User" }, { "login": "juaneljach", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5005472?v=4", "type": "User" } ] }, { "repo": "toniblyx/aws-forensic-tools", "name": "aws-forensic-tools", "owner": "toniblyx", "url": "https://github.com/toniblyx/aws-forensic-tools", "stars": 64, "language": "Shell", "description": "Tools for AWS forensics", "type": "tool", "lanes": [ "2" ], "author": { "name": "Toni de la Fuente", "cardId": "e540dfcd97c39db6", "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "66037c4b9acf", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-03-04T23:10:01Z", "archived": false, "topContributors": [ { "login": "toniblyx", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4", "type": "User" } ] }, { "repo": "abhisek/pwnworks", "name": "pwnworks", "owner": "abhisek", "url": "https://github.com/abhisek/pwnworks", "id": "85dd4400f40d", "stars": 64, "language": "Shell", "description": "Exploitation challenges for CTF", "type": "tool", "pushedAt": "2018-02-13T17:50:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "abhisek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" } ] }, { "repo": "leo4j/pplkiller", "name": "pplkiller", "owner": "leo4j", "url": "https://github.com/Leo4j/PPLKiller", "stars": 63, "language": "C#", "description": "Tool to bypass LSA Protection (aka Protected Process Light)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b9c4646cd3d9", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-02T10:35:29Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "johndmcmaster/prawntools", "name": "prawntools", "owner": "JohnDMcMaster", "url": "https://github.com/JohnDMcMaster/prawntools", "id": "87a86b4c6063", "stars": 61, "language": "Python", "description": "Integrated Circuit (IC) Reverse Engineering (RE) software. Rough cuts for R&D.", "type": "tool", "pushedAt": "2021-04-25T21:10:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "John McMaster", "cardId": "868ce8f4bdce1ea6", "avatar": "https://avatars.githubusercontent.com/u/222171?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "JohnDMcMaster", "c": 622, "avatar": "https://avatars.githubusercontent.com/u/222171?v=4", "type": "User" }, { "login": "ferdna", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/149518?v=4", "type": "User" } ] }, { "repo": "mgeeky/phishingpost", "name": "PhishingPost", "owner": "mgeeky", "url": "https://github.com/mgeeky/PhishingPost", "id": "21f06849dd01", "stars": 61, "language": "PHP", "description": "PHP Script intdended to be used during Phishing campaigns as a credentials collector linked to backdoored HTML
action parameter", "type": "tool", "pushedAt": "2021-10-24T21:17:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mgeeky", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "tatanus/phishing", "name": "PHISHING", "owner": "tatanus", "url": "https://github.com/tatanus/PHISHING", "id": "d1f72e77703a", "stars": 60, "language": "JavaScript", "description": "A few simple scripts and templates I have used during various phishing engagements.", "type": "tool", "pushedAt": "2015-04-03T15:58:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Adam Compton", "cardId": "5bc287d95d5ecaf3", "avatar": "https://avatars.githubusercontent.com/u/194860?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tatanus", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/194860?v=4", "type": "User" } ] }, { "repo": "xoreaxeaxeax/mchammer", "name": "mchammer", "owner": "xoreaxeaxeax", "url": "https://github.com/xoreaxeaxeax/mchammer", "id": "d6b3a4e65eae", "stars": 59, "language": null, "description": "machine check exploitation", "type": "tool", "pushedAt": "2025-08-06T15:00:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Christopher Domas", "cardId": "2529ac99099dac07", "avatar": "https://avatars.githubusercontent.com/u/12904366?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xoreaxeaxeax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12904366?v=4", "type": "User" } ] }, { "repo": "wunderwuzzi23/koiphish", "name": "KoiPhish", "owner": "wunderwuzzi23", "url": "https://github.com/wunderwuzzi23/KoiPhish", "id": "a003f7860cb3", "stars": 59, "language": "Go", "description": "A simple yet beautiful phishing proxy.", "type": "tool", "pushedAt": "2021-08-13T16:07:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Johann Rehberger", "cardId": "549d2d53d4f9b03f", "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wunderwuzzi23", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4", "type": "User" } ] }, { "repo": "thuyimingli/untargeted_backdoor_watermark", "name": "untargeted_backdoor_watermark", "owner": "thuyimingli", "url": "https://github.com/THUYimingLi/Untargeted_Backdoor_Watermark", "stars": 58, "language": "Python", "description": "This is the official implementation of our paper 'Untargeted Backdoor Watermark: Towards Harmless and Stealthy Dataset Copyright Protection', accepted in NeurIPS 2022.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yiming Li", "cardId": "17e4afe2a5635d60", "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8b7cfd3378f5", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-05-01T03:32:29Z", "archived": false, "topContributors": [ { "login": "THUYimingLi", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4", "type": "User" }, { "login": "bymavis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13351861?v=4", "type": "User" }, { "login": "ffhibnese", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/91327274?v=4", "type": "User" } ] }, { "repo": "bitdefender/hypervinject-poc", "name": "hypervinject-poc", "owner": "bitdefender", "url": "https://github.com/bitdefender/hypervinject-poc", "stars": 58, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc41a04926d4", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-10T09:12:36Z", "archived": false, "topContributors": [ { "login": "vlutas", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/49196812?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/bentico", "name": "bentico", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Bentico", "stars": 58, "language": "C", "description": "[ARCHIVED] Early work on Benthic (Windows Kernel Rootkit).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ca636628f14", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-15T17:28:06Z", "archived": true, "topContributors": [ { "login": "TheMalwareGuardian", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "its-a-feature/macos_execute_from_memory", "name": "macos_execute_from_memory", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/macos_execute_from_memory", "stars": 57, "language": "Makefile", "description": "PoC of macho loading from memory ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7022329eeee", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-18T23:14:55Z", "archived": false, "topContributors": [ { "login": "its-a-feature", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" } ] }, { "repo": "daddycocoaman/ironpentest", "name": "IronPentest", "owner": "daddycocoaman", "url": "https://github.com/daddycocoaman/IronPentest", "id": "8282d41ee12d", "stars": 57, "language": "Python", "description": "Collection of IronPython scripts and executables for penetration testing", "type": "tool", "pushedAt": "2019-02-26T03:36:41Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "daddycocoaman", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" } ] }, { "repo": "zephrfish/cve-2021-41773-poc", "name": "cve-2021-41773-poc", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CVE-2021-41773-PoC", "stars": 17, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "72e65c2e408a", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-07T01:30:51Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "nafiez/datablockntlmleak", "name": "datablockntlmleak", "owner": "nafiez", "url": "https://github.com/nafiez/DataBlockNTLMLeak", "stars": 16, "language": "Ruby", "description": "Windows Shell Link (LNK) Proof of Concept", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nafiez", "cardId": "6868b11a504c9d8e", "avatar": "https://avatars.githubusercontent.com/u/789149?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "713b86860d8a", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-19T15:16:59Z", "archived": false, "topContributors": [ { "login": "nafiez", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/789149?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/offensive-go-scripts", "name": "offensive-go-scripts", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/Offensive-Go-Scripts", "stars": 15, "language": "Go", "description": "scripts I make in golang will end up here and notes I took during my study of the language", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e53036743605", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-21T20:59:17Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/tarahunter", "name": "tarahunter", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/tarahunter", "stars": 14, "language": "Go", "description": "High-speed, multi-threaded APT hunting tool designed for lateral movement detection and forensic artifact discovery in Windows environments via SMB.", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7c8721feca2", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-08T19:38:32Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "rasta-mouse/offensive-defence", "name": "offensive-defence", "owner": "rasta-mouse", "url": "https://github.com/rasta-mouse/offensive-defence", "stars": 14, "language": "HTML", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9e603a6a4ffb", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-04T15:04:49Z", "archived": false, "topContributors": [ { "login": "rasta-mouse", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "cybercdh/nsfckup", "name": "nsfckup", "owner": "cybercdh", "url": "https://github.com/cybercdh/nsfckup", "stars": 14, "language": "Go", "description": "Looks for NameServers which return an NXDOMAIN, which may indicate a NS Takeover opportunity.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Colin Hardy", "cardId": "ccdc709645f1cba2", "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "84e31651644e", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-09T10:48:21Z", "archived": false, "topContributors": [ { "login": "cybercdh", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/28766703?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/upfuzz", "name": "upfuzz", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/upfuzz", "stars": 14, "language": "Python", "description": "The Ultimate File Upload Bypass Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc6972a4bb5e", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-24T11:07:48Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/pyexec", "name": "pyexec", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/PyExec", "stars": 13, "language": "Python", "description": "This is a very simple privilege escalation technique, from admin to System. This is the same technique PSExec uses.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "104344295892", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-11T13:56:04Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "logangoins/logansbestfriend", "name": "logansbestfriend", "owner": "logangoins", "url": "https://github.com/logangoins/LogansBestFriend", "stars": 13, "language": "C++", "description": "Customized Shellcode loader which bypasses AV/EDR sandbox detections and decrypts shellcode in memory.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan Goins", "cardId": "782d09e8503f156c", "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ad46789d5650", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-09T16:37:08Z", "archived": false, "topContributors": [ { "login": "logangoins", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/55106700?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/cve-2022-1388", "name": "cve-2022-1388", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/CVE-2022-1388", "stars": 13, "language": "Java", "description": "F5 BIG-IP iControl REST vulnerability RCE exploit with Java including a testing LAB", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7b3d7d596ee", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2023-05-11T02:55:01Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" }, { "login": "Morad021", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33380864?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "r3mrum/loki-parse", "name": "loki-parse", "owner": "r3mrum", "url": "https://github.com/R3MRUM/loki-parse", "stars": 13, "language": "Python", "description": "A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrat", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xdf", "cardId": "ea128cfbebd57ab0", "avatar": "https://avatars.githubusercontent.com/u/20097019?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7905909abe07", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-31T12:30:25Z", "archived": false, "topContributors": [ { "login": "R3MRUM", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/20097019?v=4", "type": "User" } ] }, { "repo": "viralmaniar/pentest-stuff", "name": "pentest-stuff", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Pentest-Stuff", "stars": 12, "language": "DIGITAL Command Language", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c49513381822", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-06-10T11:59:38Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 561, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cox", "name": "cox", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/cox", "stars": 12, "language": "Go", "description": "Cox is bluemonday-wrapper to perform a deep-clean and/or sanitization of (nested-)interfaces from HTML to prevent XSS payloads.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b03167d55221", "score": 27, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-29T03:25:24Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "wpscanteam/wpscan", "name": "wpscan", "owner": "wpscanteam", "url": "https://github.com/wpscanteam/wpscan", "stars": 9685, "language": "Ruby", "description": "WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com", "type": "tool", "lanes": [ "1" ], "author": { "name": "wpscanteam", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2020/06/30/htb-blocky.html", "title": "HTB: Blocky", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2025/05/03/htb-bigbang.html", "title": "HTB: BigBang", "person": "0xdf" } ], "referencedCount": 2, "id": "8ab2ad208161", "score": 26, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 3, "contributorCount": 56, "contributors": [ { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" }, { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Anant Shrivastava", "cardId": "e3f7c3ceed1b9c92", "avatar": "https://avatars.githubusercontent.com/u/236843?v=4", "login": "anantshri" } ], "pushedAt": "2026-07-17T14:23:40Z", "archived": false, "topContributors": [ { "login": "erwanlr", "c": 1444, "avatar": "https://avatars.githubusercontent.com/u/1668843?v=4", "type": "User" }, { "login": "firefart", "c": 604, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "pvdl", "c": 451, "avatar": "https://avatars.githubusercontent.com/u/1476340?v=4", "type": "User" }, { "login": "ethicalhack3r", "c": 436, "avatar": "https://avatars.githubusercontent.com/u/323113?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 82, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "g0tmi1k", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/535942?v=4", "type": "User" }, { "login": "ArSn", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/2803693?v=4", "type": "User" }, { "login": "fgeek", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/286959?v=4", "type": "User" }, { "login": "Initsogar", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/1488641?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 41, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "gbrindisi", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/287126?v=4", "type": "User" }, { "login": "alexsanford", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/842193?v=4", "type": "User" }, { "login": "cervoise", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/2786879?v=4", "type": "User" }, { "login": "dctabuyz", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/297016?v=4", "type": "User" }, { "login": "dependabot-support", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/112581971?v=4", "type": "User" }, { "login": "SamJoan", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/152786?v=4", "type": "User" }, { "login": "adegol", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5354323?v=4", "type": "User" }, { "login": "mrnfrancesco", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8071136?v=4", "type": "User" }, { "login": "dkmyta", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/43220201?v=4", "type": "User" }, { "login": "mostafahussein", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4104127?v=4", "type": "User" }, { "login": "tennc", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/670357?v=4", "type": "User" }, { "login": "miguelxpn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12788275?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "CharlieEriksen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1864062?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "0n1shi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/41312202?v=4", "type": "User" }, { "login": "soullivaneuh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1698357?v=4", "type": "User" }, { "login": "lp1tek", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12143020?v=4", "type": "User" }, { "login": "Pablohn26", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1228418?v=4", "type": "User" }, { "login": "petercunha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10228811?v=4", "type": "User" } ] }, { "repo": "ant4g0nist/chiefwiggum", "name": "chiefwiggum", "owner": "ant4g0nist", "url": "https://github.com/ant4g0nist/ChiefWiggum", "stars": 9, "language": "Shell", "description": "A Ralph Wiggum-style Claude Code plugin for iterative vulnerability hunting...", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Chaitanya", "cardId": "d8b582b72c0b2839", "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4" }, "referencedBy": [ { "url": "https://fuzzing.science/babysitting-an-army-of-monkeys-2-planet-of-the-agents/", "title": "Babysitting an Army of Monkeys 2: Planet of the Agents :: fuzzing.science", "person": "Chaitanya" } ], "referencedCount": 1, "id": "9cd4982d082f", "score": 26, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-20T16:41:48Z", "archived": false, "topContributors": [ { "login": "ant4g0nist", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3500559?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/vulnx", "name": "vulnx", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/vulnx", "id": "1ef6ff248e83", "stars": 2594, "language": "Go", "description": "Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.", "type": "tool", "pushedAt": "2026-07-13T11:23:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "dependabot[bot]", "c": 543, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "ehsandeep", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "mirackayikci", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/134744464?v=4", "type": "User" }, { "login": "Mzack9999", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "XananasX7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/266362468?v=4", "type": "User" }, { "login": "tarunKoyalwar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45962551?v=4", "type": "User" } ] }, { "repo": "x90skysn3k/brutespray", "name": "brutespray", "owner": "x90skysn3k", "url": "https://github.com/x90skysn3k/brutespray", "stars": 2505, "language": "Go", "description": "Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.", "type": "tool", "lanes": [ "2" ], "author": { "name": "x90sky", "cardId": "806ba40e989ce0b0", "avatar": "https://avatars.githubusercontent.com/u/22178125?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ffe700c6013f", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 11, "contributors": [], "pushedAt": "2026-07-08T22:31:18Z", "archived": false, "topContributors": [ { "login": "x90skysn3k", "c": 556, "avatar": "https://avatars.githubusercontent.com/u/22178125?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 109, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "jrobles-r7", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/23102036?v=4", "type": "User" }, { "login": "canyon289", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7213793?v=4", "type": "User" }, { "login": "TonySD", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/46606485?v=4", "type": "User" }, { "login": "tbalz2319", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4983949?v=4", "type": "User" }, { "login": "coreb1t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17534023?v=4", "type": "User" }, { "login": "droberson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5570998?v=4", "type": "User" }, { "login": "belane", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17031267?v=4", "type": "User" }, { "login": "dimonh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40325831?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" } ] }, { "repo": "th3xace/sudo_killer", "name": "sudo_killer", "owner": "th3xace", "url": "https://github.com/TH3xACE/SUDO_KILLER", "stars": 2473, "language": "Shell", "description": "A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges ", "type": "tool", "lanes": [ "2" ], "author": { "name": "David B.", "cardId": "03d8b7e3e9fc8e79", "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d1888778a775", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-03-11T14:40:44Z", "archived": false, "topContributors": [ { "login": "TH3xACE", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4", "type": "User" }, { "login": "MALtUNEsmu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/139252220?v=4", "type": "User" } ] }, { "repo": "hasherezade/hollows_hunter", "name": "hollows_hunter", "owner": "hasherezade", "url": "https://github.com/hasherezade/hollows_hunter", "id": "7cccd0c4c571", "stars": 2382, "language": "C", "description": "Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).", "type": "tool", "pushedAt": "2026-06-06T12:47:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "hasherezade", "c": 803, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "cccs-mog", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/117194682?v=4", "type": "User" }, { "login": "hippocache", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/123289438?v=4", "type": "User" } ] }, { "repo": "s0md3v/striker", "name": "striker", "owner": "s0md3v", "url": "https://github.com/s0md3v/Striker", "stars": 2340, "language": "Python", "description": "Striker is an offensive information and vulnerability scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d00cc8a2e93", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 9, "contributors": [], "pushedAt": "2023-06-04T20:15:11Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "tbhaxor", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/28386721?v=4", "type": "User" }, { "login": "GrenderG", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8654362?v=4", "type": "User" }, { "login": "vreus", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/35178565?v=4", "type": "User" }, { "login": "hougomartim", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/23585479?v=4", "type": "User" }, { "login": "benmezger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/915606?v=4", "type": "User" }, { "login": "kesara", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1027692?v=4", "type": "User" }, { "login": "yasoob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3696393?v=4", "type": "User" } ] }, { "repo": "bartblaze/php-backdoors", "name": "PHP-backdoors", "owner": "bartblaze", "url": "https://github.com/bartblaze/PHP-backdoors", "id": "e20f8e6c4c1f", "stars": 2271, "language": "PHP", "description": "A collection of PHP backdoors. For educational or testing purposes only.", "type": "tool", "pushedAt": "2024-03-09T18:03:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Bart", "cardId": "9b82391c60e5a30e", "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "bartblaze", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4", "type": "User" }, { "login": "muratyilmazlar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/148436911?v=4", "type": "User" }, { "login": "fabacab", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18677?v=4", "type": "User" }, { "login": "nicoder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/365210?v=4", "type": "User" } ] }, { "repo": "codingo/reconnoitre", "name": "Reconnoitre", "owner": "codingo", "url": "https://github.com/codingo/Reconnoitre", "id": "40b58e37f066", "stars": 2194, "language": "Python", "description": "A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.", "type": "tool", "pushedAt": "2022-12-11T16:37:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 29, "topContributors": [ { "login": "codingo", "c": 190, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "evcsec", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/11158956?v=4", "type": "User" }, { "login": "cwaazywabbit", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6714156?v=4", "type": "User" }, { "login": "CrimsonK1ng", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6556728?v=4", "type": "User" }, { "login": "BikeMaker", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10536444?v=4", "type": "User" }, { "login": "szabopeter", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1254135?v=4", "type": "User" }, { "login": "neutrinoguy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22230280?v=4", "type": "User" }, { "login": "bcoles", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "shoebpate1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20478531?v=4", "type": "User" }, { "login": "monkeysm8", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19281075?v=4", "type": "User" }, { "login": "tonydelanuez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17029312?v=4", "type": "User" }, { "login": "vdvcoder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13916116?v=4", "type": "User" }, { "login": "Radmang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19223915?v=4", "type": "User" }, { "login": "spinkham", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29718?v=4", "type": "User" }, { "login": "timkent", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2264795?v=4", "type": "User" }, { "login": "tlavoie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/428143?v=4", "type": "User" }, { "login": "br-sn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39455110?v=4", "type": "User" }, { "login": "bulbafett", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39497402?v=4", "type": "User" }, { "login": "sajkog", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4310457?v=4", "type": "User" }, { "login": "umutbasal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21194079?v=4", "type": "User" }, { "login": "mattreduce", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66427?v=4", "type": "User" }, { "login": "martinbydefault", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25038813?v=4", "type": "User" }, { "login": "jakob-pennington", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21337744?v=4", "type": "User" }, { "login": "hamidzr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12127420?v=4", "type": "User" }, { "login": "Edu4rdSHL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32582878?v=4", "type": "User" }, { "login": "dgisser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3213296?v=4", "type": "User" }, { "login": "Daviey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/178214?v=4", "type": "User" }, { "login": "pax0r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1170098?v=4", "type": "User" }, { "login": "koyaan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1486772?v=4", "type": "User" } ] }, { "repo": "defparam/smuggler", "name": "smuggler", "owner": "defparam", "url": "https://github.com/defparam/smuggler", "id": "82ecf617e227", "stars": 2088, "language": "Python", "description": "Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3", "type": "tool", "pushedAt": "2024-01-02T12:46:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Evan Custodio", "cardId": "83d3c70e2b0c9046", "avatar": "https://avatars.githubusercontent.com/u/6956742?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" } ], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "defparam", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/6956742?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "davidwebster48", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/510706?v=4", "type": "User" }, { "login": "engn33r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6261182?v=4", "type": "User" }, { "login": "melardev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18094815?v=4", "type": "User" } ] }, { "repo": "hasherezade/malware_training_vol1", "name": "malware_training_vol1", "owner": "hasherezade", "url": "https://github.com/hasherezade/malware_training_vol1", "stars": 2081, "language": "Assembly", "description": "Materials for Windows Malware Analysis training (volume 1)", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e90599477965", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-07-01T21:59:06Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 105, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "abhaynayar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7112131?v=4", "type": "User" } ] }, { "repo": "s0md3v/recondog", "name": "ReconDog", "owner": "s0md3v", "url": "https://github.com/s0md3v/ReconDog", "id": "c331db18e2aa", "stars": 2078, "language": "Python", "description": "Reconnaissance Swiss Army Knife", "type": "tool", "pushedAt": "2021-01-26T05:17:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "s0md3v", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "rrampage", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1277046?v=4", "type": "User" }, { "login": "Pyvonix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18658299?v=4", "type": "User" }, { "login": "ssnkhan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11506722?v=4", "type": "User" }, { "login": "m0n4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29152432?v=4", "type": "User" } ] }, { "repo": "six2dez/pentest-book", "name": "pentest-book", "owner": "six2dez", "url": "https://github.com/six2dez/pentest-book", "stars": 2064, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6abde0c26bb0", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [ { "name": "Pugalarasan", "cardId": "697fe36354f625da", "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "login": "0xPugal" }, { "name": "Toni de la Fuente", "cardId": "e540dfcd97c39db6", "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4", "login": "toniblyx" } ], "pushedAt": "2026-06-02T10:53:15Z", "archived": false, "topContributors": [ { "login": "six2dez", "c": 982, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "0xPugal", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "type": "User" }, { "login": "toniblyx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3985464?v=4", "type": "User" }, { "login": "righteousgambit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35244835?v=4", "type": "User" }, { "login": "gitbook-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31919211?v=4", "type": "User" }, { "login": "m10x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4344935?v=4", "type": "User" }, { "login": "socketz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/638274?v=4", "type": "User" }, { "login": "Script-Nomad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23002141?v=4", "type": "User" } ] }, { "repo": "justasmasiulis/lazy_importer", "name": "lazy_importer", "owner": "JustasMasiulis", "url": "https://github.com/JustasMasiulis/lazy_importer", "id": "1e17edfecb52", "stars": 1922, "language": "C++", "description": "library for importing functions from dlls in a hidden, reverse engineer unfriendly way", "type": "tool", "pushedAt": "2023-08-03T01:51:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Justas Masiulis", "cardId": "c563168e0703622b", "avatar": "https://avatars.githubusercontent.com/u/16763439?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "JustasMasiulis", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/16763439?v=4", "type": "User" }, { "login": "hzqst", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12287588?v=4", "type": "User" }, { "login": "namazso", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8676443?v=4", "type": "User" }, { "login": "aleks-s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/42058587?v=4", "type": "User" }, { "login": "DenisM3lo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83792925?v=4", "type": "User" }, { "login": "arnerak", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29173710?v=4", "type": "User" } ] }, { "repo": "vxunderground/vx-api", "name": "vx-api", "owner": "vxunderground", "url": "https://github.com/vxunderground/VX-API", "stars": 1918, "language": "C++", "description": "Collection of various malicious functionality to aid in malware development", "type": "tool", "lanes": [ "2" ], "author": { "name": "vx-underground", "cardId": "a93d10c655fc2e88", "avatar": "https://avatars.githubusercontent.com/u/57078196?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "79a270f5000c", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [ { "name": "rad98", "cardId": "861874dfcaadbaaf", "avatar": "https://avatars.githubusercontent.com/u/105589633?v=4", "login": "rad9800" }, { "name": "3xp0rt", "cardId": "52e97a4643b9a77e", "avatar": "https://avatars.githubusercontent.com/u/61662492?v=4", "login": "3xp0rt" } ], "pushedAt": "2024-02-28T01:30:29Z", "archived": false, "topContributors": [ { "login": "vxunderground", "c": 300, "avatar": "https://avatars.githubusercontent.com/u/57078196?v=4", "type": "User" }, { "login": "RistBS", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/75935486?v=4", "type": "User" }, { "login": "rad9800", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/105589633?v=4", "type": "User" }, { "login": "aimarket", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32007930?v=4", "type": "User" }, { "login": "jabra-", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/585965?v=4", "type": "User" }, { "login": "3xp0rt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61662492?v=4", "type": "User" }, { "login": "mekhalleh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5225129?v=4", "type": "User" }, { "login": "ZeroMemoryEx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60795188?v=4", "type": "User" } ] }, { "repo": "taksec/google-dorks-bug-bounty", "name": "google-dorks-bug-bounty", "owner": "TakSec", "url": "https://github.com/TakSec/google-dorks-bug-bounty", "id": "af7614dbdf51", "stars": 1883, "language": null, "description": "A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting", "type": "tool", "pushedAt": "2025-09-29T15:55:04Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mike Takahashi", "cardId": "6b4cebd7323e9607", "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "TakSec", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4", "type": "User" }, { "login": "root-Manas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97402139?v=4", "type": "User" } ] }, { "repo": "outflanknl/dumpert", "name": "Dumpert", "owner": "outflanknl", "url": "https://github.com/outflanknl/Dumpert", "id": "90e090d08261", "stars": 1589, "language": "C", "description": "LSASS memory dumper using direct system calls and API unhooking.", "type": "tool", "pushedAt": "2021-01-05T08:58:26Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "outflanknl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 3, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cn33liz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" }, { "login": "stanhegt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "trustedsec/titanis", "name": "Titanis", "owner": "trustedsec", "url": "https://github.com/trustedsec/Titanis", "id": "03909208f615", "stars": 805, "language": "C#", "description": "Windows protocol library, including SMB and RPC implementations, among others.", "type": "tool", "pushedAt": "2026-07-14T03:00:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "codewhisperer84", "c": 355, "avatar": "https://avatars.githubusercontent.com/u/12244296?v=4", "type": "User" }, { "login": "freefirex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "moscowchill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72578879?v=4", "type": "User" } ] }, { "repo": "trustedsec/spoonmap", "name": "spoonmap", "owner": "trustedsec", "url": "https://github.com/trustedsec/spoonmap", "id": "2e12d31d832d", "stars": 174, "language": "Python", "description": "", "type": "tool", "pushedAt": "2026-07-17T20:13:01Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" } ], "adoptionOperators": 3, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "Spoonman1091", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1806514?v=4", "type": "User" }, { "login": "bandrel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "h888t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39666810?v=4", "type": "User" }, { "login": "evilmog", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3283026?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" }, { "login": "mandreko-ts", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45574076?v=4", "type": "User" }, { "login": "raul5660", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6777371?v=4", "type": "User" } ] }, { "repo": "monnappa22/garuda-framework", "name": "garuda-framework", "owner": "monnappa22", "url": "https://github.com/monnappa22/Garuda-framework", "stars": 56, "language": "PowerShell", "description": "A comprehensive PowerShell-based threat hunting and incident response framework for Windows environments, built around Sysmon event analysis and forensic investigation capabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Monnappa K A", "cardId": "84d6c131cbfde4cc", "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "95c27e80d684", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-17T11:10:23Z", "archived": false, "topContributors": [ { "login": "monnappa22", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4258221?v=4", "type": "User" } ] }, { "repo": "myrtus0x0/smat", "name": "smat", "owner": "myrtus0x0", "url": "https://github.com/myrtus0x0/SMAT", "stars": 56, "language": "Go", "description": "Standardized Malware Analysis Tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pim Trouerbach", "cardId": "9dfd42770310939f", "avatar": "https://avatars.githubusercontent.com/u/48422337?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a321f95e40fa", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-03-09T15:29:57Z", "archived": false, "topContributors": [ { "login": "myrtus0x0", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/48422337?v=4", "type": "User" }, { "login": "wikijm", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10724809?v=4", "type": "User" } ] }, { "repo": "jstrosch/subparse", "name": "subparse", "owner": "jstrosch", "url": "https://github.com/jstrosch/subparse", "stars": 56, "language": "Python", "description": "Modular malware analysis artifact collection and correlation framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Stroschein", "cardId": "ca3f07d87861323c", "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "afb539e32d50", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-04-23T21:40:21Z", "archived": false, "topContributors": [ { "login": "abaker2010", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7686813?v=4", "type": "User" }, { "login": "jstrosch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4", "type": "User" } ] }, { "repo": "pcabreracamara/dc27", "name": "dc27", "owner": "pcabreracamara", "url": "https://github.com/pcabreracamara/DC27", "stars": 56, "language": "C", "description": "Defcon 27 \"SDR Against Smart TVs: URL and Channel Injection Attacks\" presentation repo", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pedro Cabrera", "cardId": "d10d39d62dc427ad", "avatar": "https://avatars.githubusercontent.com/u/8314063?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bad957812795", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-08-25T16:00:59Z", "archived": false, "topContributors": [ { "login": "pcabreracamara", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8314063?v=4", "type": "User" } ] }, { "repo": "richinseattle/haze-tinyinst", "name": "haze-tinyinst", "owner": "richinseattle", "url": "https://github.com/richinseattle/haze-tinyinst", "id": "01b741c2cadd", "stars": 56, "language": "C++", "description": "haze binary fuzzer", "type": "tool", "pushedAt": "2024-05-19T02:34:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Richard Johnson", "cardId": "a7d0f673a8dedab1", "avatar": "https://avatars.githubusercontent.com/u/1887673?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "richinseattle", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/1887673?v=4", "type": "User" } ] }, { "repo": "jofpin/fuckshell", "name": "fuckshell", "owner": "jofpin", "url": "https://github.com/jofpin/fuckshell", "stars": 55, "language": "Python", "description": "Simple Webshell Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6514d3f923d1", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-01-11T15:32:48Z", "archived": false, "topContributors": [ { "login": "trollker", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/10320161?v=4", "type": "User" } ] }, { "repo": "kbroughton/azure_cis_scanner", "name": "azure_cis_scanner", "owner": "kbroughton", "url": "https://github.com/kbroughton/azure_cis_scanner", "stars": 54, "language": "Jupyter Notebook", "description": "Security Scanner based on CIS benchmark 1.1 inspired by Scout2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kesten Broughton", "cardId": "0474acc1925f781b", "avatar": "https://avatars.githubusercontent.com/u/10562482?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df96e1bc516b", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2023-02-15T20:44:51Z", "archived": false, "topContributors": [ { "login": "kbroughton", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10562482?v=4", "type": "User" }, { "login": "praetorian-tanner-harper", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45573289?v=4", "type": "User" }, { "login": "tannerjh5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14002674?v=4", "type": "User" } ] }, { "repo": "aaaddress1/shelldev.py", "name": "shelldev.py", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/shellDev.py", "stars": 54, "language": "Python", "description": "tool for building windows shellcode in C by MinGW", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fba72a139c00", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-21T04:45:15Z", "archived": false, "topContributors": [ { "login": "aaaddress1", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "yossisassi/hacktive-directory-forensics", "name": "hAcKtive-Directory-Forensics", "owner": "YossiSassi", "url": "https://github.com/YossiSassi/hAcKtive-Directory-Forensics", "id": "5a686704994f", "stars": 54, "language": null, "description": "", "type": "tool", "pushedAt": "2026-03-19T21:23:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "YossiSassi", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "hackvertor/visualfuzzer", "name": "visualfuzzer", "owner": "hackvertor", "url": "https://github.com/hackvertor/visualfuzzer", "id": "86c76204aa95", "stars": 53, "language": "JavaScript", "description": "A visual fuzzer written in NodeJS to find Zalgo characters", "type": "tool", "pushedAt": "2018-03-08T09:06:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Gareth Heyes", "cardId": "0c8f7458f3455124", "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "gareth-swigger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202628051?v=4", "type": "User" }, { "login": "hackvertor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4", "type": "User" } ] }, { "repo": "jduck/privmap", "name": "privmap", "owner": "jduck", "url": "https://github.com/jduck/privmap", "id": "f5179276cdfe", "stars": 53, "language": "C", "description": "A tool for enumerating the effective privileges of processes on an Android device.", "type": "tool", "pushedAt": "2014-05-01T18:33:11Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jduck", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" }, { "login": "strazzere", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/623686?v=4", "type": "User" } ] }, { "repo": "bert-janp/domain-response", "name": "Domain-Response", "owner": "Bert-JanP", "url": "https://github.com/Bert-JanP/Domain-Response", "id": "f6332d6d4464", "stars": 53, "language": "Python", "description": "Domain Response is a tool that is designed to help you automate the investigation for a domain. This tool is specificly designed to automated phishing domain investigations. However it can be used for", "type": "tool", "pushedAt": "2026-01-01T13:40:09Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Bert-Jan", "cardId": "e1f38ecc5b81613f", "avatar": "https://avatars.githubusercontent.com/u/91258706?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Bert-JanP", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/91258706?v=4", "type": "User" }, { "login": "j3br", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11167461?v=4", "type": "User" } ] }, { "repo": "danmcinerney/invoke-cats", "name": "invoke-cats", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/Invoke-Cats", "stars": 52, "language": "PowerShell", "description": "Obfuscated Invoke-Mimikatz", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a9beb08839d6", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-10-23T21:07:17Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "gannimo/maldiv", "name": "maldiv", "owner": "gannimo", "url": "https://github.com/gannimo/MalDiv", "stars": 51, "language": "TeX", "description": "Malware diversity", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mathias Payer", "cardId": "4049133a56e8498a", "avatar": "https://avatars.githubusercontent.com/u/2371964?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e5da8fa89e1a", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-12-02T18:20:09Z", "archived": false, "topContributors": [ { "login": "gannimo", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/2371964?v=4", "type": "User" } ] }, { "repo": "adulau/hashlookup-server", "name": "hashlookup-server", "owner": "adulau", "url": "https://github.com/adulau/hashlookup-server", "stars": 51, "language": "Python", "description": "Fast lookup server for NSRL and other hash database used in digital forensic", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre Dulaunoy", "cardId": "ce61bec31cf8c835", "avatar": "https://avatars.githubusercontent.com/u/3309?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aa8a3b543ecc", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "William Robinet", "cardId": "33eb26fbee5360ef", "avatar": "https://avatars.githubusercontent.com/u/11647900?v=4", "login": "wllm-rbnt" } ], "pushedAt": null, "topContributors": [ { "login": "adulau", "c": 65, "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "type": "User" }, { "login": "cudeso", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/256028?v=4", "type": "User" }, { "login": "juris-greitans", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24548826?v=4", "type": "User" }, { "login": "gallypette", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/329725?v=4", "type": "User" }, { "login": "wllm-rbnt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11647900?v=4", "type": "User" } ] }, { "repo": "jprx/cve-2024-27815", "name": "cve-2024-27815", "owner": "jprx", "url": "https://github.com/jprx/CVE-2024-27815", "stars": 51, "language": "C", "description": "macOS/ XNU kernel buffer overflow. Introduced in macOS 14.0 (xnu-10002.1.13), fixed in macOS 14.5 (xnu-10063.121.3)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joseph Ravichandran", "cardId": "ecea8f6ea1f778c2", "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09d3ce4f1978", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-18T15:45:15Z", "archived": false, "topContributors": [ { "login": "jprx", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4", "type": "User" } ] }, { "repo": "torque59/aws-vulnerable-lambda", "name": "AWS-Vulnerable-Lambda", "owner": "torque59", "url": "https://github.com/torque59/AWS-Vulnerable-Lambda", "id": "ab15f34e355b", "stars": 51, "language": "HTML", "description": "An AWS Lambda vulnerable application written in flask.", "type": "tool", "pushedAt": "2017-10-09T09:20:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Francis Alexander", "cardId": "375485c48c91ac12", "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "torque59", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/6204290?v=4", "type": "User" } ] }, { "repo": "huku-/injectdso", "name": "injectdso", "owner": "huku-", "url": "https://github.com/huku-/injectdso", "id": "8c4e4773541e", "stars": 51, "language": "C", "description": "A collection of tools for injecting DSOs in processes under various operating systems", "type": "tool", "pushedAt": "2022-10-06T13:20:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chariton Karamitas", "cardId": "98c33253971ba2d3", "avatar": "https://avatars.githubusercontent.com/u/8372148?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "huku-", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/8372148?v=4", "type": "User" }, { "login": "anonymouz4", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32394757?v=4", "type": "User" } ] }, { "repo": "mvelazc0/purplespray", "name": "PurpleSpray", "owner": "mvelazc0", "url": "https://github.com/mvelazc0/PurpleSpray", "id": "d8c8317809c1", "stars": 51, "language": "Python", "description": "PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpose of generating attack telemetry in properly monitored Windows", "type": "tool", "pushedAt": "2019-08-15T03:09:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mauricio Velazco", "cardId": "aef4319d82bcb778", "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mvelazc0", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4", "type": "User" }, { "login": "xShuden", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3766764?v=4", "type": "User" } ] }, { "repo": "danmcinerney/smb-reverse-brute", "name": "SMB-reverse-brute", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/SMB-reverse-brute", "id": "b08beabc235a", "stars": 51, "language": "Python", "description": "Async'ly gather unique usernames thru null SMB sessions and bruteforce them with 2 passwords", "type": "tool", "pushedAt": "2017-10-24T03:11:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "jprx/cve-2025-24118", "name": "cve-2025-24118", "owner": "jprx", "url": "https://github.com/jprx/CVE-2025-24118", "stars": 50, "language": "C", "description": "An XNU kernel race condition bug", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joseph Ravichandran", "cardId": "ecea8f6ea1f778c2", "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0dab9897cda4", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-30T00:15:56Z", "archived": false, "topContributors": [ { "login": "jprx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4", "type": "User" } ] }, { "repo": "samyk/bgrid", "name": "bgrid", "owner": "samyk", "url": "https://github.com/samyk/bgrid", "stars": 49, "language": "C++", "description": "wireless balloon LED network w/ATtiny24 + nRF24L01+ (PCB + firmware + TouchDesigner)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samy Kamkar", "cardId": "4ce772bcaaa08c07", "avatar": "https://avatars.githubusercontent.com/u/411832?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a19e275a80d1", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-07-31T03:34:20Z", "archived": false, "topContributors": [ { "login": "samyk", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/411832?v=4", "type": "User" }, { "login": "dylancaponi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7399067?v=4", "type": "User" } ] }, { "repo": "ald3ns/copy-as-yara", "name": "copy-as-yara", "owner": "ald3ns", "url": "https://github.com/ald3ns/copy-as-yara", "id": "b814ab401a8f", "stars": 48, "language": "Python", "description": "This is a little plugin to copy disassembly in a way that is usable in YARA rules!", "type": "tool", "pushedAt": "2025-04-14T18:53:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alden Schmidt", "cardId": "561e312abc707a44", "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ald3ns", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4", "type": "User" } ] }, { "repo": "evanmcbroom/pocs", "name": "pocs", "owner": "evanmcbroom", "url": "https://github.com/EvanMcBroom/pocs", "stars": 47, "language": "C++", "description": "My Proof of Concept code for different publicly disclosed vulnerabilities", "type": "tool", "lanes": [ "2" ], "author": { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c3d51fb10518", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-15T21:31:49Z", "archived": false, "topContributors": [ { "login": "EvanMcBroom", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" } ] }, { "repo": "0x09al/azurecli-extractor", "name": "AzureCLI-Extractor", "owner": "0x09AL", "url": "https://github.com/0x09AL/AzureCLI-Extractor", "id": "a12e4a71d609", "stars": 47, "language": "C#", "description": "A tool to extract and abuse access tokens from AzureCLI for bypassing 2FA/MFA.", "type": "tool", "pushedAt": "2020-02-15T17:52:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x09AL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "aaaddress1/xlskami", "name": "xlsKami", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/xlsKami", "id": "41b71fb4333a", "stars": 47, "language": "C#", "description": "Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets", "type": "tool", "pushedAt": "2021-08-04T17:27:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "aaaddress1", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "fr0gger/malwaremuncher", "name": "malwaremuncher", "owner": "fr0gger", "url": "https://github.com/fr0gger/MalwareMuncher", "stars": 46, "language": "JavaScript", "description": "Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enabling users to conduct malware analysis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Thomas Roccia 🤘", "cardId": "04e1486a92fb1587", "avatar": "https://avatars.githubusercontent.com/u/6546250?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8d0b8c3e3464", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-24T03:08:54Z", "archived": false, "topContributors": [ { "login": "fr0gger", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/6546250?v=4", "type": "User" } ] }, { "repo": "vanhoefm/wifi-injection", "name": "wifi-injection", "owner": "vanhoefm", "url": "https://github.com/vanhoefm/wifi-injection", "stars": 46, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mathy Vanhoef", "cardId": "502b97785f3c5b6d", "avatar": "https://avatars.githubusercontent.com/u/637995?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f35df1de9cd3", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-09T00:40:19Z", "archived": false, "topContributors": [ { "login": "vanhoefm", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/637995?v=4", "type": "User" } ] }, { "repo": "mubix/find-wsus", "name": "find-wsus", "owner": "mubix", "url": "https://github.com/mubix/Find-WSUS", "stars": 46, "language": "PowerShell", "description": "Helps defenders find their WSUS configurations in the wake of CVE-2025-59287", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "380618af9b08", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-28T15:07:10Z", "archived": false, "topContributors": [ { "login": "mubix", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" } ] }, { "repo": "jovanbulck/0xbadc0de", "name": "0xbadc0de", "owner": "jovanbulck", "url": "https://github.com/jovanbulck/0xbadc0de", "id": "0469b0aea40f", "stars": 46, "language": "C", "description": "A Tale of Two Worlds: Assessing the Vulnerability of Enclave Shielding Runtimes", "type": "tool", "pushedAt": "2023-09-02T12:17:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jo Van Bulck", "cardId": "e64c3f3b8e5d2198", "avatar": "https://avatars.githubusercontent.com/u/2464627?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jovanbulck", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2464627?v=4", "type": "User" } ] }, { "repo": "gynvael/asmloader", "name": "asmloader", "owner": "gynvael", "url": "https://github.com/gynvael/asmloader", "stars": 45, "language": "C", "description": "Simplified Assembly Loader - a small tool to run (headerless) machine code.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gynvael Coldwind", "cardId": "070706d3a8e26c1d", "avatar": "https://avatars.githubusercontent.com/u/1008844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e6b7a4a6df4", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2017-04-16T10:07:42Z", "archived": false, "topContributors": [ { "login": "gynvael", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1008844?v=4", "type": "User" }, { "login": "nazriel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1022850?v=4", "type": "User" } ] }, { "repo": "bitdefender/malware-ioc", "name": "malware-ioc", "owner": "bitdefender", "url": "https://github.com/bitdefender/malware-ioc", "stars": 45, "language": null, "description": "Indicators of Compromise for malware documented in whitepapers.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "022253a0dea5", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-13T10:40:50Z", "archived": false, "topContributors": [ { "login": "bd-mzugec", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/229125090?v=4", "type": "User" }, { "login": "bogdanbotezatu", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/25639085?v=4", "type": "User" } ] }, { "repo": "leo4j/shellgen", "name": "shellgen", "owner": "leo4j", "url": "https://github.com/Leo4j/ShellGen", "stars": 45, "language": "PowerShell", "description": "PowerShell script to generate ShellCode in various formats", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e10b7e1b488d", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-25T09:29:13Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "chapinb/foroboto", "name": "foroboto", "owner": "chapinb", "url": "https://github.com/chapinb/foroboto", "id": "e64ba638a2aa", "stars": 45, "language": "Shell", "description": "ADB Based Acquisition Tool for Android Forensics", "type": "tool", "pushedAt": "2021-03-30T11:40:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Chapin Bryce", "cardId": "6b37e90f806fe4e4", "avatar": "https://avatars.githubusercontent.com/u/7152035?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "chapinb", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/7152035?v=4", "type": "User" } ] }, { "repo": "carlospolop/bruteforce-gcp-permissions", "name": "Bruteforce-GCP-Permissions", "owner": "carlospolop", "url": "https://github.com/carlospolop/Bruteforce-GCP-Permissions", "id": "e0f086f06fd3", "stars": 45, "language": "Python", "description": "Use the GCP testIamPermissions functionality to bruteforce and discover your permissions", "type": "tool", "pushedAt": "2025-06-22T21:30:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "carlospolop", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" } ] }, { "repo": "saelo/foxpwn", "name": "foxpwn", "owner": "saelo", "url": "https://github.com/saelo/foxpwn", "stars": 44, "language": "JavaScript", "description": "Exploit code for CVE-2016-9066", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "33936fd7b50a", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-03-19T17:37:18Z", "archived": false, "topContributors": [ { "login": "saelo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "aaaddress1/xlsgen", "name": "xlsgen", "owner": "aaaddress1", "url": "https://github.com/aaaddress1/xlsGen", "stars": 44, "language": "C#", "description": "(PoC) Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in xls files without Excel.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sheng-Hao Ma", "cardId": "9e372eda2900558f", "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a3fe7a67095c", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-01T16:09:51Z", "archived": false, "topContributors": [ { "login": "aaaddress1", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8559056?v=4", "type": "User" } ] }, { "repo": "matir/webborer", "name": "webborer", "owner": "Matir", "url": "https://github.com/Matir/webborer", "id": "983bf6701adf", "stars": 44, "language": "Go", "description": "WebBorer is a directory-enumeration tool written in Go.", "type": "tool", "pushedAt": "2023-03-07T01:06:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "David Tomaschik", "cardId": "5709420abaa7a297", "avatar": "https://avatars.githubusercontent.com/u/808960?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Matir", "c": 173, "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "type": "User" } ] }, { "repo": "jduck/vulnwebview", "name": "VulnWebView", "owner": "jduck", "url": "https://github.com/jduck/VulnWebView", "id": "4f58c78a4e30", "stars": 44, "language": "Java", "description": "", "type": "tool", "pushedAt": "2014-12-23T17:38:51Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jduck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" } ] }, { "repo": "jhaddix/devops-attack-surface", "name": "devops-attack-surface", "owner": "jhaddix", "url": "https://github.com/jhaddix/devops-attack-surface", "id": "b296029d91fd", "stars": 44, "language": "HTML", "description": "Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (FusionX)", "type": "tool", "pushedAt": "2025-10-08T16:14:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jason Haddix", "cardId": "f3f4293bba8a6ba6", "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "airb", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/13394561?v=4", "type": "User" } ] }, { "repo": "invictus-ir/kubeforensys", "name": "kubeforensys", "owner": "invictus-ir", "url": "https://github.com/invictus-ir/KubeForenSys", "stars": 43, "language": "Python", "description": "A Kubernetes Forensic Collection Framework for Azure Kubernetes Service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Korstiaan Stam", "cardId": "8dae1513142ed9db", "avatar": "https://avatars.githubusercontent.com/u/85489828?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d6f37973304", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-02-09T11:20:04Z", "archived": false, "topContributors": [ { "login": "florisvanstal", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/156823612?v=4", "type": "User" }, { "login": "invictus-korstiaan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21335149?v=4", "type": "User" }, { "login": "JoeyInvictus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/129975292?v=4", "type": "User" } ] }, { "repo": "rolfrolles/wbdeshook", "name": "wbdeshook", "owner": "rolfrolles", "url": "https://github.com/RolfRolles/wbDESHook", "stars": 43, "language": "C++", "description": "DLL-injection based solution to Brecht Wyseur's wbDES challenge (based on SysK's Phrack article)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rolf Rolles", "cardId": "c28c691cb82760e4", "avatar": "https://avatars.githubusercontent.com/u/680819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "48533ff62237", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-06T03:18:55Z", "archived": false, "topContributors": [ { "login": "RolfRolles", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/680819?v=4", "type": "User" } ] }, { "repo": "danmcinerney/autobloodhound", "name": "autobloodhound", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/Autobloodhound", "stars": 43, "language": "Python", "description": "Automatically parses and attacks BloodHound-generated graphs", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fa58ce2abbc5", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-07-16T01:21:20Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "lauriewired/smalireference", "name": "SmaliReference", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/SmaliReference", "id": "a66af7dbac14", "stars": 43, "language": null, "description": "Smali reference for reverse engineering Dalvik Bytecode", "type": "tool", "pushedAt": "2023-09-06T13:28:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "pventuzelo/fuzzing_browsers_wasm_js", "name": "fuzzing_browsers_wasm_js", "owner": "pventuzelo", "url": "https://github.com/pventuzelo/fuzzing_browsers_wasm_js", "id": "0b2d03c94969", "stars": 43, "language": "JavaScript", "description": "Fuzzing JavaScript WebAssembly APIs using Dharma/Domato (Chrome/v8, etc.)", "type": "tool", "pushedAt": "2022-02-08T00:17:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Patrick Ventuzelo", "cardId": "4367370f296417dc", "avatar": "https://avatars.githubusercontent.com/u/9038181?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "pventuzelo", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/9038181?v=4", "type": "User" } ] }, { "repo": "emptynebuli/dauthi", "name": "dauthi", "owner": "emptynebuli", "url": "https://github.com/emptynebuli/dauthi", "id": "a74fa43934b2", "stars": 43, "language": "Go", "description": "dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-factor authentication attacks. Additionally, the framework offers au", "type": "tool", "pushedAt": "2024-04-23T12:52:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Matt Burch", "cardId": "4b905177bfef1ea6", "avatar": "https://avatars.githubusercontent.com/u/126291254?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "emptynebuli", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/126291254?v=4", "type": "User" } ] }, { "repo": "danmcinerney/smb-autopwn", "name": "smb-autopwn", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/smb-autopwn", "id": "77cd6f9c83a8", "stars": 43, "language": "Python", "description": "Discovers and exploits hosts vulnerable to MS08-067/MS17-010", "type": "tool", "pushedAt": "2018-03-02T00:40:39Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "DanMcInerney", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "mgeeky/dirbuster", "name": "dirbuster", "owner": "mgeeky", "url": "https://github.com/mgeeky/dirbuster", "stars": 42, "language": "Shell", "description": "wfuzz, SecLists and john -based dirbusting / forceful browsing script intended to be used during web pentest assingments", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ea12f343f34", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 8, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-01T17:01:10Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "sethsec/nodejs-ssrf-app", "name": "nodejs-ssrf-app", "owner": "sethsec", "url": "https://github.com/sethsec/Nodejs-SSRF-App", "stars": 42, "language": "JavaScript", "description": "Nodejs application intentionally vulnerable to SSRF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ceed8b898b27", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-12T00:55:25Z", "archived": false, "topContributors": [ { "login": "sethsec", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/bootkits-rootkits-development-environment", "name": "bootkits-rootkits-development-environment", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Bootkits-Rootkits-Development-Environment", "stars": 42, "language": "PowerShell", "description": "Automated environment setup for Bootkit & Rootkit development.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "16daaa3321c8", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-10T07:02:13Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "johnhammond/cve-2012-2982", "name": "cve-2012-2982", "owner": "johnhammond", "url": "https://github.com/JohnHammond/CVE-2012-2982", "stars": 42, "language": "Python", "description": "A Python replicated exploit for Webmin 1.580 /file/show.cgi Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1344f292c47b", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-28T16:14:13Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "0xeb/ghidrasql", "name": "ghidrasql", "owner": "0xeb", "url": "https://github.com/0xeb/ghidrasql", "id": "c5306db7fcc3", "stars": 42, "language": "C++", "description": "SQL interface for Ghidra program databases — query functions, xrefs, types, decompilation with standard SQL", "type": "tool", "pushedAt": "2026-07-12T01:24:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Elias Bachaalany", "cardId": "1c0a3b497cd70526", "avatar": "https://avatars.githubusercontent.com/u/230851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "0xeb", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/230851?v=4", "type": "User" }, { "login": "notgriffin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/89459892?v=4", "type": "User" } ] }, { "repo": "david3107/squatm3", "name": "squatm3", "owner": "david3107", "url": "https://github.com/david3107/squatm3", "id": "c9422f2535b8", "stars": 42, "language": "Python", "description": "Squatm3 is a python tool designed to enumerate available domains generated modifying the original domain name through different techniques", "type": "tool", "pushedAt": "2025-12-11T10:46:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Davide Cioccia", "cardId": "c28aff3317432c34", "avatar": "https://avatars.githubusercontent.com/u/20040740?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "david3107", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/20040740?v=4", "type": "User" } ] }, { "repo": "rec0de/bytewitch", "name": "bytewitch", "owner": "rec0de", "url": "https://github.com/rec0de/bytewitch", "id": "32a6612c0380", "stars": 42, "language": "Kotlin", "description": "Instant, in-browser decoding of ProtoBuf, bplist, ASN.1, NSArchive, and OPACK payloads", "type": "tool", "pushedAt": "2026-07-17T14:26:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nils Rollshausen", "cardId": "e87e40b4c3095c6f", "avatar": "https://avatars.githubusercontent.com/u/6852884?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "rec0de", "c": 145, "avatar": "https://avatars.githubusercontent.com/u/6852884?v=4", "type": "User" }, { "login": "niklascon", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/34377286?v=4", "type": "User" }, { "login": "frereit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18506129?v=4", "type": "User" }, { "login": "sebinbash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82781994?v=4", "type": "User" } ] }, { "repo": "danmcinerney/shellshock-hunter", "name": "shellshock-hunter", "owner": "DanMcInerney", "url": "https://github.com/DanMcInerney/shellshock-hunter", "id": "365c28db9bc5", "stars": 42, "language": "Python", "description": "Concurrently test bing results for shellshock vulnerability", "type": "tool", "pushedAt": "2014-09-27T14:08:29Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "bitdefender/swapgs-attack-poc", "name": "swapgs-attack-poc", "owner": "bitdefender", "url": "https://github.com/bitdefender/swapgs-attack-poc", "stars": 41, "language": "C", "description": "This repository contains the sources and documentation for the SWAPGS attack PoC (CVE-2019-1125)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c50008655e1", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-01-27T12:32:04Z", "archived": false, "topContributors": [ { "login": "mdontu-bd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39959778?v=4", "type": "User" } ] }, { "repo": "johnhammond/c2c2", "name": "c2c2", "owner": "johnhammond", "url": "https://github.com/JohnHammond/c2c2", "stars": 41, "language": null, "description": "My new C2 framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a8839b2b8add", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2022-11-05T22:51:14Z", "archived": false, "topContributors": [] }, { "repo": "betab0t/skills", "name": "skills", "owner": "betab0t", "url": "https://github.com/betab0t/skills", "id": "47b836a1856a", "stars": 41, "language": "Shell", "description": "A growing collection of reverse engineering skills for AI coding agents.", "type": "tool", "pushedAt": "2026-05-17T06:04:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Omri Ben-Bassat", "cardId": "ab54a30644a9c982", "avatar": "https://avatars.githubusercontent.com/u/40000473?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "betab0t", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/40000473?v=4", "type": "User" } ] }, { "repo": "johnlatwc/macrojob", "name": "macrojob", "owner": "johnlatwc", "url": "https://github.com/JohnLaTwC/MacroJob", "stars": 40, "language": "Visual Basic", "description": "Proof of concept VBA code to add to Normal.dot to put restrictions on Word", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2369bf6c03bd", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-20T00:29:01Z", "archived": false, "topContributors": [ { "login": "JohnLaTwC", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" } ] }, { "repo": "parzel/gosleepycrypt", "name": "gosleepycrypt", "owner": "parzel", "url": "https://github.com/parzel/GoSleepyCrypt", "stars": 40, "language": "C", "description": "In-memory sleep encryption and heap encryption for Go applications through a shellcode function.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "93ebe37cbf4d", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-14T17:58:16Z", "archived": false, "topContributors": [ { "login": "parzel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "ayantaker/spyderc2", "name": "spyderc2", "owner": "ayantaker", "url": "https://github.com/Ayantaker/SpyderC2", "stars": 39, "language": "Python", "description": "A simple, dockerized python based Command and Control(C2) Framework named SpyderC2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ayan Saha", "cardId": "2865fe2460286a7a", "avatar": "https://avatars.githubusercontent.com/u/38920001?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e385dd488566", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-09T14:01:18Z", "archived": false, "topContributors": [ { "login": "Ayantaker", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/38920001?v=4", "type": "User" } ] }, { "repo": "mgeeky/customxmlpart", "name": "customxmlpart", "owner": "mgeeky", "url": "https://github.com/mgeeky/CustomXMLPart", "stars": 39, "language": "VBA", "description": "A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3cc79ae872b1", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-08T15:37:11Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "nahamsec/recondata", "name": "recondata", "owner": "nahamsec", "url": "https://github.com/nahamsec/recondata", "id": "ad2f148ee6f5", "stars": 39, "language": null, "description": "use at your own risk", "type": "tool", "pushedAt": "2019-11-23T21:28:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ben Sadeghipour", "cardId": "a04c3b9e3a86a135", "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nahamsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4", "type": "User" } ] }, { "repo": "x-c3ll/poc-cves", "name": "poc-cves", "owner": "x-c3ll", "url": "https://github.com/X-C3LL/PoC-CVEs", "stars": 11, "language": "Python", "description": "Proof of Concepts of vulnerabilities discovered by me", "type": "tool", "lanes": [ "2" ], "author": { "name": "X-C3LL", "cardId": "0dcc4174f290a01e", "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0fb228628c0c", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-24T13:04:38Z", "archived": false, "topContributors": [ { "login": "X-C3LL", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4", "type": "User" } ] }, { "repo": "zephrfish/blind", "name": "blind", "owner": "zephrfish", "url": "https://github.com/ZephrFish/blind", "stars": 10, "language": "C", "description": "A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8ecd69dce1fd", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-08T10:53:02Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "hackinglz/tradecraft-training", "name": "tradecraft-training", "owner": "hackinglz", "url": "https://github.com/HackingLZ/tradecraft-training", "stars": 10, "language": "HTML", "description": "Interactive slide deck covering operational security principles for authorized red team operations and penetration testing", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "699b5f1efdc9", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-25T17:14:11Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/exploit-dev-cve-code", "name": "exploit-dev-cve-code", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/Exploit-Dev-CVE-Code", "stars": 9, "language": "PowerShell", "description": "Exploits developed by me. And scripts I made and use for pentesting / getting bloods on HTB", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54bc8afaed48", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-10T01:27:48Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/deprecated-rootkit", "name": "deprecated-rootkit", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/deprecated-rootkit", "stars": 9, "language": "Assembly", "description": "Nice FASM src of basic ring 3 rootkit has no more use to me. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a37eb40714c9", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-14T16:26:53Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "h0mbre/myth", "name": "myth", "owner": "h0mbre", "url": "https://github.com/h0mbre/Myth", "stars": 9, "language": "C++", "description": "ADD/SUB encoder for alphanumeric shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "h0mbre", "cardId": "494e2f03a2cee362", "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c122094f77c", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-10-20T01:02:22Z", "archived": false, "topContributors": [ { "login": "h0mbre", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/47577114?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/nuclei-confuser", "name": "nuclei-confuser", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/nuclei-confuser", "stars": 9, "language": "Go", "description": "This repository gathers matchers from Nuclei templates designed to fool the Nuclei scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2aae89a32c0f", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-12T00:26:03Z", "archived": false, "topContributors": [ { "login": "ghost", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/10137?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "zephrfish/xss-proxy", "name": "xss-proxy", "owner": "zephrfish", "url": "https://github.com/ZephrFish/xss-proxy", "stars": 9, "language": "HTML", "description": "BeEF-inspired XSS proxy service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "86fad3f68701", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-07T01:36:03Z", "archived": false, "topContributors": [ { "login": "Danladi", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5709050?v=4", "type": "User" }, { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "anubissec/cve-2019-16278", "name": "cve-2019-16278", "owner": "anubissec", "url": "https://github.com/AnubisSec/CVE-2019-16278", "stars": 8, "language": "Python", "description": "A quick python exploit for the Nostromo 1.9.6 remote code execution vulnerability. Simply takes a host and port that the web server is running on. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dylan Makowski", "cardId": "32827bc9451d9cd2", "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6148a3f2b09d", "score": 26, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-11-22T18:57:29Z", "archived": false, "topContributors": [ { "login": "AnubisSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4", "type": "User" } ] }, { "repo": "mckern3l/ragdrag-labs", "name": "ragdrag-labs", "owner": "mckern3l", "url": "https://github.com/McKern3l/RAGdrag-labs", "stars": 7, "language": "Python", "description": "Test lab for RAGdrag — vulnerable RAG target, sample results, and test suite", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Pete McKernan", "cardId": "0586517d7a517b2b", "avatar": "https://avatars.githubusercontent.com/u/270715770?v=4" }, "referencedBy": [ { "url": "https://itsbroken.ai/ragdrag-r5-hijack/", "title": "RAGdrag Deep Dive: Hijacking RAG Retrieval", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r4-poison/", "title": "RAGdrag Deep Dive: Poisoning the Knowledge Base", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r2-probe/", "title": "RAGdrag Deep Dive: Mapping RAG Internals Without Access", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-walkthrough/", "title": "RAGdrag Walkthrough: From Fingerprint to Exfiltration in Four Commands", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-r6-evade/", "title": "RAGdrag Deep Dive: Bypassing RAG Guardrails", "person": "Pete McKernan" }, { "url": "https://itsbroken.ai/ragdrag-full-kill-chain/", "title": "RAGdrag Deep Dive: The Complete Kill Chain", "person": "Pete McKernan" } ], "referencedCount": 6, "id": "0694603a1ee9", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-08T16:14:04Z", "archived": false, "topContributors": [ { "login": "pitl0rd", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/47712252?v=4", "type": "User" } ] }, { "repo": "hashicorp/packer", "name": "packer", "owner": "hashicorp", "url": "https://github.com/hashicorp/packer", "stars": 15730, "language": "Go", "description": "Packer is a tool for creating identical machine images for multiple platforms from a single source configuration.", "type": "tool", "lanes": [ "1" ], "author": { "name": "hashicorp", "cardId": null }, "referencedBy": [ { "url": "https://grahamhelton.com/blog/packer-with-GCP.html", "title": "Building Gold Images With Packer +\nGCP", "person": "Graham Helton" }, { "url": "https://grahamhelton.com/blog/updates-and-milk.html", "title": "site updates and milk", "person": "Graham Helton" } ], "referencedCount": 2, "id": "0e210a39abde", "score": 25, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [ { "name": "Ali Rizvi-Santiago", "cardId": "507e20e060bbc5a9", "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4", "login": "arizvisa" } ], "pushedAt": "2026-07-18T00:46:18Z", "archived": false, "topContributors": [ { "login": "mitchellh", "c": 3182, "avatar": "https://avatars.githubusercontent.com/u/1299?v=4", "type": "User" }, { "login": "SwampDragons", "c": 2911, "avatar": "https://avatars.githubusercontent.com/u/1008838?v=4", "type": "User" }, { "login": "mwhooker", "c": 1589, "avatar": "https://avatars.githubusercontent.com/u/15618?v=4", "type": "User" }, { "login": "azr", "c": 1470, "avatar": "https://avatars.githubusercontent.com/u/1024852?v=4", "type": "User" }, { "login": "cbednarski", "c": 684, "avatar": "https://avatars.githubusercontent.com/u/649798?v=4", "type": "User" }, { "login": "rickard-von-essen", "c": 543, "avatar": "https://avatars.githubusercontent.com/u/557699?v=4", "type": "User" }, { "login": "nywilken", "c": 498, "avatar": "https://avatars.githubusercontent.com/u/1749304?v=4", "type": "User" }, { "login": "lbajolet-hashicorp", "c": 357, "avatar": "https://avatars.githubusercontent.com/u/105649352?v=4", "type": "User" }, { "login": "sylviamoss", "c": 281, "avatar": "https://avatars.githubusercontent.com/u/8526180?v=4", "type": "User" }, { "login": "DanHam", "c": 211, "avatar": "https://avatars.githubusercontent.com/u/4364798?v=4", "type": "User" }, { "login": "rasa", "c": 157, "avatar": "https://avatars.githubusercontent.com/u/220772?v=4", "type": "User" }, { "login": "arizvisa", "c": 155, "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4", "type": "User" }, { "login": "marinsalinas", "c": 150, "avatar": "https://avatars.githubusercontent.com/u/4061470?v=4", "type": "User" }, { "login": "boumenot", "c": 150, "avatar": "https://avatars.githubusercontent.com/u/91112?v=4", "type": "User" }, { "login": "sethvargo", "c": 149, "avatar": "https://avatars.githubusercontent.com/u/408570?v=4", "type": "User" }, { "login": "paulmey", "c": 146, "avatar": "https://avatars.githubusercontent.com/u/1740197?v=4", "type": "User" }, { "login": "taliesins", "c": 112, "avatar": "https://avatars.githubusercontent.com/u/314567?v=4", "type": "User" }, { "login": "mkuzmin", "c": 110, "avatar": "https://avatars.githubusercontent.com/u/712402?v=4", "type": "User" }, { "login": "markpeek", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/638982?v=4", "type": "User" }, { "login": "jsoref", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/2119212?v=4", "type": "User" }, { "login": "pearkes", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/846194?v=4", "type": "User" }, { "login": "GennadySpb", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/2803590?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 87, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "packer-ci", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/62970560?v=4", "type": "User" }, { "login": "catsby", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/61721?v=4", "type": "User" }, { "login": "jescalan", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/556932?v=4", "type": "User" }, { "login": "tanmay-hc", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/194774054?v=4", "type": "User" }, { "login": "alrs", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/28523?v=4", "type": "User" }, { "login": "vtolstov", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/481307?v=4", "type": "User" }, { "login": "ChrisLundquist", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/181256?v=4", "type": "User" } ] }, { "repo": "go-sql-driver/mysql", "name": "mysql", "owner": "go-sql-driver", "url": "https://github.com/go-sql-driver/mysql", "stars": 15276, "language": "Go", "description": "Go MySQL Driver is a MySQL driver for Go's (golang) database/sql package", "type": "tool", "lanes": [ "1" ], "author": { "name": "go-sql-driver", "cardId": null }, "referencedBy": [ { "url": "https://0x434b.dev/the-state-of-go-fuzzing-did-we-already-reach-the-peak/", "title": "The State of Go Fuzzing - Did we already reach the peak?", "person": "434b" }, { "url": "https://zeyadazima.com/general/hacking_crypto_network/", "title": "CVE Analysis: Hacking a Crypto Network for Profit", "person": "Zer0verflow" } ], "referencedCount": 2, "id": "38300553ccc4", "score": 25, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 31, "contributorCount": 100, "contributors": [], "pushedAt": "2026-07-16T14:57:38Z", "archived": false, "topContributors": [ { "login": "julienschmidt", "c": 461, "avatar": "https://avatars.githubusercontent.com/u/944947?v=4", "type": "User" }, { "login": "methane", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/199592?v=4", "type": "User" }, { "login": "arnehormann", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/1011413?v=4", "type": "User" }, { "login": "shogo82148", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/1157344?v=4", "type": "User" }, { "login": "cxmcc", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1209733?v=4", "type": "User" }, { "login": "dolmen", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/129536?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 9, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "arvenil", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/450355?v=4", "type": "User" }, { "login": "Carrotman42", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/570095?v=4", "type": "User" }, { "login": "MJKWoolnough", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4339651?v=4", "type": "User" }, { "login": "lukescott", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/486224?v=4", "type": "User" }, { "login": "s7v7nislands", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/225986?v=4", "type": "User" }, { "login": "joshuaprunier", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4297988?v=4", "type": "User" }, { "login": "dveeden", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1272980?v=4", "type": "User" }, { "login": "badoet", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/527102?v=4", "type": "User" }, { "login": "zihengCat", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19472493?v=4", "type": "User" }, { "login": "rusher", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/618074?v=4", "type": "User" }, { "login": "aaron42net", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5447793?v=4", "type": "User" }, { "login": "mherr-google", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47012945?v=4", "type": "User" }, { "login": "moredure", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11322032?v=4", "type": "User" }, { "login": "thenikso", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1614904?v=4", "type": "User" }, { "login": "pib", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32910?v=4", "type": "User" }, { "login": "pgporada", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2382565?v=4", "type": "User" }, { "login": "Runrioter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1078011?v=4", "type": "User" }, { "login": "vmg", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/42793?v=4", "type": "User" }, { "login": "scop", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/109152?v=4", "type": "User" }, { "login": "hyandell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/477715?v=4", "type": "User" }, { "login": "chanxuehong", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3416908?v=4", "type": "User" }, { "login": "cuishuang", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15921519?v=4", "type": "User" }, { "login": "zjj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/452461?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/invoke-thehash", "name": "invoke-thehash", "owner": "kevin-robertson", "url": "https://github.com/Kevin-Robertson/Invoke-TheHash", "stars": 1789, "language": "PowerShell", "description": "PowerShell Pass The Hash Utils", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [ { "url": "https://decoder.cloud/2018/03/18/unexpected-windows-privilege-escalations/", "title": "“Unexpected” Windows Privilege Escalations", "person": "Andrea Pierini" } ], "referencedCount": 1, "id": "6969d56f056c", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2018-12-09T15:38:36Z", "archived": false, "topContributors": [ { "login": "Kevin-Robertson", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "Vokaysh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18655125?v=4", "type": "User" } ] }, { "repo": "zhuowei/fake-arm-macos-sdk", "name": "fake-arm-macos-sdk", "owner": "zhuowei", "url": "https://github.com/zhuowei/fake-arm-macOS-sdk", "stars": 7, "language": "Shell", "description": "Obsolete: Xcode 12 Beta's out now. -- Script that modifies Xcode 11’s macOS SDK to build for ARM", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zhuowei", "cardId": "2ebb66c5a008ff9d", "avatar": "https://avatars.githubusercontent.com/u/704768?v=4" }, "referencedBy": [ { "url": "https://worthdoingbadly.com/sim-macos-arm-sdk/", "title": "Build macOS ARM apps in Xcode without a real macOS ARM SDK", "person": "worthdoingbadly" } ], "referencedCount": 1, "id": "651b65e8915c", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-13T23:42:53Z", "archived": false, "topContributors": [ { "login": "zhuowei", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/704768?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/n0pspoof", "name": "n0pspoof", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/N0Pspoof", "stars": 7, "language": "C", "description": "A tool to bypass and evade Portspoof solution", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [ { "url": "https://zeyadazima.com/defense%20evasion/portspoofexploit/", "title": "Exploit Writing (N0Pspoof): Portspoof Evasion", "person": "Zer0verflow" } ], "referencedCount": 1, "id": "487f9a6080ce", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-18T04:07:55Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "zephrfish/commitstomping-info", "name": "commitstomping-info", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CommitStomping-Info", "stars": 7, "language": null, "description": "Commit Stomping is a technique in which Git commit timestamps are manipulated to obscure the true timing of changes. ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [ { "url": "https://blog.zsec.uk/commit-stomping/", "title": "Commit Stomping", "person": "Andy Gill" } ], "referencedCount": 1, "id": "dbc0e3e8ea0e", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-12-07T01:30:26Z", "archived": false, "topContributors": [] }, { "repo": "0xbigshaq/njs-vr", "name": "njs-vr", "owner": "0xbigshaq", "url": "https://github.com/0xbigshaq/njs-vr", "stars": 6, "language": "JavaScript", "description": "NJS Sandbox Escape Exploit ", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "0x_shaq", "cardId": "9dcbb609ffa78dea", "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4" }, "referencedBy": [ { "url": "https://pwner.gg/blog/2024-05-24-njs-vr-bugs", "title": "Hunting bugs in Nginx JavaScript engine (njs)", "person": "pwner.gg" } ], "referencedCount": 1, "id": "4a7c6d38375b", "score": 25, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-01T11:27:47Z", "archived": false, "topContributors": [ { "login": "0xbigshaq", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/57250448?v=4", "type": "User" } ] }, { "repo": "ytisf/thezoo", "name": "theZoo", "owner": "ytisf", "url": "https://github.com/ytisf/theZoo", "id": "c42b9bf79f54", "stars": 13212, "language": "Python", "description": "A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.", "type": "tool", "pushedAt": "2026-04-01T05:10:04Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ytisf", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 21, "topContributors": [ { "login": "ytisf", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/5548594?v=4", "type": "User" }, { "login": "Sheksa", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/6614945?v=4", "type": "User" }, { "login": "Yiep", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/25160659?v=4", "type": "User" }, { "login": "zbetcheckin", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/10907782?v=4", "type": "User" }, { "login": "d0n0x", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6408891?v=4", "type": "User" }, { "login": "james-richards-privitar", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/61580341?v=4", "type": "User" }, { "login": "k4yt3x", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/21986859?v=4", "type": "User" }, { "login": "5Fingers", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6413401?v=4", "type": "User" }, { "login": "studer", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1497348?v=4", "type": "User" }, { "login": "teardemon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1568748?v=4", "type": "User" }, { "login": "jesobreira", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3002249?v=4", "type": "User" }, { "login": "hawkinsw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8715530?v=4", "type": "User" }, { "login": "Tino-F", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16110443?v=4", "type": "User" }, { "login": "stevesbrain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6745111?v=4", "type": "User" }, { "login": "ParzivalWolfram", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30007617?v=4", "type": "User" }, { "login": "mwleeds", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7833263?v=4", "type": "User" }, { "login": "classaxe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9293057?v=4", "type": "User" }, { "login": "weddingmm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/86187961?v=4", "type": "User" }, { "login": "H4ckN3rd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117463524?v=4", "type": "User" }, { "login": "HarshRajSinghania", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40535627?v=4", "type": "User" }, { "login": "Danik2343", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38865696?v=4", "type": "User" } ] }, { "repo": "snare/voltron", "name": "voltron", "owner": "snare", "url": "https://github.com/snare/voltron", "id": "a74b40bd592b", "stars": 6345, "language": "Python", "description": "A hacky debugger UI for hackers", "type": "tool", "pushedAt": "2025-01-30T00:28:08Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "snare", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "login": "zcutlip" } ], "adoptionOperators": 1, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 18, "topContributors": [ { "login": "snare", "c": 479, "avatar": "https://avatars.githubusercontent.com/u/504561?v=4", "type": "User" }, { "login": "richo", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/476418?v=4", "type": "User" }, { "login": "zcutlip", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" }, { "login": "Grazfather", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/497310?v=4", "type": "User" }, { "login": "xfwduke", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/977823?v=4", "type": "User" }, { "login": "mycon", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/633186?v=4", "type": "User" }, { "login": "miaubiz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/64650?v=4", "type": "User" }, { "login": "suve", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5345765?v=4", "type": "User" }, { "login": "AlexanderOMara", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1740229?v=4", "type": "User" }, { "login": "LiptonB", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/467965?v=4", "type": "User" }, { "login": "betaveros", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3482833?v=4", "type": "User" }, { "login": "joeabbey", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/759747?v=4", "type": "User" }, { "login": "nateozem", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22719441?v=4", "type": "User" }, { "login": "davidrb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8132929?v=4", "type": "User" }, { "login": "seanballais", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7175885?v=4", "type": "User" }, { "login": "williballenthin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/156560?v=4", "type": "User" }, { "login": "yrp604", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8716677?v=4", "type": "User" }, { "login": "jaseg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/136313?v=4", "type": "User" } ] }, { "repo": "longsoft/uefitool", "name": "UEFITool", "owner": "LongSoft", "url": "https://github.com/LongSoft/UEFITool", "id": "7143c92b6fd6", "stars": 5579, "language": "C", "description": "UEFI firmware image viewer and editor", "type": "tool", "pushedAt": "2026-07-13T02:59:56Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "LongSoft", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Nikolaj Schlej", "cardId": "2537608ef9153b86", "avatar": "https://avatars.githubusercontent.com/u/1845688?v=4", "login": "NikolajSchlej" }, { "name": "ValdikSS", "cardId": "c76eaa2d709872a9", "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "login": "ValdikSS" } ], "adoptionOperators": 1, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 42, "topContributors": [ { "login": "NikolajSchlej", "c": 411, "avatar": "https://avatars.githubusercontent.com/u/1845688?v=4", "type": "User" }, { "login": "vit9696", "c": 128, "avatar": "https://avatars.githubusercontent.com/u/4348897?v=4", "type": "User" }, { "login": "pagabuc", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/9197985?v=4", "type": "User" }, { "login": "Cr4sh", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/534534?v=4", "type": "User" }, { "login": "yeggor", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/22826617?v=4", "type": "User" }, { "login": "matrosov", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/359722?v=4", "type": "User" }, { "login": "hughsie", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/151380?v=4", "type": "User" }, { "login": "Ykidia", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/57646859?v=4", "type": "User" }, { "login": "p-state", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/18659798?v=4", "type": "User" }, { "login": "probonopd", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2480569?v=4", "type": "User" }, { "login": "pkubaj", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4457924?v=4", "type": "User" }, { "login": "ValdikSS", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "type": "User" }, { "login": "mikebeaton", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11946605?v=4", "type": "User" }, { "login": "laptander", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5350212?v=4", "type": "User" }, { "login": "XutaxKamay", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20893801?v=4", "type": "User" }, { "login": "yangfl", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5283634?v=4", "type": "User" }, { "login": "vulpes2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/83679347?v=4", "type": "User" }, { "login": "ilikesn0w", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/191715439?v=4", "type": "User" }, { "login": "chunqing286", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5114279?v=4", "type": "User" }, { "login": "assafcarlsbad", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8438963?v=4", "type": "User" }, { "login": "WilliamLeara", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/524329?v=4", "type": "User" }, { "login": "jobermayr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/588670?v=4", "type": "User" }, { "login": "Integral-Tech", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/71180087?v=4", "type": "User" }, { "login": "Red54", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2240638?v=4", "type": "User" }, { "login": "timevortex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9387602?v=4", "type": "User" }, { "login": "serg-pushkarev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16178995?v=4", "type": "User" }, { "login": "melvyn2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9157412?v=4", "type": "User" }, { "login": "joevt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/950609?v=4", "type": "User" }, { "login": "krsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13264?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "outflanknl/redelk", "name": "RedELK", "owner": "outflanknl", "url": "https://github.com/outflanknl/RedELK", "id": "7c55339fbca3", "stars": 2657, "language": "Python", "description": "Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.", "type": "tool", "pushedAt": "2026-04-28T18:08:10Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "outflanknl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 17, "topContributors": [ { "login": "MarcOverIP", "c": 581, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" }, { "login": "fastlorenzo", "c": 367, "avatar": "https://avatars.githubusercontent.com/u/768639?v=4", "type": "User" }, { "login": "Anthirian", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/704388?v=4", "type": "User" }, { "login": "xychix", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/307655?v=4", "type": "User" }, { "login": "alcastronic", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/13632143?v=4", "type": "User" }, { "login": "sunnyneo", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/9748813?v=4", "type": "User" }, { "login": "OG-Sadpanda", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1459500?v=4", "type": "User" }, { "login": "whitecod", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/54910808?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "yamakadi", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/25483877?v=4", "type": "User" }, { "login": "justsly", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3866841?v=4", "type": "User" }, { "login": "nurfed1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8027846?v=4", "type": "User" }, { "login": "Matthijsy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5302372?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "rkbennett", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44292326?v=4", "type": "User" } ] }, { "repo": "netspi/microburst", "name": "MicroBurst", "owner": "NetSPI", "url": "https://github.com/NetSPI/MicroBurst", "id": "c5334ed265c6", "stars": 2408, "language": "PowerShell", "description": "A collection of scripts for assessing Microsoft Azure security", "type": "tool", "pushedAt": "2026-06-29T14:43:59Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Karl Fosaaen", "cardId": "e43baf62974d03ca", "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "login": "kfosaaen" }, { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" } ], "adoptionOperators": 2, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 15, "topContributors": [ { "login": "kfosaaen", "c": 182, "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "type": "User" }, { "login": "xybytes", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/49211005?v=4", "type": "User" }, { "login": "passthehashbrowns", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/66043333?v=4", "type": "User" }, { "login": "jakekarnes42", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/3769323?v=4", "type": "User" }, { "login": "cnotin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "0xG00s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/230165879?v=4", "type": "User" }, { "login": "karimelmel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26272119?v=4", "type": "User" }, { "login": "njmulsqb", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47940898?v=4", "type": "User" }, { "login": "agroyz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90977809?v=4", "type": "User" }, { "login": "ZephrFish", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "nathanmcnulty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6653432?v=4", "type": "User" }, { "login": "petergs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5185814?v=4", "type": "User" }, { "login": "r3nhat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9061110?v=4", "type": "User" }, { "login": "vikerup", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26252635?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/noseyparker", "name": "noseyparker", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/noseyparker", "id": "4aac8e09282f", "stars": 2339, "language": "Rust", "description": "Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.", "type": "tool", "pushedAt": "2026-02-21T13:04:04Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adnan Khan", "cardId": "3d12002cf2cb67c0", "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4", "login": "AdnaneKhan" }, { "name": "Matthew Jackoski", "cardId": "48359776e3d7d716", "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "login": "DS-KoolAid" } ], "adoptionOperators": 2, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 19, "topContributors": [ { "login": "bradlarsen", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/1483920?v=4", "type": "User" }, { "login": "gemesa", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/59890178?v=4", "type": "User" }, { "login": "looklotsofpeople", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/18254601?v=4", "type": "User" }, { "login": "seqre", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/44679055?v=4", "type": "User" }, { "login": "Coruscant11", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1645347?v=4", "type": "User" }, { "login": "tobiasgyoerfi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10854916?v=4", "type": "User" }, { "login": "nsportsman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "AdnaneKhan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2006441?v=4", "type": "User" }, { "login": "brandon-t-elliott", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/126433368?v=4", "type": "User" }, { "login": "praetorian-harry", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58926491?v=4", "type": "User" }, { "login": "DS-KoolAid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "type": "User" }, { "login": "PBarri", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6834088?v=4", "type": "User" }, { "login": "grawin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3966855?v=4", "type": "User" }, { "login": "shivasurya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6303227?v=4", "type": "User" }, { "login": "yilas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5264000?v=4", "type": "User" }, { "login": "sinkozs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90503356?v=4", "type": "User" }, { "login": "kpcyrd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7763184?v=4", "type": "User" }, { "login": "ransomsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83533000?v=4", "type": "User" }, { "login": "tpat13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32806320?v=4", "type": "User" } ] }, { "repo": "trustedsec/hate_crack", "name": "hate_crack", "owner": "trustedsec", "url": "https://github.com/trustedsec/hate_crack", "id": "e268e81c823a", "stars": 1845, "language": "Python", "description": "A tool for automating cracking methodologies through Hashcat from the TrustedSec team.", "type": "tool", "pushedAt": "2026-07-06T20:23:09Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "bandrel", "c": 589, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "discoking", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/9728105?v=4", "type": "User" }, { "login": "Spoonman1091", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/1806514?v=4", "type": "User" }, { "login": "Copilot", "c": 10, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "i128", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2417131?v=4", "type": "User" }, { "login": "df-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64652594?v=4", "type": "User" }, { "login": "HackingDave", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "rybaz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62815219?v=4", "type": "User" } ] }, { "repo": "trustedsec/cs-situational-awareness-bof", "name": "CS-Situational-Awareness-BOF", "owner": "trustedsec", "url": "https://github.com/trustedsec/CS-Situational-Awareness-BOF", "id": "6999fec0fa30", "stars": 1842, "language": "C", "description": "Situational Awareness commands implemented using Beacon Object Files", "type": "tool", "pushedAt": "2026-03-10T16:08:47Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" }, { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" }, { "name": "Kevin Haubris", "cardId": "3675f451e4ed1ecc", "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "login": "kev169" }, { "name": "Martin Dubé", "cardId": "f8db5f434b058cc5", "avatar": "https://avatars.githubusercontent.com/u/4238786?v=4", "login": "martindube" }, { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "login": "EvanMcBroom" }, { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "login": "api0cradle" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 41, "topContributors": [ { "login": "freefirex", "c": 239, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "RemiEscourrou", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/22934796?v=4", "type": "User" }, { "login": "deviousbanana", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/7109813?v=4", "type": "User" }, { "login": "Tw1sm", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" }, { "login": "kev169", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "type": "User" }, { "login": "nickvourd", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32869078?v=4", "type": "User" }, { "login": "Tycx2ry", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6139198?v=4", "type": "User" }, { "login": "leebaird", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "martanne", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5736493?v=4", "type": "User" }, { "login": "martindube", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4238786?v=4", "type": "User" }, { "login": "chryzsh", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" }, { "login": "m0t", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/500273?v=4", "type": "User" }, { "login": "nowhey2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1191760?v=4", "type": "User" }, { "login": "brimstone", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/812795?v=4", "type": "User" }, { "login": "Soups71", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24944612?v=4", "type": "User" }, { "login": "funnybananas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/83034180?v=4", "type": "User" }, { "login": "trainr3kt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/31230667?v=4", "type": "User" }, { "login": "CBCicada", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/114001484?v=4", "type": "User" }, { "login": "wotwot563", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25873412?v=4", "type": "User" }, { "login": "skellyb0n3s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/117053660?v=4", "type": "User" }, { "login": "attl4s", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35996395?v=4", "type": "User" }, { "login": "EvanMcBroom", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" }, { "login": "kapn-kaos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63302803?v=4", "type": "User" }, { "login": "ville87", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38942588?v=4", "type": "User" }, { "login": "physics-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11247943?v=4", "type": "User" }, { "login": "Firat-NVISO", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74298671?v=4", "type": "User" }, { "login": "sudonoodle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52385049?v=4", "type": "User" }, { "login": "mmmmcoffee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50842195?v=4", "type": "User" }, { "login": "j0wns", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19246095?v=4", "type": "User" } ] }, { "repo": "1n3/findsploit", "name": "Findsploit", "owner": "1N3", "url": "https://github.com/1N3/Findsploit", "id": "7e135d072421", "stars": 1840, "language": "Shell", "description": "Find exploits in local and online databases instantly", "type": "tool", "pushedAt": "2021-09-27T01:43:24Z", "archived": false, "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "1N3", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "xer0dayz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/33965753?v=4", "type": "User" }, { "login": "paralax", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "3mrgnc3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6823590?v=4", "type": "User" }, { "login": "lyz-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24810987?v=4", "type": "User" }, { "login": "riramar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6748242?v=4", "type": "User" }, { "login": "spaddex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7888449?v=4", "type": "User" }, { "login": "Zawadidone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21525407?v=4", "type": "User" }, { "login": "abdulr7mann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51442494?v=4", "type": "User" }, { "login": "ook-io", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14150312?v=4", "type": "User" } ] }, { "repo": "m14r41/pentestingeverything", "name": "PentestingEverything", "owner": "m14r41", "url": "https://github.com/m14r41/PentestingEverything", "id": "80a3943ed5e1", "stars": 1830, "language": "TypeScript", "description": "Complete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network Pentesting | SAST | DAST etc...", "type": "tool", "pushedAt": "2026-07-12T17:04:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Madhurendra kumar", "cardId": "72f08c5be09cd0d7", "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "m14r41", "c": 323, "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4", "type": "User" }, { "login": "allcontributors[bot]", "c": 8, "avatar": "https://avatars.githubusercontent.com/in/23186?v=4", "type": "Bot" }, { "login": "InfoBugs", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/96067790?v=4", "type": "User" }, { "login": "0xKayala", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16838353?v=4", "type": "User" }, { "login": "rtnthakur", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/100836712?v=4", "type": "User" }, { "login": "0xBhushan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/95958300?v=4", "type": "User" }, { "login": "KurozyOS", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/81830783?v=4", "type": "User" }, { "login": "shps951023", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12729184?v=4", "type": "User" } ] }, { "repo": "1n3/blackwidow", "name": "blackwidow", "owner": "1n3", "url": "https://github.com/1N3/BlackWidow", "stars": 1812, "language": "Python", "description": "A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d33b47959306", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [], "pushedAt": "2026-04-17T12:35:56Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "ifly53e", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2816894?v=4", "type": "User" }, { "login": "RDxR10", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/43957261?v=4", "type": "User" }, { "login": "xer0dayz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/33965753?v=4", "type": "User" }, { "login": "tdebatty", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/872972?v=4", "type": "User" }, { "login": "delirious-lettuce", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24502053?v=4", "type": "User" }, { "login": "khast3x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1370650?v=4", "type": "User" }, { "login": "ZishanAdThandar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16804210?v=4", "type": "User" } ] }, { "repo": "wagiro/burpbounty", "name": "burpbounty", "owner": "wagiro", "url": "https://github.com/wagiro/BurpBounty", "stars": 1809, "language": "Java", "description": "Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through", "type": "tool", "lanes": [ "2" ], "author": { "name": "wagiro", "cardId": "b3184eaf4202dc63", "avatar": "https://avatars.githubusercontent.com/u/3398430?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0270466aeef3", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "pushedAt": "2024-04-26T01:17:17Z", "archived": false, "topContributors": [ { "login": "pajswigger", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/29278886?v=4", "type": "User" }, { "login": "wagiro", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/3398430?v=4", "type": "User" }, { "login": "Hannah-PortSwigger", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/58562826?v=4", "type": "User" }, { "login": "Anon-Exploiter", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18597330?v=4", "type": "User" }, { "login": "legik", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/657615?v=4", "type": "User" }, { "login": "six2dez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "PortSwiggerSupport", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/52737744?v=4", "type": "User" }, { "login": "ayadim", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15672756?v=4", "type": "User" }, { "login": "Sy3Omda", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48482029?v=4", "type": "User" }, { "login": "n00py", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14309124?v=4", "type": "User" } ] }, { "repo": "0vercl0k/wtf", "name": "wtf", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/wtf", "id": "39b371a34b7c", "stars": 1776, "language": "C++", "description": "wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode", "type": "tool", "pushedAt": "2026-07-10T02:57:13Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 14, "topContributors": [ { "login": "0vercl0k", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" }, { "login": "1ndahous3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9205230?v=4", "type": "User" }, { "login": "shadowpagetable", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/225441823?v=4", "type": "User" }, { "login": "anvbis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/88613997?v=4", "type": "User" }, { "login": "clslgrnc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20681956?v=4", "type": "User" }, { "login": "ucaprompt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5015221?v=4", "type": "User" }, { "login": "australeo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47684814?v=4", "type": "User" }, { "login": "3a1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75133897?v=4", "type": "User" }, { "login": "gaasedelen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9522648?v=4", "type": "User" }, { "login": "huwwp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6924291?v=4", "type": "User" }, { "login": "jasocrow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/153134172?v=4", "type": "User" }, { "login": "wumb0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5201371?v=4", "type": "User" }, { "login": "x9090", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4924242?v=4", "type": "User" }, { "login": "yuawn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5111198?v=4", "type": "User" } ] }, { "repo": "swisskyrepo/graphqlmap", "name": "GraphQLmap", "owner": "swisskyrepo", "url": "https://github.com/swisskyrepo/GraphQLmap", "id": "17556a3c931c", "stars": 1678, "language": "Python", "description": "GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)", "type": "tool", "pushedAt": "2024-03-11T15:46:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "swisskyrepo", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" }, { "login": "fuomag9", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1580624?v=4", "type": "User" }, { "login": "0xflotus", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "orangecms", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4245199?v=4", "type": "User" }, { "login": "onSec-fr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59887731?v=4", "type": "User" }, { "login": "arthur4ires", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10226317?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "Naategh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43073058?v=4", "type": "User" }, { "login": "adindrabkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47116975?v=4", "type": "User" }, { "login": "garanews", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16938405?v=4", "type": "User" }, { "login": "schoobydrew", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36652374?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/shuffledns", "name": "shuffledns", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/shuffledns", "id": "5439eee93f9f", "stars": 1650, "language": "Go", "description": "MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.", "type": "tool", "pushedAt": "2026-07-15T16:27:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" }, { "name": "Harshit Raj Singh", "cardId": "896d71d6f80f003a", "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4", "login": "h4r5h1t" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 18, "topContributors": [ { "login": "dependabot[bot]", "c": 563, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "ehsandeep", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "Mzack9999", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "Ice3man543", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "LuitelSamikshya", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/85764322?v=4", "type": "User" }, { "login": "ehrishirajsharma", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/35542790?v=4", "type": "User" }, { "login": "nothinux", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17433202?v=4", "type": "User" }, { "login": "faizal3199", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/23314801?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "chenrui333", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1580956?v=4", "type": "User" }, { "login": "tarunKoyalwar", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45962551?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "h4r5h1t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4", "type": "User" }, { "login": "mohammadanaraki", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28445522?v=4", "type": "User" }, { "login": "OFJAAAH", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70953773?v=4", "type": "User" }, { "login": "edoardottt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35783570?v=4", "type": "User" }, { "login": "target111", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19665950?v=4", "type": "User" } ] }, { "repo": "j3ssie/metabigor", "name": "metabigor", "owner": "j3ssie", "url": "https://github.com/j3ssie/metabigor", "stars": 1631, "language": "Go", "description": "OSINT tools and more but without API key", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jessie Ho (j3ssie)", "cardId": "65ab17084a41e33e", "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d20bdb56732b", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2026-07-03T10:39:50Z", "archived": false, "topContributors": [ { "login": "j3ssie", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4", "type": "User" }, { "login": "adilsoybali", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76052370?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "The-Debarghya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79015784?v=4", "type": "User" } ] }, { "repo": "specterops/at-ps", "name": "at-ps", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/at-ps", "id": "f457198efa43", "stars": 1607, "language": "PowerShell", "description": "Adversary Tactics - PowerShell Training", "type": "tool", "pushedAt": "2020-01-22T18:48:01Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "themightyshiv", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2651222?v=4", "type": "User" } ] }, { "repo": "s0md3v/uro", "name": "uro", "owner": "s0md3v", "url": "https://github.com/s0md3v/uro", "id": "bdba2b72b379", "stars": 1578, "language": "Python", "description": "declutters url lists for crawling/pentesting", "type": "tool", "pushedAt": "2025-02-23T11:53:31Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Harshit Raj Singh", "cardId": "896d71d6f80f003a", "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4", "login": "h4r5h1t" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "s0md3v", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "parad0x-0xff", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/62678327?v=4", "type": "User" }, { "login": "adityatelange", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21258296?v=4", "type": "User" }, { "login": "TheBinitGhimire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20013689?v=4", "type": "User" }, { "login": "h4r5h1t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4", "type": "User" } ] }, { "repo": "s0md3v/corsy", "name": "corsy", "owner": "s0md3v", "url": "https://github.com/s0md3v/Corsy", "stars": 1528, "language": "Python", "description": "CORS Misconfiguration Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "625a3fa0906c", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2022-09-17T10:11:37Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "n0tduck1e", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/40424574?v=4", "type": "User" }, { "login": "Vasco-jofra", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11303847?v=4", "type": "User" }, { "login": "shimmeris", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17252049?v=4", "type": "User" }, { "login": "davidmckennirey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26097321?v=4", "type": "User" } ] }, { "repo": "mordavid/bruteforceai", "name": "BruteForceAI", "owner": "MorDavid", "url": "https://github.com/MorDavid/BruteForceAI", "id": "8ab2932a9678", "stars": 1468, "language": "Python", "description": "Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks", "type": "tool", "pushedAt": "2026-07-17T22:45:32Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MorDavid", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "t3l3machus/toxssin", "name": "toxssin", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/toxssin", "stars": 1437, "language": "Python", "description": "An XSS exploitation command-line interface and payload generator.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ae2c602f2acd", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-19T16:24:50Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" } ] }, { "repo": "urbanadventurer/username-anarchy", "name": "username-anarchy", "owner": "urbanadventurer", "url": "https://github.com/urbanadventurer/username-anarchy", "id": "01dc8ef75cd7", "stars": 1432, "language": "Ruby", "description": "Username tools for penetration testing", "type": "tool", "pushedAt": "2024-09-20T01:57:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrew Horton", "cardId": "ce17217268421b81", "avatar": "https://avatars.githubusercontent.com/u/101783?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "urbanadventurer", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/101783?v=4", "type": "User" }, { "login": "PalinuroSec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4960026?v=4", "type": "User" }, { "login": "PasaEdoardo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/111753639?v=4", "type": "User" }, { "login": "jbrandona119", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56561899?v=4", "type": "User" }, { "login": "bhallef", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57010783?v=4", "type": "User" }, { "login": "pwnter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/171454152?v=4", "type": "User" } ] }, { "repo": "boku7/bokuloader", "name": "bokuloader", "owner": "boku7", "url": "https://github.com/boku7/BokuLoader", "stars": 1427, "language": "C", "description": "A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "53c540371105", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2023-11-22T22:25:50Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 340, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "ScriptIdiot", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/21979646?v=4", "type": "User" }, { "login": "g4ngli0s", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24944277?v=4", "type": "User" }, { "login": "0xbad53c", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74974697?v=4", "type": "User" } ] }, { "repo": "random-robbie/bruteforce-lists", "name": "bruteforce-lists", "owner": "random-robbie", "url": "https://github.com/random-robbie/bruteforce-lists", "id": "577395e9d175", "stars": 1421, "language": null, "description": "Some files for bruteforcing certain things.", "type": "tool", "pushedAt": "2026-04-30T09:53:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "random-robbie", "c": 201, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" }, { "login": "gal-nagli", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35578316?v=4", "type": "User" } ] }, { "repo": "hasherezade/exe_to_dll", "name": "exe_to_dll", "owner": "hasherezade", "url": "https://github.com/hasherezade/exe_to_dll", "stars": 1367, "language": "C++", "description": "Converts a EXE into DLL", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2f4cb91c6c56", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-09-15T00:45:31Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "Lagri", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47385911?v=4", "type": "User" } ] }, { "repo": "boku7/loki", "name": "Loki", "owner": "boku7", "url": "https://github.com/boku7/Loki", "id": "0652c5d0897e", "stars": 1352, "language": "JavaScript", "description": "🧙‍♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications", "type": "tool", "pushedAt": "2026-03-27T20:09:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "login": "0xsyr0" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "boku7", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "clod81", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1020921?v=4", "type": "User" }, { "login": "j0hnZ3RA", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/82909572?v=4", "type": "User" }, { "login": "pir4cy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13626502?v=4", "type": "User" }, { "login": "4y45u45c4", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/207280155?v=4", "type": "User" }, { "login": "Nero22k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64486541?v=4", "type": "User" }, { "login": "Robinx0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/88659091?v=4", "type": "User" }, { "login": "0xAnom4ly", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/138611404?v=4", "type": "User" }, { "login": "0xsyr0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" }, { "login": "Ab4y98", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35191867?v=4", "type": "User" }, { "login": "icheernoom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5839732?v=4", "type": "User" }, { "login": "nahidha5an", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25875922?v=4", "type": "User" }, { "login": "SawyersPresent", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/109657189?v=4", "type": "User" }, { "login": "Adnnlnistrator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56180228?v=4", "type": "User" }, { "login": "ThanniKudam", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72503981?v=4", "type": "User" }, { "login": "tyleraschultz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84467715?v=4", "type": "User" } ] }, { "repo": "trustedsec/trevorc2", "name": "trevorc2", "owner": "trustedsec", "url": "https://github.com/trustedsec/trevorc2", "id": "9acbd402d0d9", "stars": 1344, "language": "C", "description": "TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.", "type": "tool", "pushedAt": "2022-01-31T20:16:24Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Kevin Haubris", "cardId": "3675f451e4ed1ecc", "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "login": "kev169" }, { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "login": "api0cradle" } ], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "HackingDave", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "kev169", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "type": "User" }, { "login": "PedroSFreitas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12863160?v=4", "type": "User" }, { "login": "api0cradle", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" }, { "login": "mainframed", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1973519?v=4", "type": "User" }, { "login": "2xyo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31675?v=4", "type": "User" }, { "login": "fsacer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2059352?v=4", "type": "User" }, { "login": "JanivZ", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6564656?v=4", "type": "User" }, { "login": "nasbench", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8741929?v=4", "type": "User" }, { "login": "nma-io", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9916363?v=4", "type": "User" }, { "login": "pasadoorian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19780827?v=4", "type": "User" }, { "login": "trevorbryant", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11650184?v=4", "type": "User" }, { "login": "sctf2020", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33305603?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-burp-plugin", "name": "nuclei-burp-plugin", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-burp-plugin", "stars": 1338, "language": "Java", "description": "Nuclei plugin for BurpSuite", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "57e6f60bd245", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2025-10-22T13:47:39Z", "archived": false, "topContributors": [ { "login": "forgedhallpass", "c": 105, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 43, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "ehrishirajsharma", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/35542790?v=4", "type": "User" }, { "login": "ehsandeep", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "RamanaReddy0M", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "zrquan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33086594?v=4", "type": "User" }, { "login": "Arr0way", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7022253?v=4", "type": "User" }, { "login": "princechaddha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16654365?v=4", "type": "User" }, { "login": "namest504", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61047602?v=4", "type": "User" } ] }, { "repo": "codingo/vhostscan", "name": "vhostscan", "owner": "codingo", "url": "https://github.com/codingo/VHostScan", "stars": 1308, "language": "Python", "description": "A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8bc894137d82", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 23, "contributors": [], "pushedAt": "2025-08-18T07:42:58Z", "archived": false, "topContributors": [ { "login": "codingo", "c": 176, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "timkent", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/2264795?v=4", "type": "User" }, { "login": "diogoosorio", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/1484824?v=4", "type": "User" }, { "login": "linted", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/10934700?v=4", "type": "User" }, { "login": "gigkokman", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1285539?v=4", "type": "User" }, { "login": "vortexau", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/859420?v=4", "type": "User" }, { "login": "ccsplit", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2328721?v=4", "type": "User" }, { "login": "xuvez", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7051151?v=4", "type": "User" }, { "login": "jeffryadones", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/22254071?v=4", "type": "User" }, { "login": "NVolcz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1667690?v=4", "type": "User" }, { "login": "ufocoder", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2094547?v=4", "type": "User" }, { "login": "Kalhama", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19395917?v=4", "type": "User" }, { "login": "DeKaN", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1156370?v=4", "type": "User" }, { "login": "aancw", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6284204?v=4", "type": "User" }, { "login": "arpitx165", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12485895?v=4", "type": "User" }, { "login": "bcoles", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "ewilded", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1158719?v=4", "type": "User" }, { "login": "gkanishk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33570551?v=4", "type": "User" }, { "login": "prabhath6", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10682370?v=4", "type": "User" }, { "login": "grimd34th", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/934782?v=4", "type": "User" }, { "login": "jarek-bir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/92228332?v=4", "type": "User" }, { "login": "sky-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5621185?v=4", "type": "User" }, { "login": "wavvs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30052411?v=4", "type": "User" } ] }, { "repo": "h4r5h1t/webcopilot", "name": "webcopilot", "owner": "h4r5h1t", "url": "https://github.com/h4r5h1t/webcopilot", "stars": 1292, "language": "Shell", "description": "An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Harshit Raj Singh", "cardId": "896d71d6f80f003a", "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2b1a74cbe530", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2024-07-18T14:44:09Z", "archived": false, "topContributors": [ { "login": "h4r5h1t", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/30245456?v=4", "type": "User" }, { "login": "0x71rex", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/64193086?v=4", "type": "User" }, { "login": "mr-vill4in", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51061936?v=4", "type": "User" }, { "login": "Pxmme", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22918318?v=4", "type": "User" }, { "login": "CicadaMikoto", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6219274?v=4", "type": "User" } ] }, { "repo": "ghostpack/keethief", "name": "KeeThief", "owner": "GhostPack", "url": "https://github.com/GhostPack/KeeThief", "id": "e0247eb58936", "stars": 956, "language": "C#", "description": "Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory.", "type": "tool", "pushedAt": "2020-11-18T18:35:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 3, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "kyleavery/thirdeye", "name": "thirdeye", "owner": "kyleavery", "url": "https://github.com/kyleavery/ThirdEye", "stars": 38, "language": "Assembly", "description": "Weaponizing CLRvoyance for Post-Ex .NET Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64c00ee12157", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-15T04:38:56Z", "archived": false, "topContributors": [ { "login": "kyleavery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "mgeeky/ntfs-journal-viewer", "name": "ntfs-journal-viewer", "owner": "mgeeky", "url": "https://github.com/mgeeky/ntfs-journal-viewer", "stars": 38, "language": "C", "description": "Utterly simple NTFS Journal dumping utility. Handy when it comes to Computer Forensics and Malware Forensics Ops.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7eb7d4d39029", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-03-21T23:34:33Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "scwuaptx/ais3-2017", "name": "AIS3-2017", "owner": "scwuaptx", "url": "https://github.com/scwuaptx/AIS3-2017", "id": "60783df446aa", "stars": 38, "language": "Python", "description": "AIS3 2017 Binary Exploitation", "type": "tool", "pushedAt": "2017-09-03T10:41:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Angelboy", "cardId": "b7d5ac7acf774706", "avatar": "https://avatars.githubusercontent.com/u/3533327?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "scwuaptx", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3533327?v=4", "type": "User" } ] }, { "repo": "ddworken/googlephotosstorage", "name": "GooglePhotosStorage", "owner": "ddworken", "url": "https://github.com/ddworken/GooglePhotosStorage", "id": "897cf3c92768", "stars": 38, "language": "Python", "description": "Exploiting Google Photos for Fun and Profit", "type": "tool", "pushedAt": "2017-11-26T02:51:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "David Dworken", "cardId": "c09dd6fa1b9718a6", "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ddworken", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "type": "User" }, { "login": "KenSharp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13607576?v=4", "type": "User" } ] }, { "repo": "jlleitschuh/bulk-security-pr-generator", "name": "bulk-security-pr-generator", "owner": "JLLeitschuh", "url": "https://github.com/JLLeitschuh/bulk-security-pr-generator", "id": "db741789af48", "stars": 38, "language": "Python", "description": "Generate thousands of pull requests to fix widespread security vulnerabilities across GitHub.", "type": "tool", "pushedAt": "2025-05-14T04:07:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jonathan Leitschuh", "cardId": "dc3c42eee9426138", "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "JLLeitschuh", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "type": "User" }, { "login": "esbena", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1924993?v=4", "type": "User" }, { "login": "sambsnyd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8549033?v=4", "type": "User" }, { "login": "pixeebot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/193111?v=4", "type": "Bot" }, { "login": "pixeebot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23113631?v=4", "type": "User" } ] }, { "repo": "brompwnie/cve-2020-5260", "name": "cve-2020-5260", "owner": "brompwnie", "url": "https://github.com/brompwnie/cve-2020-5260", "stars": 37, "language": "Go", "description": "A HTTP PoC Endpoint for cve-2020-5260 which can be deployed to Heroku", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "426d2a6ac540", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-16T09:47:38Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "simonw/asyncinject", "name": "asyncinject", "owner": "simonw", "url": "https://github.com/simonw/asyncinject", "stars": 37, "language": "Python", "description": "Run async workflows using pytest-fixtures-style dependency injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Simon Willison", "cardId": "f2d582bd23ffb37b", "avatar": "https://avatars.githubusercontent.com/u/9599?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "10a1203f85e3", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-11T06:28:08Z", "archived": false, "topContributors": [ { "login": "simonw", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/9599?v=4", "type": "User" }, { "login": "adriangb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1755071?v=4", "type": "User" } ] }, { "repo": "lauriewired/objectivebythesea2024", "name": "ObjectiveByTheSea2024", "owner": "LaurieWired", "url": "https://github.com/LaurieWired/ObjectiveByTheSea2024", "id": "28733a342333", "stars": 37, "language": null, "description": "Notes and slides for my 2024 Objective by the Sea talk on iOS decompilation", "type": "tool", "pushedAt": "2024-12-17T20:01:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "LaurieWired", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "ghidraninja/piodisasm", "name": "piodisasm", "owner": "ghidraninja", "url": "https://github.com/ghidraninja/piodisasm", "id": "2ef6cfed4f2c", "stars": 37, "language": "Python", "description": "A disassembler for the RP2040 Programmable I/O State-machine!", "type": "tool", "pushedAt": "2022-12-06T12:39:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Thomas Roth", "cardId": "a36a75654c36fa11", "avatar": "https://avatars.githubusercontent.com/u/48321160?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "nezza", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/208596?v=4", "type": "User" }, { "login": "johshoff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/353935?v=4", "type": "User" } ] }, { "repo": "d4stiny/jloadlibrary", "name": "jloadlibrary", "owner": "d4stiny", "url": "https://github.com/D4stiny/JLoadLibrary", "stars": 36, "language": "Java", "description": "LoadLibrary DLL Injector Proof-of-Concept in Java", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "32071148c515", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-10-16T02:26:56Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "brompwnie/cve-2019-5418-scanner", "name": "cve-2019-5418-scanner", "owner": "brompwnie", "url": "https://github.com/brompwnie/CVE-2019-5418-Scanner", "stars": 36, "language": "Go", "description": "A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "66450c745669", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-21T17:26:06Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "otterhacker/awsdoor", "name": "awsdoor", "owner": "otterhacker", "url": "https://github.com/OtterHacker/AWSDoor", "stars": 36, "language": "Python", "description": "AWSDoor is a red team automation tool designed to simulate advanced attacker behavior in AWS environments", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yoann Dequeker", "cardId": "611896755a737879", "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "03436f2fa361", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-17T07:09:14Z", "archived": false, "topContributors": [ { "login": "OtterHacker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4", "type": "User" } ] }, { "repo": "saelo/33c3ctf-repl", "name": "33c3ctf-repl", "owner": "saelo", "url": "https://github.com/saelo/33c3ctf-repl", "stars": 36, "language": "Python", "description": "Code and exploit for the \"read-eval-pwn loop\" challenge of 33C3 CTF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samuel Groß", "cardId": "6b9bf5a8c700c26e", "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ef92b151639", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-31T14:36:13Z", "archived": false, "topContributors": [ { "login": "saelo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2453290?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/nippertool", "name": "nippertool", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/nippertool", "stars": 36, "language": "Go", "description": "Modern exploit in Golang for ancient Nagra / Dish Network cards.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "43ebee8b85df", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-15T18:40:09Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" } ] }, { "repo": "jduck/addjsif", "name": "addjsif", "owner": "jduck", "url": "https://github.com/jduck/addjsif", "stars": 36, "language": "Ruby", "description": "Metasploit Exploit Module for the Android addJavascriptInterface Issue (MITM)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "78c0cac30dc2", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2015-01-15T05:51:30Z", "archived": false, "topContributors": [ { "login": "jduck", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" }, { "login": "d3vilbox", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4140535?v=4", "type": "User" } ] }, { "repo": "mvelazc0/sharpsharefinder", "name": "sharpsharefinder", "owner": "mvelazc0", "url": "https://github.com/mvelazc0/SharpShareFinder", "stars": 36, "language": "C#", "description": "SharpShareFinder is a minimalistic network share discovery POC designed to enumerate shares in Windows Active Directory networks leveraging .NET parallelism.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauricio Velazco", "cardId": "aef4319d82bcb778", "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1d4ede0307bf", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-10T02:44:37Z", "archived": false, "topContributors": [ { "login": "mvelazc0", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/dfuexplorer", "name": "dfuexplorer", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/dfuexplorer", "id": "cd20a75fc9dd", "stars": 36, "language": "C++", "description": "USB DFU Client for Reverse Engineers", "type": "tool", "pushedAt": "2026-02-25T01:21:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "travisgoodspeed", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" } ] }, { "repo": "actuator/bsides-security-rochester-2023", "name": "BSIDES-Security-Rochester-2023", "owner": "actuator", "url": "https://github.com/actuator/BSIDES-Security-Rochester-2023", "id": "1bc7903a15d3", "stars": 36, "language": null, "description": "Hardware Hacking: A Brief Primer on Reverse Engineering Bluetooth Transmissions", "type": "tool", "pushedAt": "2025-04-05T15:44:44Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "actuator", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "joelgmsec/aikido", "name": "aikido", "owner": "joelgmsec", "url": "https://github.com/JoelGMSec/AIkido", "stars": 35, "language": "Python", "description": "Fake API Server for AI-Bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e8faba80770", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-05T14:58:38Z", "archived": false, "topContributors": [ { "login": "JoelGMSec", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" } ] }, { "repo": "ohjeongwook/repack", "name": "repack", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/REPack", "stars": 35, "language": null, "description": "Reverse engineering toolkit for exploit/malware analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b436ad541781", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-10T23:52:43Z", "archived": false, "topContributors": [ { "login": "ohjeongwook", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "lockfale/dotnetavbypass-master", "name": "dotnetavbypass-master", "owner": "lockfale", "url": "https://github.com/lockfale/DotNetAVBypass-Master", "stars": 35, "language": "C#", "description": "C# AV bypass jank", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "197c08a4ac2f", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2021-02-09T02:58:47Z", "archived": false, "topContributors": [ { "login": "smrk3r", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2893982?v=4", "type": "User" }, { "login": "sempf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/383722?v=4", "type": "User" }, { "login": "digital-shokunin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/913856?v=4", "type": "User" } ] }, { "repo": "nahamsec/wp-cve-intel", "name": "wp-cve-intel", "owner": "nahamsec", "url": "https://github.com/nahamsec/wp-cve-intel", "stars": 35, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ben Sadeghipour", "cardId": "a04c3b9e3a86a135", "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b0fa2a446ce4", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-07T16:31:15Z", "archived": false, "topContributors": [ { "login": "nahamsec", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/9853732?v=4", "type": "User" }, { "login": "claude", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" } ] }, { "repo": "bgeesaman/subpath-exploit", "name": "subpath-exploit", "owner": "bgeesaman", "url": "https://github.com/bgeesaman/subpath-exploit", "stars": 35, "language": "Shell", "description": "Writeup of CVE-2017-1002101 with sample \"exploit\"/escape", "type": "tool", "lanes": [ "2" ], "author": { "name": "Brad Geesaman", "cardId": "e9ea317205f8c648", "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "68418ab98dcb", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-23T13:41:20Z", "archived": false, "topContributors": [ { "login": "bgeesaman", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4", "type": "User" } ] }, { "repo": "0xdabbad00/openhips", "name": "OpenHIPS", "owner": "0xdabbad00", "url": "https://github.com/0xdabbad00/OpenHIPS", "id": "24866f6fdf1b", "stars": 35, "language": "C++", "description": "OpenHIPS prevents exploitation of Windows systems", "type": "tool", "pushedAt": "2013-01-07T19:58:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Scott Piper", "cardId": "1ada788db852c671", "avatar": "https://avatars.githubusercontent.com/u/1979334?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xdabbad00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1979334?v=4", "type": "User" } ] }, { "repo": "tijme/reverse-engineering", "name": "reverse-engineering", "owner": "tijme", "url": "https://github.com/tijme/reverse-engineering", "id": "eb54fc6d6d73", "stars": 35, "language": "C", "description": "This repository contains some of the executables that I've cracked.", "type": "tool", "pushedAt": "2022-06-23T06:58:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tijme", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "danmcinerney/fuzzstrings", "name": "fuzzstrings", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/FuzzStrings", "stars": 34, "language": "Python", "description": "Simple, hand-picked list of fuzz strings", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c2db41c5357e", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-11-05T06:42:56Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "johnhammond/misfortune-ctf-challenge", "name": "misfortune-ctf-challenge", "owner": "JohnHammond", "url": "https://github.com/JohnHammond/misfortune-ctf-challenge", "id": "affe4e2a4020", "stars": 34, "language": "Dockerfile", "description": "A small binary exploitation challenge to demonstrate a typical return2libc attack", "type": "tool", "pushedAt": "2023-04-12T09:05:04Z", "archived": false, "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JohnHammond", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "olafhartong/bhceupload", "name": "bhceupload", "owner": "olafhartong", "url": "https://github.com/olafhartong/BHCEupload", "stars": 33, "language": "Go", "description": "A small go tool to upload JSON files to the BloodHound community edition API", "type": "tool", "lanes": [ "2" ], "author": { "name": "Olaf Hartong", "cardId": "0f33b290f82b77b4", "avatar": "https://avatars.githubusercontent.com/u/8149899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9f42c2206a23", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-05-29T13:44:42Z", "archived": false, "topContributors": [ { "login": "olafhartong", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8149899?v=4", "type": "User" }, { "login": "gijsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/207905?v=4", "type": "User" } ] }, { "repo": "jofpin/compaxss", "name": "compaxss", "owner": "jofpin", "url": "https://github.com/jofpin/compaXSS", "stars": 33, "language": "Python", "description": "Bypass XSS Reflected Cross-site scripting", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "14af193a953e", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2015-10-15T20:08:07Z", "archived": false, "topContributors": [ { "login": "trollker", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/10320161?v=4", "type": "User" }, { "login": "bitdeli-chef", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3092978?v=4", "type": "User" } ] }, { "repo": "leo4j/sh3ller", "name": "sh3ller", "owner": "leo4j", "url": "https://github.com/Leo4j/Sh3ller", "stars": 33, "language": "PowerShell", "description": "Sh3ller is a lightweight C2 framework in its simplest form.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7878b977d55b", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-05T08:11:58Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "evanmcbroom/fuse-loader", "name": "fuse-loader", "owner": "evanmcbroom", "url": "https://github.com/EvanMcBroom/fuse-loader", "stars": 33, "language": "C", "description": "Load a dynamic library from memory using a fuse mount", "type": "tool", "lanes": [ "2" ], "author": { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "966e6b2d3c06", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-15T23:59:50Z", "archived": false, "topContributors": [ { "login": "EvanMcBroom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" } ] }, { "repo": "bgraydon/keyspace", "name": "keyspace", "owner": "bgraydon", "url": "https://github.com/bgraydon/keyspace", "id": "67913ee755bc", "stars": 33, "language": "JavaScript", "description": "Tool for red teamers to decode keys and master keys from side channel information. Released at DEF CON 28.", "type": "tool", "pushedAt": "2020-08-23T19:45:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Bill Graydon", "cardId": "00ef92a38df0e4e6", "avatar": "https://avatars.githubusercontent.com/u/47360306?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bgraydon", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/47360306?v=4", "type": "User" } ] }, { "repo": "mchow01/vulnerablevoterdatabase", "name": "VulnerableVoterDatabase", "owner": "mchow01", "url": "https://github.com/mchow01/VulnerableVoterDatabase", "id": "371d8de05f0a", "stars": 33, "language": "PHP", "description": "A deliberately insecure voter database", "type": "tool", "pushedAt": "2025-10-12T07:22:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ming Chow", "cardId": "9ae6a6e4c17b23ec", "avatar": "https://avatars.githubusercontent.com/u/388704?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mchow01", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/388704?v=4", "type": "User" } ] }, { "repo": "0xdea/from-day-zero-to-zero-day", "name": "from-day-zero-to-zero-day", "owner": "0xdea", "url": "https://github.com/0xdea/from-day-zero-to-zero-day", "id": "65ac71c9679a", "stars": 33, "language": "C", "description": "My code and notes for \"From Day Zero to Zero Day\", a book on vulnerability research by Eugene Lim.", "type": "tool", "pushedAt": "2025-11-10T13:22:01Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "0xdea", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" }, { "login": "chf0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/163881601?v=4", "type": "User" }, { "login": "hatoo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1667746?v=4", "type": "User" }, { "login": "rainbowpigeon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/113040852?v=4", "type": "User" } ] }, { "repo": "stealthsploit/hashcatalyst", "name": "hashcatalyst", "owner": "stealthsploit", "url": "https://github.com/stealthsploit/Hashcatalyst", "stars": 32, "language": "Batchfile", "description": "Hashcat wrapper for attack chain automation and enhanced wordlist generation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Will Hunt", "cardId": "0a21832ba2dcad80", "avatar": "https://avatars.githubusercontent.com/u/26301152?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "358d6e1ade13", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-15T22:17:40Z", "archived": false, "topContributors": [ { "login": "stealthsploit", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/26301152?v=4", "type": "User" } ] }, { "repo": "transilienceai/whitney", "name": "whitney", "owner": "transilienceai", "url": "https://github.com/transilienceai/whitney", "stars": 32, "language": "Python", "description": "Open-source static AI security scanner — prompt injection across 15 source types, broken LLM-as-judge detection, AI dependency SBOM. Beats Semgrep AI ruleset 2x on a labelled corpus.", "type": "tool", "lanes": [ "2" ], "author": { "name": "KK Mookhey", "cardId": "c82c492f97a295af", "avatar": "https://avatars.githubusercontent.com/u/164570233?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4ba417d3db41", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 0, "contributors": [], "pushedAt": "2026-04-26T06:45:07Z", "archived": false, "topContributors": [] }, { "repo": "abhisek/afl-in-the-cloud", "name": "afl-in-the-cloud", "owner": "abhisek", "url": "https://github.com/abhisek/afl-in-the-cloud", "stars": 32, "language": "HCL", "description": "Proof of concept implementation of fuzzing workload using AFL as the fuzzer and Terraform to codify infrastructure", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "532a8e7cbd4f", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-08-22T11:05:02Z", "archived": false, "topContributors": [ { "login": "abhisek", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" } ] }, { "repo": "k3vinlusec/bluefrag_cve-2020-0022", "name": "bluefrag_cve-2020-0022", "owner": "k3vinlusec", "url": "https://github.com/k3vinlusec/Bluefrag_CVE-2020-0022", "stars": 32, "language": "Python", "description": "This is a RCE bluetooth vulnerability on Android 8.0 and 9.0", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kai Lu", "cardId": "59ce5fba99a2f44e", "avatar": "https://avatars.githubusercontent.com/u/19988136?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f24d2fdcd2c7", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-23T04:46:45Z", "archived": false, "topContributors": [ { "login": "k3vinlusec", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/19988136?v=4", "type": "User" } ] }, { "repo": "rocky/ssa-interp", "name": "ssa-interp", "owner": "rocky", "url": "https://github.com/rocky/ssa-interp", "stars": 32, "language": "Go", "description": "A Go SSA Debugger and Interpreter", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1b41f0107813", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-04-10T14:19:29Z", "archived": false, "topContributors": [ { "login": "rocky", "c": 436, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" } ] }, { "repo": "deletehead/octoc2t", "name": "octoc2t", "owner": "deletehead", "url": "https://github.com/deletehead/OctoC2t", "stars": 32, "language": "Python", "description": "Simple C2 using GitHub repository as comms channel.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jake Mayhew", "cardId": "96557237148df963", "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "20cad5aab4bd", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-26T14:14:32Z", "archived": false, "topContributors": [ { "login": "deletehead", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4", "type": "User" } ] }, { "repo": "mgeeky/liset", "name": "liset", "owner": "mgeeky", "url": "https://github.com/mgeeky/LISET", "stars": 32, "language": "Batchfile", "description": "Light System Examination Toolkit (LISET) - logs & activity & configuration gathering utility that comes handy in fast Windows incident response (either forensic or malware oriented).", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2ddd566e1630", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-08-29T11:56:08Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "david3107/squatm3gator", "name": "squatm3gator", "owner": "david3107", "url": "https://github.com/david3107/squatm3gator", "id": "486824ae79fb", "stars": 32, "language": "JavaScript", "description": "Squatm3gator is a complete web solution based on the python tool squatm3, designed to enumerate available domains generated modifying the original domain name through different cybersquatting techniqu", "type": "tool", "pushedAt": "2026-01-21T12:51:57Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Davide Cioccia", "cardId": "c28aff3317432c34", "avatar": "https://avatars.githubusercontent.com/u/20040740?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "david3107", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/20040740?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "staaldraad/async_wake_ios", "name": "async_wake_ios", "owner": "staaldraad", "url": "https://github.com/staaldraad/async_wake_ios", "stars": 31, "language": "C", "description": "iOS 11.1.2 kernel exploit and PoC local kernel debugger by @i41nbeer (https://bugs.chromium.org/p/project-zero/issues/detail?id=1417)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "567f661cc0bb", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-12-22T10:02:46Z", "archived": false, "topContributors": [ { "login": "staaldraad", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/md380tool", "name": "md380tool", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/MD380Tool", "stars": 31, "language": "Java", "description": "An Android client for the patched 'md380tools' firmware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6939f623a38b", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2017-05-16T00:50:27Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" }, { "login": "gourneau", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30399?v=4", "type": "User" } ] }, { "repo": "ghidraninja/game-boy-pico-link", "name": "game-boy-pico-link", "owner": "ghidraninja", "url": "https://github.com/ghidraninja/game-boy-pico-link", "stars": 31, "language": "C", "description": "Firmware for the Raspberry Pi Pico to talk the Game Boy link cable protocol.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Thomas Roth", "cardId": "a36a75654c36fa11", "avatar": "https://avatars.githubusercontent.com/u/48321160?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f0aea60c2237", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-27T14:03:34Z", "archived": false, "topContributors": [ { "login": "nezza", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/208596?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/hashonymize", "name": "hashonymize", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/hashonymize", "stars": 31, "language": "Python", "description": "Anonymize your hashcat formatted files for online cracking", "type": "tool", "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "022d8cb82346", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-10-27T20:56:40Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" } ] }, { "repo": "jayesther/ktm_pocs", "name": "ktm_pocs", "owner": "jayesther", "url": "https://github.com/jayesther/KTM_POCS", "stars": 31, "language": "C", "description": "Reports and POCs for CVE 2024-43570 and CVE-2024-43535", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jael Koh", "cardId": "cade3ff485c6faf7", "avatar": "https://avatars.githubusercontent.com/u/59216143?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30004713a35d", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-07T09:42:45Z", "archived": false, "topContributors": [ { "login": "jayesther", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59216143?v=4", "type": "User" } ] }, { "repo": "rocky/elisp-decompile", "name": "elisp-decompile", "owner": "rocky", "url": "https://github.com/rocky/elisp-decompile", "id": "c4596010b3bb", "stars": 31, "language": "Python", "description": "Emacs Lisp Decompiler", "type": "tool", "pushedAt": "2022-11-30T00:40:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rocky", "c": 200, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "CeleritasCelery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10623982?v=4", "type": "User" } ] }, { "repo": "lockfale/arf-chrome", "name": "ARF-chrome", "owner": "lockfale", "url": "https://github.com/lockfale/ARF-chrome", "id": "64ddc54f8ed9", "stars": 31, "language": "JavaScript", "description": "Advanced Reconnaissance Framework — Google Chrome extension", "type": "tool", "pushedAt": "2016-03-04T08:20:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "treefort", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1132492?v=4", "type": "User" }, { "login": "s0lray", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16158727?v=4", "type": "User" } ] }, { "repo": "jayesther/osep_osed_tools", "name": "osep_osed_tools", "owner": "jayesther", "url": "https://github.com/jayesther/OSEP_OSED_TOOLS", "stars": 30, "language": "Python", "description": "Tooling for the OffSec Experienced Pentester (OSEP) and OffSec Exploit Developer (OSED) course", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jael Koh", "cardId": "cade3ff485c6faf7", "avatar": "https://avatars.githubusercontent.com/u/59216143?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b9dced50a76", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-13T03:35:13Z", "archived": false, "topContributors": [ { "login": "jayesther", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/59216143?v=4", "type": "User" } ] }, { "repo": "lauriewired/recon2024", "name": "recon2024", "owner": "lauriewired", "url": "https://github.com/LaurieWired/REcon2024", "stars": 30, "language": null, "description": "This contains notes and slides for my REcon 2024 talk on Auto Unpacking Android Malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "LaurieWired", "cardId": "1c19f1e77d801eec", "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "36a0f0ab6a49", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-29T10:32:10Z", "archived": false, "topContributors": [ { "login": "LaurieWired", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/123765654?v=4", "type": "User" } ] }, { "repo": "kevin2600/rfidler-hid26-bruteforce", "name": "rfidler-hid26-bruteforce", "owner": "kevin2600", "url": "https://github.com/kevin2600/RFIDler-HID26-BruteForce", "stars": 30, "language": "Python", "description": "Proof of Concept of HID26 Bruteforce", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kevin2600", "cardId": "862bac92e6c574cb", "avatar": "https://avatars.githubusercontent.com/u/13021979?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6cd3f319beb6", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-20T19:18:39Z", "archived": false, "topContributors": [ { "login": "kevin2600", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13021979?v=4", "type": "User" } ] }, { "repo": "dump-guy/invoke-detectiteasy", "name": "Invoke-DetectItEasy", "owner": "Dump-GUY", "url": "https://github.com/Dump-GUY/Invoke-DetectItEasy", "id": "bbd05f36d8fe", "stars": 30, "language": "PowerShell", "description": "Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.", "type": "tool", "pushedAt": "2022-02-15T13:33:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Dump-GUY", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "parzel/damn-vulnerable-woocommerce-plugins", "name": "Damn-Vulnerable-WooCommerce-Plugins", "owner": "parzel", "url": "https://github.com/parzel/Damn-Vulnerable-WooCommerce-Plugins", "id": "9f815dbdc14d", "stars": 30, "language": "Dockerfile", "description": "This is a docker environment ready set up for multiple WooCommerce Plugin vulnerabilities.", "type": "tool", "pushedAt": "2020-12-01T19:05:37Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "parzel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "roobixx/eventlogforredteams", "name": "eventlogforredteams", "owner": "roobixx", "url": "https://github.com/roobixx/EventLogForRedTeams", "stars": 29, "language": "C#", "description": "Simple PoC from Malicious Payload Injection from Windows Event Log Entry", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Fowler", "cardId": "2c72b28add218157", "avatar": "https://avatars.githubusercontent.com/u/5069142?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e3bc545162e5", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-08T19:18:32Z", "archived": false, "topContributors": [ { "login": "roobixx", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5069142?v=4", "type": "User" } ] }, { "repo": "danmcinerney/cookiejack", "name": "cookiejack", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/cookiejack", "stars": 29, "language": "Python", "description": "ARP spoof then session jack within your browser", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f644b46a9523", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-02-10T07:34:09Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "jofpin/ifa", "name": "ifa", "owner": "jofpin", "url": "https://github.com/jofpin/IFA", "stars": 28, "language": "JavaScript", "description": "PoC exposing a critical IndexedDB vulnerability that enables a disk flooding attack by exploiting the lack of restrictions.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "477d6ff3e5fe", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-21T23:11:48Z", "archived": false, "topContributors": [ { "login": "jofpin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4", "type": "User" } ] }, { "repo": "thuyimingli/dvbw", "name": "dvbw", "owner": "thuyimingli", "url": "https://github.com/THUYimingLi/DVBW", "stars": 28, "language": "Python", "description": "This is the official implementation of our paper 'Black-box Dataset Ownership Verification via Backdoor Watermarking'.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yiming Li", "cardId": "17e4afe2a5635d60", "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1103f1e7c2a0", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-01T03:33:59Z", "archived": false, "topContributors": [ { "login": "THUYimingLi", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4", "type": "User" }, { "login": "MingyanZHU", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36833128?v=4", "type": "User" } ] }, { "repo": "salesforce/carbonj", "name": "carbonj", "owner": "salesforce", "url": "https://github.com/salesforce/carbonj", "stars": 28, "language": "Java", "description": "CarbonJ - A high-performance drop-in replacement to carbon-relay and carbon-cache", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kinnaird McQuade", "cardId": "443a4fef2a4c5c02", "avatar": "https://avatars.githubusercontent.com/u/453694?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3c251daa6812", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 21, "contributors": [], "pushedAt": "2026-07-01T02:35:14Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 761, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "chrbayer84", "c": 99, "avatar": "https://avatars.githubusercontent.com/u/773005?v=4", "type": "User" }, { "login": "sholavanalli", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/1518886?v=4", "type": "User" }, { "login": "peterzxu-crm", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/136388862?v=4", "type": "User" }, { "login": "slodha", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/6911977?v=4", "type": "User" }, { "login": "pdmoineau", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/138155395?v=4", "type": "User" }, { "login": "ashnacoder", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/134605883?v=4", "type": "User" }, { "login": "peterzxu", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/124637075?v=4", "type": "User" }, { "login": "ashncoder", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2395186?v=4", "type": "User" }, { "login": "twoversionsofme", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16784650?v=4", "type": "User" }, { "login": "sbrainovich", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/670015?v=4", "type": "User" }, { "login": "diwanshu-crm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/141445500?v=4", "type": "User" }, { "login": "gkulkarni1987", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/95777250?v=4", "type": "User" }, { "login": "jimjag", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84076?v=4", "type": "User" }, { "login": "joepallotta39", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4808238?v=4", "type": "User" }, { "login": "wundrian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1598181?v=4", "type": "User" }, { "login": "kmd17", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9286607?v=4", "type": "User" }, { "login": "rushipatel-crm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/107273470?v=4", "type": "User" }, { "login": "rvarati12", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/136729139?v=4", "type": "User" }, { "login": "rithikavarati", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/289021136?v=4", "type": "User" }, { "login": "svc-scm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48930134?v=4", "type": "User" } ] }, { "repo": "occamsxor/sim-ba", "name": "sim-ba", "owner": "occamsxor", "url": "https://github.com/OccamsXor/sim-ba", "stars": 28, "language": "C++", "description": "(Sim)ulate (Ba)zar Loader", "type": "tool", "lanes": [ "2" ], "author": { "name": "Barış Akkaya", "cardId": "7d9c683fea5597da", "avatar": "https://avatars.githubusercontent.com/u/34008990?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e46076b6dc2", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-15T23:58:50Z", "archived": false, "topContributors": [ { "login": "OccamsXor", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/34008990?v=4", "type": "User" } ] }, { "repo": "johndmcmaster/libxgecu", "name": "libxgecu", "owner": "johndmcmaster", "url": "https://github.com/JohnDMcMaster/libxgecu", "stars": 28, "language": "Python", "description": "Reference code to talk to stock xgecu firmware (T48, T56, etc)", "type": "tool", "lanes": [ "2" ], "author": { "name": "John McMaster", "cardId": "868ce8f4bdce1ea6", "avatar": "https://avatars.githubusercontent.com/u/222171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf58f8d31ad6", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Tihmstar", "cardId": "f757d3b21c2ac97c", "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4", "login": "tihmstar" } ], "pushedAt": "2024-07-02T06:36:22Z", "archived": false, "topContributors": [ { "login": "JohnDMcMaster", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/222171?v=4", "type": "User" }, { "login": "pdietl", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10335942?v=4", "type": "User" }, { "login": "tbejos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16939084?v=4", "type": "User" }, { "login": "tihmstar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4", "type": "User" } ] }, { "repo": "drneox/nutcracker", "name": "nutcracker", "owner": "drneox", "url": "https://github.com/drneox/nutcracker", "stars": 27, "language": "Python", "description": "Nutcracker is a powerful, modular and extensible framework designed for mobile security analysis and offensive threat intelligence. Detects and bypasses anti-root/RASP protections, analyzes insecure m", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Ganoza", "cardId": "0a9160f0ed9a0ea4", "avatar": "https://avatars.githubusercontent.com/u/1235287?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d0ae09fe63ca", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-05-11T05:08:26Z", "archived": false, "topContributors": [ { "login": "drneox", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/1235287?v=4", "type": "User" }, { "login": "Copilot", "c": 5, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "Hiteek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55644749?v=4", "type": "User" } ] }, { "repo": "brompwnie/ed", "name": "ed", "owner": "brompwnie", "url": "https://github.com/brompwnie/ed", "stars": 27, "language": "Go", "description": "Ed is a tool used to identify and exploit accessible UNIX Domain Sockets", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6444c63cff4a", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-11T23:52:12Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "zer0mem/vadscanner", "name": "vadscanner", "owner": "zer0mem", "url": "https://github.com/zer0mem/VadScanner", "stars": 27, "language": "C++", "description": "PoC of BOOST-ed _EPROCESS.VadRoot iterating", "type": "tool", "lanes": [ "2" ], "author": { "name": "Peter Hlavaty", "cardId": "8960b7aa8e89e8eb", "avatar": "https://avatars.githubusercontent.com/u/4034536?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2bf3459647e2", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-05-21T10:06:45Z", "archived": false, "topContributors": [ { "login": "zer0mem", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4034536?v=4", "type": "User" } ] }, { "repo": "bitdefender/lvi-lfb-attack-poc", "name": "lvi-lfb-attack-poc", "owner": "bitdefender", "url": "https://github.com/bitdefender/lvi-lfb-attack-poc", "stars": 26, "language": "C", "description": "This repository contains the sources and documentation for the LVI-LFB Control Flow Hijacking attack PoC (CVE-2020-0551)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "096fa794597d", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-10T17:10:12Z", "archived": false, "topContributors": [ { "login": "vlutas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/49196812?v=4", "type": "User" } ] }, { "repo": "boredpentester/abl_rop", "name": "abl_rop", "owner": "boredpentester", "url": "https://github.com/boredpentester/ABL_ROP", "stars": 7, "language": "Jupyter Notebook", "description": "Experimenting with CVE-2022-20120 (Pixel Bootloader / ABL) using Unicorn, derived from eShard's emulator at https://github.com/eshard/pixel6-boot/blob/main/run_abl_public.ipynb", "type": "tool", "lanes": [ "2" ], "author": { "name": "boredpentester", "cardId": "a7fbeafdbcdbd297", "avatar": "https://avatars.githubusercontent.com/u/47897567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bca610a9cfc7", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-18T11:00:38Z", "archived": false, "topContributors": [ { "login": "boredpentester", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47897567?v=4", "type": "User" } ] }, { "repo": "hackinglz/push_matrix_tool", "name": "push_matrix_tool", "owner": "hackinglz", "url": "https://github.com/HackingLZ/push_matrix_tool", "stars": 7, "language": "HTML", "description": "Push notification demo based on malware seen in the wild.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2afebe0f1c72", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-25T19:34:19Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/docker_fuzz", "name": "docker_fuzz", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/docker_fuzz", "stars": 7, "language": "Dockerfile", "description": "GH repo for the docker fuzz container that contains all necessary tools to get started with binary fuzzing and debugging", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e9f294768e0a", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-02T22:28:40Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" } ] }, { "repo": "bruce30262/flareon6_nes_ghidra_loader", "name": "flareon6_nes_ghidra_loader", "owner": "bruce30262", "url": "https://github.com/bruce30262/flareon6_NES_ghidra_loader", "stars": 7, "language": "Java", "description": "iNES ghidra loader for Flare-on 6 challenge level 8", "type": "tool", "lanes": [ "2" ], "author": { "name": "bruce30262", "cardId": "04a6b32e757c4fc9", "avatar": "https://avatars.githubusercontent.com/u/4478350?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3b20dd9cf5f7", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-28T08:06:52Z", "archived": false, "topContributors": [ { "login": "bruce30262", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4478350?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/firec2", "name": "firec2", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/firec2", "stars": 7, "language": "Python", "description": "C2 over Firebase Realtime Database", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "02ada39c4816", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-09T13:07:54Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "zephrfish/notproxyshellscanner", "name": "notproxyshellscanner", "owner": "zephrfish", "url": "https://github.com/ZephrFish/NotProxyShellScanner", "stars": 7, "language": "Python", "description": "Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7211c144a16c", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-03-26T16:45:13Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "zcutlip/firmware-parsing", "name": "firmware-parsing", "owner": "zcutlip", "url": "https://github.com/zcutlip/firmware-parsing", "stars": 6, "language": "Python", "description": "Modules to support parsing of firmware headers, etc.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f53022c371ba", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-02-26T20:44:59Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "k0keoyo/driver-loaded-poc", "name": "driver-loaded-poc", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/Driver-Loaded-PoC", "stars": 6, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aa066bd9d585", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-12-21T11:32:10Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "k0keoyo/cve-2017-0038-exp-c-js", "name": "cve-2017-0038-exp-c-js", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/CVE-2017-0038-EXP-C-JS", "stars": 6, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e7cf86631b5", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-03-23T14:07:37Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "hackinglz/psdecode", "name": "psdecode", "owner": "hackinglz", "url": "https://github.com/HackingLZ/psdecode", "stars": 5, "language": "C#", "description": "Compiled .NET 8 PowerShell deobfuscation sandbox — hosts the PS engine to intercept malware execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f51b66d9766", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-18T16:10:41Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/elf_magic", "name": "elf_magic", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/elf_magic", "stars": 5, "language": "Python", "description": "central place for the PoC code for my article", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9ebfb1a8976e", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-06-26T10:54:28Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" } ] }, { "repo": "zcutlip/exploit-tools", "name": "exploit-tools", "owner": "zcutlip", "url": "https://github.com/zcutlip/exploit-tools", "stars": 5, "language": "Python", "description": "Exploit development tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ba11f93758b2", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2013-01-08T02:20:07Z", "archived": false, "topContributors": [] }, { "repo": "aidansteele/matconnect", "name": "matconnect", "owner": "aidansteele", "url": "https://github.com/aidansteele/matconnect", "stars": 5, "language": "Go", "description": "A silly proof-of-concept for VPC network nonsense", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aidan Steele", "cardId": "23bb77f9e3aca89f", "avatar": "https://avatars.githubusercontent.com/u/369053?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da9723c8a8e4", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-22T00:46:40Z", "archived": false, "topContributors": [ { "login": "aidansteele", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/369053?v=4", "type": "User" } ] }, { "repo": "gneeraj97/sniffr", "name": "sniffr", "owner": "gneeraj97", "url": "https://github.com/gneeraj97/sniffr", "stars": 5, "language": "Python", "description": "Find which screenshots are interesting for exploiting during red team engagements using OCR, Entity Recognition and VLMs.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Neeraj Gupta", "cardId": "a2d9c22896674c6e", "avatar": "https://avatars.githubusercontent.com/u/22429174?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "41e31090b9af", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-30T00:11:54Z", "archived": false, "topContributors": [ { "login": "gneeraj97", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/22429174?v=4", "type": "User" } ] }, { "repo": "k0keoyo/hevd-double-free-poc", "name": "hevd-double-free-poc", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/HEVD-Double-Free-PoC", "stars": 5, "language": "C++", "description": "HEVD Double Free PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "07f40fd5cfe3", "score": 25, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-09-30T11:23:12Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "vanhauser-thc/thc-hydra", "name": "thc-hydra", "owner": "vanhauser-thc", "url": "https://github.com/vanhauser-thc/thc-hydra", "stars": 12068, "language": "C", "description": "hydra", "type": "tool", "lanes": [ "1" ], "author": { "name": "vanhauser-thc", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2020/04/22/htb-nineveh.html", "title": "HTB: Nineveh", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2020/06/27/htb-playertwo.html", "title": "HTB: PlayerTwo", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/09/14/htb-luke.html", "title": "HTB: Luke", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2025/12/13/htb-whiterabbit.html", "title": "HTB: WhiteRabbit", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2026/03/30/htb-principal.html", "title": "HTB: Principal", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/10/05/htb-ghoul.html", "title": "HTB: Ghoul", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/12/07/htb-wall.html", "title": "HTB: Wall", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2020/10/31/htb-fuse.html", "title": "HTB: Fuse", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2020/02/29/htb-scavenger.html", "title": "HTB: Scavenger", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/12/14/htb-smasher2.html", "title": "HTB: Smasher2", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/12/21/htb-sea.html", "title": "HTB: Sea", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/09/17/htb-streamio.html", "title": "HTB: StreamIO", "person": "0xdf" } ], "referencedCount": 14, "id": "3c9ff20ce641", "score": 24, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 98, "contributors": [ { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "pushedAt": "2026-07-17T07:21:17Z", "archived": false, "topContributors": [ { "login": "vanhauser-thc", "c": 596, "avatar": "https://avatars.githubusercontent.com/u/7396244?v=4", "type": "User" }, { "login": "dmaciejak", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/2658335?v=4", "type": "User" }, { "login": "Diadlo", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/6306608?v=4", "type": "User" }, { "login": "juaristi", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/12197371?v=4", "type": "User" }, { "login": "e2002e", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/29781855?v=4", "type": "User" }, { "login": "JesusChapman", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/64093255?v=4", "type": "User" }, { "login": "motypi", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/99581166?v=4", "type": "User" }, { "login": "crondaemon", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1926128?v=4", "type": "User" }, { "login": "PetarKaleychev", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/17110973?v=4", "type": "User" }, { "login": "elboulangero", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1942580?v=4", "type": "User" }, { "login": "catatonicprime", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2341167?v=4", "type": "User" }, { "login": "kazkansouh", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/527411?v=4", "type": "User" }, { "login": "animetauren", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1291811?v=4", "type": "User" }, { "login": "tux-mind", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1824153?v=4", "type": "User" }, { "login": "lxcxjxhx", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/144213008?v=4", "type": "User" }, { "login": "mathewmarcus", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/14226006?v=4", "type": "User" }, { "login": "xh4vm", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/87658711?v=4", "type": "User" }, { "login": "veggiespam", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3471999?v=4", "type": "User" }, { "login": "rmaksimov", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "ebrasha", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9009001?v=4", "type": "User" }, { "login": "GitAntoinee", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/52006497?v=4", "type": "User" }, { "login": "lukas227", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/752440?v=4", "type": "User" }, { "login": "renatoalencar", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6964593?v=4", "type": "User" }, { "login": "ultimaiiii", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/89281437?v=4", "type": "User" }, { "login": "Chaose3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/102570977?v=4", "type": "User" }, { "login": "xambroz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/723625?v=4", "type": "User" }, { "login": "tothi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6377720?v=4", "type": "User" }, { "login": "roaris", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/61813626?v=4", "type": "User" }, { "login": "IPv4v6", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22983504?v=4", "type": "User" }, { "login": "s-b-repo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/30941141?v=4", "type": "User" } ] }, { "repo": "anubissec/slae", "name": "slae", "owner": "anubissec", "url": "https://github.com/AnubisSec/SLAE", "stars": 4, "language": "Assembly", "description": "To keep track of SLAE32 progress: SLAE - 1406", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Dylan Makowski", "cardId": "32827bc9451d9cd2", "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4" }, "referencedBy": [ { "url": "https://anubissec.github.io/Creating-Custom-Encoder-and-Decoder/", "title": "Creating Custom Encoder And Decoder", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Custom-Crypter/", "title": "Custom Crypter", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Egghunter-Shellcode/", "title": "Egghunter Shellcode", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Creating-a-TCP-Bind-Shell/", "title": "Creating A Tcp Bind Shell", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Analyzing-MSFVenom-Payloads/", "title": "Analyzing Msfvenom Payloads", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Polymorphic-Shellcode/", "title": "Polymorphic Shellcode", "person": "Dylan Makowski" }, { "url": "https://anubissec.github.io/Creating-a-Reverse-Shell/", "title": "Creating A Reverse Shell", "person": "Dylan Makowski" } ], "referencedCount": 7, "id": "1fc0c9938081", "score": 24, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-12T21:40:18Z", "archived": false, "topContributors": [ { "login": "AnubisSec", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4", "type": "User" } ] }, { "repo": "sigmahq/sigma", "name": "sigma", "owner": "sigmahq", "url": "https://github.com/SigmaHQ/sigma", "stars": 10757, "language": "Python", "description": "Main Sigma Rule Repository", "type": "tool", "lanes": [ "1" ], "author": { "name": "sigmahq", "cardId": null }, "referencedBy": [ { "url": "https://ipurple.team/2025/08/04/lateral-movement-bitlocker/", "title": "Lateral Movement – BitLocker", "person": "Panos Gkatziroulis 🦄" }, { "url": "https://forensicitguy.github.io/squeezing-cobalt-strike-intel-from-shodan/", "title": "Squeezing Cobalt Strike Threat Intelligence from Shodan", "person": "Tony Lambert" } ], "referencedCount": 2, "id": "aad198c4d6d4", "score": 24, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [ { "name": "Mark Morowczynski", "cardId": "1c15a1ce5f4fb4c7", "avatar": "https://avatars.githubusercontent.com/u/16296440?v=4", "login": "MarkMorow" }, { "name": "Roberto Rodriguez", "cardId": "7ba41cffecf12230", "avatar": "https://avatars.githubusercontent.com/u/9653181?v=4", "login": "Cyb3rWard0g" }, { "name": "Samir", "cardId": "e4db282b511228b1", "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4", "login": "sbousseaden" }, { "name": "Wojciech Lesicki", "cardId": "434e20724f999052", "avatar": "https://avatars.githubusercontent.com/u/9679209?v=4", "login": "WojciechLesicki" } ], "pushedAt": "2026-07-16T11:04:54Z", "archived": false, "topContributors": [ { "login": "Neo23x0", "c": 3842, "avatar": "https://avatars.githubusercontent.com/u/2851492?v=4", "type": "User" }, { "login": "frack113", "c": 2127, "avatar": "https://avatars.githubusercontent.com/u/62423083?v=4", "type": "User" }, { "login": "nasbench", "c": 1835, "avatar": "https://avatars.githubusercontent.com/u/8741929?v=4", "type": "User" }, { "login": "thomaspatzke", "c": 1113, "avatar": "https://avatars.githubusercontent.com/u/1845601?v=4", "type": "User" }, { "login": "phantinuss", "c": 548, "avatar": "https://avatars.githubusercontent.com/u/79651203?v=4", "type": "User" }, { "login": "w0rk3r", "c": 484, "avatar": "https://avatars.githubusercontent.com/u/26856693?v=4", "type": "User" }, { "login": "austinsonger", "c": 464, "avatar": "https://avatars.githubusercontent.com/u/26654315?v=4", "type": "User" }, { "login": "yugoslavskiy", "c": 463, "avatar": "https://avatars.githubusercontent.com/u/13090109?v=4", "type": "User" }, { "login": "redsand", "c": 290, "avatar": "https://avatars.githubusercontent.com/u/546291?v=4", "type": "User" }, { "login": "swachchhanda000", "c": 170, "avatar": "https://avatars.githubusercontent.com/u/87493836?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 100, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "BlackB0lt", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/61369934?v=4", "type": "User" }, { "login": "vburov", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/5122558?v=4", "type": "User" }, { "login": "omergunal", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/19760132?v=4", "type": "User" }, { "login": "wagga40", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/6437862?v=4", "type": "User" }, { "login": "d4rk-d4nph3", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/61026070?v=4", "type": "User" }, { "login": "Karneades", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/30265053?v=4", "type": "User" }, { "login": "securepeacock", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/92804416?v=4", "type": "User" }, { "login": "Cyb3rEng", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/88643791?v=4", "type": "User" }, { "login": "zinint", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/28983182?v=4", "type": "User" }, { "login": "qasimqlf", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/30376573?v=4", "type": "User" }, { "login": "elhoim", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/178521?v=4", "type": "User" }, { "login": "zakibro", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/48967550?v=4", "type": "User" }, { "login": "neu5ron", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/6351842?v=4", "type": "User" }, { "login": "yazgoo", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/188526?v=4", "type": "User" }, { "login": "skirankumar", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/18494007?v=4", "type": "User" }, { "login": "blueteam0ps", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/1480956?v=4", "type": "User" }, { "login": "juju4", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/1300844?v=4", "type": "User" }, { "login": "maximelb", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/15742543?v=4", "type": "User" }, { "login": "X-Junior", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/47338567?v=4", "type": "User" } ] }, { "repo": "calebstewart/cve-2021-1675", "name": "cve-2021-1675", "owner": "calebstewart", "url": "https://github.com/calebstewart/CVE-2021-1675", "stars": 1101, "language": "PowerShell", "description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Caleb Stewart", "cardId": "ba74cf38708a6351", "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4" }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2021/07/08/playing-with-printnightmare.html", "title": "Playing with PrintNightmare", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/02/26/htb-driver.html", "title": "HTB: Driver", "person": "0xdf" } ], "referencedCount": 2, "id": "38143958dc55", "score": 24, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "login": "JohnHammond" } ], "pushedAt": "2021-07-05T08:54:06Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" }, { "login": "calebstewart", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4", "type": "User" } ] }, { "repo": "0xacb/cg2015", "name": "cg2015", "owner": "0xacb", "url": "https://github.com/0xacb/cg2015", "stars": 4, "language": "C++", "description": "CG 2015 Project", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Andre Baptista", "cardId": "ca3c2b1401da319e", "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4" }, "referencedBy": [ { "url": "https://0xacb.com/projects/", "title": "Projects", "person": "Andre Baptista" } ], "referencedCount": 1, "id": "bd9167593ad5", "score": 24, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-05-30T13:39:16Z", "archived": false, "topContributors": [ { "login": "davidgomes", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/741621?v=4", "type": "User" }, { "login": "0xacb", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/4028874?v=4", "type": "User" } ] }, { "repo": "k0keoyo/ctf_pwn", "name": "ctf_pwn", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/ctf_pwn", "stars": 3, "language": null, "description": "", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [ { "url": "https://whereisk0shl.top/post/hitb_gsec_ctf_babystack_writeup/", "title": "Whereisk0Shl", "person": "k0shl" } ], "referencedCount": 1, "id": "ee3499e1f0f3", "score": 24, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-08-30T14:22:44Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "zcutlip/mtdwriter", "name": "mtdwriter", "owner": "zcutlip", "url": "https://github.com/zcutlip/mtdwriter", "stars": 3, "language": "C", "description": "Utility from OpenWRT to write a flat image to a /dev/mtd flash memory device.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zachary Cutlip", "cardId": "170768d3ec416ef8", "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4" }, "referencedBy": [ { "url": "https://shadowfile.inode.link/blog/2015/10/broken-abandoned-and-forgotten-code-part-13/", "title": "The Shadow File - Broken, Abandoned, and Forgotten Code, Part 13", "person": "Zachary Cutlip" } ], "referencedCount": 1, "id": "73607b2f300d", "score": 24, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-09-29T00:19:58Z", "archived": false, "topContributors": [ { "login": "zcutlip", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/2158303?v=4", "type": "User" } ] }, { "repo": "redcanaryco/atomic-red-team", "name": "atomic-red-team", "owner": "redcanaryco", "url": "https://github.com/redcanaryco/atomic-red-team", "id": "8ba5fa4a7053", "stars": 12233, "language": "C", "description": "Small and highly portable detection tests based on MITRE's ATT&CK.", "type": "tool", "pushedAt": "2026-07-13T17:20:00Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "redcanaryco", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Carrie Roberts", "cardId": "42edbf3ebbe40f00", "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4", "login": "clr2of8" }, { "name": "Tony Lambert", "cardId": "3647d72050e83db7", "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "login": "ForensicITGuy" }, { "name": "Josh Rickard", "cardId": "28115b6ac479863d", "avatar": "https://avatars.githubusercontent.com/u/10687261?v=4", "login": "MSAdministrator" }, { "name": "Burak Karaduman", "cardId": "b36f787eff2d3d6d", "avatar": "https://avatars.githubusercontent.com/u/36070747?v=4", "login": "krdmnbrk" }, { "name": "Wojciech Lesicki", "cardId": "434e20724f999052", "avatar": "https://avatars.githubusercontent.com/u/9679209?v=4", "login": "WojciechLesicki" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "clr2of8", "c": 347, "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4", "type": "User" }, { "login": "MHaggis", "c": 202, "avatar": "https://avatars.githubusercontent.com/u/5632822?v=4", "type": "User" }, { "login": "josehelps", "c": 173, "avatar": "https://avatars.githubusercontent.com/u/1476868?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 167, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "patel-bhavin", "c": 165, "avatar": "https://avatars.githubusercontent.com/u/7771446?v=4", "type": "User" }, { "login": "cyberbuff", "c": 133, "avatar": "https://avatars.githubusercontent.com/u/27735081?v=4", "type": "User" }, { "login": "brianebeyer", "c": 133, "avatar": "https://avatars.githubusercontent.com/u/800279?v=4", "type": "User" }, { "login": "ForensicITGuy", "c": 123, "avatar": "https://avatars.githubusercontent.com/u/8247090?v=4", "type": "User" }, { "login": "int5-grey", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/57147304?v=4", "type": "User" }, { "login": "tlor89", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/60741301?v=4", "type": "User" }, { "login": "apbeers", "c": 71, "avatar": "https://avatars.githubusercontent.com/u/18449224?v=4", "type": "User" }, { "login": "Adam-Mashinchi", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/78813159?v=4", "type": "User" }, { "login": "Leomon5", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/96517806?v=4", "type": "User" }, { "login": "mgraeber-rc", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/60448025?v=4", "type": "User" }, { "login": "keithmccammon", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/50701?v=4", "type": "User" }, { "login": "frack113", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/62423083?v=4", "type": "User" }, { "login": "cherokeejb", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/35406993?v=4", "type": "User" }, { "login": "cnotin", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "bnt1006", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/22580116?v=4", "type": "User" }, { "login": "dwhite9", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/30122372?v=4", "type": "User" }, { "login": "swelcher", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/32134114?v=4", "type": "User" }, { "login": "0xPrashanthSec", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/40313110?v=4", "type": "User" }, { "login": "tccontre", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/26181693?v=4", "type": "User" }, { "login": "well123cs", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/119821998?v=4", "type": "User" }, { "login": "Andras32", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/24619818?v=4", "type": "User" }, { "login": "MSAdministrator", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/10687261?v=4", "type": "User" }, { "login": "biot-2131", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/121760096?v=4", "type": "User" }, { "login": "D4rkCiph3r", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/102921060?v=4", "type": "User" }, { "login": "abhijose09", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/169142537?v=4", "type": "User" }, { "login": "JimmyAstle", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/10352629?v=4", "type": "User" } ] }, { "repo": "future-architect/vuls", "name": "vuls", "owner": "future-architect", "url": "https://github.com/future-architect/vuls", "id": "a76b30efc637", "stars": 12218, "language": "Go", "description": "Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices", "type": "tool", "pushedAt": "2026-07-16T00:10:55Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "future-architect", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "kotakanbe", "c": 891, "avatar": "https://avatars.githubusercontent.com/u/534611?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 272, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "MaineK00n", "c": 263, "avatar": "https://avatars.githubusercontent.com/u/16035056?v=4", "type": "User" }, { "login": "sadayuki-matsuno", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/8997330?v=4", "type": "User" }, { "login": "shino", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/10225?v=4", "type": "User" }, { "login": "knqyf263", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/2253692?v=4", "type": "User" }, { "login": "kazuminn", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/7457009?v=4", "type": "User" }, { "login": "shigechika", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/235452?v=4", "type": "User" }, { "login": "tomoyamachi", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/890517?v=4", "type": "User" }, { "login": "kl-sinclair", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/26991377?v=4", "type": "User" }, { "login": "usiusi360", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8981769?v=4", "type": "User" }, { "login": "wadda0714", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/47963288?v=4", "type": "User" }, { "login": "mai346", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/33324303?v=4", "type": "User" }, { "login": "novakin", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/10003175?v=4", "type": "User" }, { "login": "Code0x58", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/9309570?v=4", "type": "User" }, { "login": "shopper29", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/39241071?v=4", "type": "User" }, { "login": "tttfrfr2", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/58715442?v=4", "type": "User" }, { "login": "masahiro331", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20438853?v=4", "type": "User" }, { "login": "ymomoi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3599328?v=4", "type": "User" }, { "login": "segatomo", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/29967880?v=4", "type": "User" }, { "login": "future-ryunosuketanai", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56010048?v=4", "type": "User" }, { "login": "jsulinski", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/51166?v=4", "type": "User" }, { "login": "wagde-orca", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/74212046?v=4", "type": "User" }, { "login": "2solt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10811994?v=4", "type": "User" }, { "login": "aomoriringo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/694377?v=4", "type": "User" }, { "login": "kurita0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4556927?v=4", "type": "User" }, { "login": "wagdez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/32863274?v=4", "type": "User" }, { "login": "yoheimuta", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1223268?v=4", "type": "User" }, { "login": "TsubasaKanemitsu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/53025495?v=4", "type": "User" }, { "login": "nakacya", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1404766?v=4", "type": "User" } ] }, { "repo": "sullo/nikto", "name": "nikto", "owner": "sullo", "url": "https://github.com/sullo/nikto", "id": "3fdcfb09b6a5", "stars": 10555, "language": "Perl", "description": "Nikto web server scanner", "type": "tool", "pushedAt": "2026-07-14T19:33:25Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sullo", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 58, "topContributors": [ { "login": "sullo", "c": 1018, "avatar": "https://avatars.githubusercontent.com/u/1474884?v=4", "type": "User" }, { "login": "tautology0", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/3503697?v=4", "type": "User" }, { "login": "opt9", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/192655?v=4", "type": "User" }, { "login": "pvdl", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/1476340?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 21, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "iasdeoupxe", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/39667843?v=4", "type": "User" }, { "login": "wireghoul", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/92534?v=4", "type": "User" }, { "login": "PeterMosmans", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1465302?v=4", "type": "User" }, { "login": "dnet", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" }, { "login": "HuntClauss", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/39533833?v=4", "type": "User" }, { "login": "ethicalhack3r", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/323113?v=4", "type": "User" }, { "login": "NicolasCARPi", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3043706?v=4", "type": "User" }, { "login": "J12934", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13718901?v=4", "type": "User" }, { "login": "sempf", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/383722?v=4", "type": "User" }, { "login": "cs-bhis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/274088251?v=4", "type": "User" }, { "login": "mubix", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "328", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8074218?v=4", "type": "User" }, { "login": "firefart", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "james-otten", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1757212?v=4", "type": "User" }, { "login": "boghicieusebiu", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15194721?v=4", "type": "User" }, { "login": "datadiode", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10423465?v=4", "type": "User" }, { "login": "mattburch", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5597887?v=4", "type": "User" }, { "login": "drwetter", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8036727?v=4", "type": "User" }, { "login": "rbsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3534212?v=4", "type": "User" }, { "login": "Sjord", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/113030?v=4", "type": "User" }, { "login": "khorben", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1081724?v=4", "type": "User" }, { "login": "PaulSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4060683?v=4", "type": "User" }, { "login": "ozeliurs", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59318604?v=4", "type": "User" }, { "login": "mostafahussein", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4104127?v=4", "type": "User" }, { "login": "moxli", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26149616?v=4", "type": "User" } ] }, { "repo": "0x4m4/hexstrike-ai", "name": "hexstrike-ai", "owner": "0x4m4", "url": "https://github.com/0x4m4/hexstrike-ai", "id": "e86988b3be51", "stars": 10368, "language": "Python", "description": "HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug boun", "type": "tool", "pushedAt": "2026-04-27T08:56:07Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "0x4m4", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "0x4m4", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/127080303?v=4", "type": "User" }, { "login": "aoxley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24130283?v=4", "type": "User" } ] }, { "repo": "blacklanternsecurity/bbot", "name": "bbot", "owner": "blacklanternsecurity", "url": "https://github.com/blacklanternsecurity/bbot", "id": "51f5e1789438", "stars": 10166, "language": "Python", "description": "The recursive internet scanner for hackers. 🧡", "type": "tool", "pushedAt": "2026-07-18T03:34:32Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "blacklanternsecurity", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Carson Sallis", "cardId": "50b825ae33184683", "avatar": "https://avatars.githubusercontent.com/u/24899338?v=4", "login": "liquidsec" }, { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 57, "topContributors": [ { "login": "TheTechromancer", "c": 4083, "avatar": "https://avatars.githubusercontent.com/u/20261699?v=4", "type": "User" }, { "login": "liquidsec", "c": 2855, "avatar": "https://avatars.githubusercontent.com/u/24899338?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 355, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "domwhewell-sage", "c": 287, "avatar": "https://avatars.githubusercontent.com/u/122788350?v=4", "type": "User" }, { "login": "blsaccess", "c": 132, "avatar": "https://avatars.githubusercontent.com/u/114500254?v=4", "type": "User" }, { "login": "aconite33", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" }, { "login": "stryker2k2", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/18358246?v=4", "type": "User" }, { "login": "kerrymilan", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/26632151?v=4", "type": "User" }, { "login": "colin-stubbs", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/3059577?v=4", "type": "User" }, { "login": "ausmaster", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/14080242?v=4", "type": "User" }, { "login": "cclauss", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "mukesh-dream11", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/193573886?v=4", "type": "User" }, { "login": "web-flow", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/19864447?v=4", "type": "User" }, { "login": "christianfl", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/11208965?v=4", "type": "User" }, { "login": "nicpenning", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5582679?v=4", "type": "User" }, { "login": "xxixo", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/131694570?v=4", "type": "User" }, { "login": "v0lp3", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/20267645?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 7, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "SpamFaux", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26196070?v=4", "type": "User" }, { "login": "noob6t5", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/67364489?v=4", "type": "User" }, { "login": "indeed404", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/49611370?v=4", "type": "User" }, { "login": "cnnrshd", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/35985695?v=4", "type": "User" }, { "login": "batgoose", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/77685606?v=4", "type": "User" }, { "login": "TrebledJ", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/39648915?v=4", "type": "User" }, { "login": "ooooo-create", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/106524776?v=4", "type": "User" }, { "login": "Giardi77", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/76905751?v=4", "type": "User" }, { "login": "Sh4d0wHunt3rX", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/15929497?v=4", "type": "User" }, { "login": "ChrisJr404", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11917633?v=4", "type": "User" }, { "login": "tycoonslive", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22792321?v=4", "type": "User" }, { "login": "pjhartlieb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/617730?v=4", "type": "User" } ] }, { "repo": "sensepost/objection", "name": "objection", "owner": "sensepost", "url": "https://github.com/sensepost/objection", "id": "7533d4940898", "stars": 9272, "language": "Python", "description": "📱 objection - runtime mobile exploration", "type": "tool", "pushedAt": "2026-06-02T09:35:54Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "login": "ropnop" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 63, "topContributors": [ { "login": "leonjza", "c": 725, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "IPMegladon", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/30530996?v=4", "type": "User" }, { "login": "CDuPlooy", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/13156302?v=4", "type": "User" }, { "login": "dnet", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" }, { "login": "aph3rson", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/838916?v=4", "type": "User" }, { "login": "bernard-wagner", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4208881?v=4", "type": "User" }, { "login": "gagnonca", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5315221?v=4", "type": "User" }, { "login": "AV-IO", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12161056?v=4", "type": "User" }, { "login": "hypn0s-bb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57636316?v=4", "type": "User" }, { "login": "mtschirs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2223047?v=4", "type": "User" }, { "login": "NickstaDB", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1425835?v=4", "type": "User" }, { "login": "TheDauntless", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1650034?v=4", "type": "User" }, { "login": "GOAT-FARM3R", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28618286?v=4", "type": "User" }, { "login": "tmm1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2567?v=4", "type": "User" }, { "login": "AltayAkkus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7849969?v=4", "type": "User" }, { "login": "melvinsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1312973?v=4", "type": "User" }, { "login": "legik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/657615?v=4", "type": "User" }, { "login": "SpeedyFireCyclone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5119620?v=4", "type": "User" }, { "login": "MantisSTS", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/818959?v=4", "type": "User" }, { "login": "RomainL972", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24463530?v=4", "type": "User" }, { "login": "ropnop", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "StingraySA", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42263294?v=4", "type": "User" }, { "login": "Techbrunch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1835765?v=4", "type": "User" }, { "login": "timwr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/684924?v=4", "type": "User" }, { "login": "gergesh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17929140?v=4", "type": "User" }, { "login": "agreenbhm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/622379?v=4", "type": "User" }, { "login": "clviper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4196178?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "gastontoth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14236339?v=4", "type": "User" }, { "login": "ido77778", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18586039?v=4", "type": "User" } ] }, { "repo": "epinna/tplmap", "name": "tplmap", "owner": "epinna", "url": "https://github.com/epinna/tplmap", "id": "e46a1c94b53a", "stars": 4189, "language": "Python", "description": "Server-Side Template Injection and Code Injection Detection and Exploitation Tool", "type": "tool", "pushedAt": "2024-04-21T14:47:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "epinna", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "epinna", "c": 565, "avatar": "https://avatars.githubusercontent.com/u/1578960?v=4", "type": "User" }, { "login": "jx6f", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4547981?v=4", "type": "User" }, { "login": "opt9", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/192655?v=4", "type": "User" }, { "login": "om3rcitak", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5197413?v=4", "type": "User" }, { "login": "markozajc", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/30626847?v=4", "type": "User" }, { "login": "MeowMeowMeowMeowMeowMeowMeowMeow", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19356597?v=4", "type": "User" }, { "login": "shelld3v", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" }, { "login": "rtpt-alexanderneumann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62751754?v=4", "type": "User" }, { "login": "connorbode", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1156049?v=4", "type": "User" }, { "login": "Guilhem-DELAITRE", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/89917125?v=4", "type": "User" }, { "login": "yichinzhu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7543516?v=4", "type": "User" } ] }, { "repo": "powershellempire/powertools", "name": "PowerTools", "owner": "PowerShellEmpire", "url": "https://github.com/PowerShellEmpire/PowerTools", "id": "387a9f0ccd09", "stars": 2201, "language": "PowerShell", "description": "PowerTools is a collection of PowerShell projects with a focus on offensive operations.", "type": "tool", "pushedAt": "2021-12-28T21:00:42Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "PowerShellEmpire", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "login": "darkoperator" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" } ], "adoptionOperators": 2, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "HarmJ0y", "c": 347, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "Meatballs1", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "tomsteele", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2497381?v=4", "type": "User" }, { "login": "darkoperator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "leechristensen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" } ] }, { "repo": "dec0ne/krbrelayup", "name": "KrbRelayUp", "owner": "Dec0ne", "url": "https://github.com/Dec0ne/KrbRelayUp", "id": "6510306c652b", "stars": 1652, "language": "C#", "description": "KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).", "type": "tool", "pushedAt": "2022-08-06T12:23:58Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Dec0ne", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "Dec0ne", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/54464773?v=4", "type": "User" }, { "login": "Genbox", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/657616?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "snovvcrash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" }, { "login": "crypt0rr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57799908?v=4", "type": "User" }, { "login": "spoppi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27894379?v=4", "type": "User" } ] }, { "repo": "joasasantos/neurosploit", "name": "neurosploit", "owner": "joasasantos", "url": "https://github.com/JoasASantos/NeuroSploit", "stars": 1239, "language": "Rust", "description": "NeuroSploit is an advanced, AI-powered penetration testing framework designed to automate and augment various aspects of offensive security operations. Leveraging the capabilities of large language mo", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "de5dd7aa20f9", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-07-11T00:44:31Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 142, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" }, { "login": "Ahson-Shaikh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59800198?v=4", "type": "User" }, { "login": "leebaird", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "YatinChaubal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6592989?v=4", "type": "User" }, { "login": "Hasan72341", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/176944783?v=4", "type": "User" } ] }, { "repo": "t3l3machus/powershell-obfuscation-bible", "name": "powershell-obfuscation-bible", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/PowerShell-Obfuscation-Bible", "stars": 1194, "language": null, "description": "A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository ar", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c4ace7d6550d", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-19T07:05:32Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" } ] }, { "repo": "bats3c/darkloadlibrary", "name": "darkloadlibrary", "owner": "bats3c", "url": "https://github.com/bats3c/DarkLoadLibrary", "stars": 1185, "language": "C", "description": "LoadLibrary for offensive operations", "type": "tool", "lanes": [ "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "80afe5169b45", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" } ], "pushedAt": "2021-10-22T07:27:58Z", "archived": false, "topContributors": [ { "login": "hypervis0r", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/10148584?v=4", "type": "User" }, { "login": "bats3c", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" } ] }, { "repo": "trustedsec/cs-remote-ops-bof", "name": "CS-Remote-OPs-BOF", "owner": "trustedsec", "url": "https://github.com/trustedsec/CS-Remote-OPs-BOF", "id": "c3041b99d4a1", "stars": 1172, "language": "C", "description": "Remote operations commands implemented using Beacon Object Files", "type": "tool", "pushedAt": "2026-07-15T19:22:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" }, { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "login": "darkoperator" }, { "name": "Daniel Mayer", "cardId": "44f6ed3e1c897e60", "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "login": "MayerDaniel" }, { "name": "Evan McBroom", "cardId": "7fef21ae9dab9299", "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "login": "EvanMcBroom" }, { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 25, "topContributors": [ { "login": "freefirex", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "nowhey2", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1191760?v=4", "type": "User" }, { "login": "nickvourd", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32869078?v=4", "type": "User" }, { "login": "snus-b", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/32843754?v=4", "type": "User" }, { "login": "chryzsh", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" }, { "login": "martanne", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5736493?v=4", "type": "User" }, { "login": "leebaird", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "Tw1sm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" }, { "login": "Ridter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6007471?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "RobertDiep", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1931959?v=4", "type": "User" }, { "login": "benivegna", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11660811?v=4", "type": "User" }, { "login": "BlueFootedBird", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/70647055?v=4", "type": "User" }, { "login": "0xbad53c", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/74974697?v=4", "type": "User" }, { "login": "beune", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47817451?v=4", "type": "User" }, { "login": "darkoperator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "MayerDaniel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16283844?v=4", "type": "User" }, { "login": "EvanMcBroom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15305789?v=4", "type": "User" }, { "login": "gijsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/207905?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" }, { "login": "MEhrn00", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13649965?v=4", "type": "User" }, { "login": "PaulWhitingS2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64860722?v=4", "type": "User" }, { "login": "RosettaPwn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/159090492?v=4", "type": "User" }, { "login": "Soups71", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24944612?v=4", "type": "User" }, { "login": "Xenov-X", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62152036?v=4", "type": "User" } ] }, { "repo": "0xsha/cloudbrute", "name": "CloudBrute", "owner": "0xsha", "url": "https://github.com/0xsha/CloudBrute", "id": "17410ac651af", "stars": 1143, "language": "Go", "description": "Awesome cloud enumerator ", "type": "tool", "pushedAt": "2025-03-09T17:48:52Z", "archived": false, "lanes": [ "2" ], "author": { "name": "0xsha", "cardId": "df2469ad581b3713", "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jason Haddix", "cardId": "f3f4293bba8a6ba6", "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4", "login": "jhaddix" }, { "name": "Jessie Ho (j3ssie)", "cardId": "65ab17084a41e33e", "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4", "login": "j3ssie" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "0xsha", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4", "type": "User" }, { "login": "jhaddix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4", "type": "User" }, { "login": "j3ssie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4", "type": "User" } ] }, { "repo": "octoberfest7/teamsphisher", "name": "TeamsPhisher", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/TeamsPhisher", "id": "54e10bafab97", "stars": 1122, "language": "Python", "description": "Send phishing messages and attachments to Microsoft Teams users", "type": "tool", "pushedAt": "2024-06-19T21:41:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Octoberfest7", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "almart", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3028969?v=4", "type": "User" }, { "login": "simz0ff", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/68470195?v=4", "type": "User" } ] }, { "repo": "hakluke/hakoriginfinder", "name": "hakoriginfinder", "owner": "hakluke", "url": "https://github.com/hakluke/hakoriginfinder", "id": "ecf22501d6a0", "stars": 1088, "language": "Go", "description": "Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!", "type": "tool", "pushedAt": "2026-03-24T10:04:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Luke Stephens", "cardId": "9ac3ddb06c6f3825", "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "login": "carlospolop" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "hakluke", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4", "type": "User" }, { "login": "modrobert", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/9047299?v=4", "type": "User" }, { "login": "carlospolop", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" }, { "login": "chrismeistre", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5166727?v=4", "type": "User" }, { "login": "HackTheBridge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/110546197?v=4", "type": "User" }, { "login": "kaimi-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6807153?v=4", "type": "User" }, { "login": "Serizao", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11671895?v=4", "type": "User" } ] }, { "repo": "mukul975/cve-mcp-server", "name": "cve-mcp-server", "owner": "mukul975", "url": "https://github.com/mukul975/cve-mcp-server", "stars": 1087, "language": "Python", "description": "Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mahipal", "cardId": "8653a26074607efd", "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a379f9a6e751", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-16T20:58:40Z", "archived": false, "topContributors": [ { "login": "mukul975", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4", "type": "User" }, { "login": "fergoid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11411330?v=4", "type": "User" } ] }, { "repo": "koutto/jok3r", "name": "jok3r", "owner": "koutto", "url": "https://github.com/koutto/jok3r", "stars": 1087, "language": "HTML", "description": "Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "Koutto", "cardId": "a2c1c50a17fda9a6", "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "294e33461a71", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-06-07T18:16:29Z", "archived": false, "topContributors": [ { "login": "koutto", "c": 394, "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4", "type": "User" }, { "login": "cyrinux", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/519083?v=4", "type": "User" } ] }, { "repo": "s0md3v/silver", "name": "Silver", "owner": "s0md3v", "url": "https://github.com/s0md3v/Silver", "id": "f8c7a6cc0e56", "stars": 1049, "language": null, "description": "Mass scan IPs for vulnerable services", "type": "tool", "pushedAt": "2026-04-26T22:10:56Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "s0md3v", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" } ] }, { "repo": "marco-lancini/goscan", "name": "goscan", "owner": "marco-lancini", "url": "https://github.com/marco-lancini/goscan", "stars": 1040, "language": "Go", "description": "Interactive Network Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Lancini", "cardId": "f546fb7b871cb152", "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "05742334e51f", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-10-21T17:02:39Z", "archived": false, "topContributors": [ { "login": "marco-lancini", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4", "type": "User" }, { "login": "theMiddleBlue", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4454961?v=4", "type": "User" } ] }, { "repo": "soxoj/socid-extractor", "name": "socid-extractor", "owner": "soxoj", "url": "https://github.com/soxoj/socid-extractor", "stars": 1040, "language": "Python", "description": "⛏️ The extraction engine behind Maigret: turn any profile URL into a structured OSINT record across 150+ sites", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "011c845cc016", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [], "pushedAt": "2026-07-17T23:41:25Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 311, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 25, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "cyb3rk0tik", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/70950106?v=4", "type": "User" }, { "login": "Copilot", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "ayxkaddd", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/82116858?v=4", "type": "User" }, { "login": "kaifcodec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/98528577?v=4", "type": "User" }, { "login": "CasperCodes-CPU", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/274228044?v=4", "type": "User" }, { "login": "razbenya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22798855?v=4", "type": "User" }, { "login": "tgalery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1846448?v=4", "type": "User" }, { "login": "MeowyPouncer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27011880?v=4", "type": "User" } ] }, { "repo": "specterops/nemesis", "name": "Nemesis", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/Nemesis", "id": "98ab708c4cdd", "stars": 986, "language": "Python", "description": "An offensive data enrichment pipeline", "type": "tool", "pushedAt": "2026-07-11T01:21:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "HarmJ0y", "c": 488, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "t94j0", "c": 186, "avatar": "https://avatars.githubusercontent.com/u/5448134?v=4", "type": "User" }, { "login": "leechristensen", "c": 121, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "MEhrn00", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/13649965?v=4", "type": "User" }, { "login": "au70ma70n", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/168219140?v=4", "type": "User" }, { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "aggr0cr4g", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/93880195?v=4", "type": "User" }, { "login": "Matixx22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52577030?v=4", "type": "User" }, { "login": "themightyshiv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2651222?v=4", "type": "User" }, { "login": "zurro", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52583?v=4", "type": "User" }, { "login": "guervild", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11190755?v=4", "type": "User" }, { "login": "slimwang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14370794?v=4", "type": "User" } ] }, { "repo": "0xpugal/fuzz4bounty", "name": "fuzz4bounty", "owner": "0xPugal", "url": "https://github.com/0xPugal/fuzz4bounty", "id": "be6ccce0abcc", "stars": 973, "language": "Go", "description": "1337 Wordlists for Bug Bounty Hunting", "type": "tool", "pushedAt": "2026-07-12T05:43:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Pugalarasan", "cardId": "697fe36354f625da", "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "nuclei-bot", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/107839157?v=4", "type": "User" }, { "login": "0xPugal", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "type": "User" }, { "login": "viyaas227", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/200890731?v=4", "type": "User" }, { "login": "actions-user", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/65916846?v=4", "type": "User" }, { "login": "spmedia", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1646728?v=4", "type": "User" } ] }, { "repo": "ropnop/windapsearch", "name": "windapsearch", "owner": "ropnop", "url": "https://github.com/ropnop/windapsearch", "id": "578f0804e541", "stars": 973, "language": "Python", "description": "Python script to enumerate users, groups and computers from a Windows domain through LDAP queries", "type": "tool", "pushedAt": "2022-04-20T07:40:42Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ropnop", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "phackt", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19553457?v=4", "type": "User" } ] }, { "repo": "s0md3v/blazy", "name": "Blazy", "owner": "s0md3v", "url": "https://github.com/s0md3v/Blazy", "id": "f37fd4326d03", "stars": 921, "language": "Python", "description": "Intelligent login bruteforcer.", "type": "tool", "pushedAt": "2023-04-27T13:11:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "s0md3v", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" }, { "login": "rogerzanoni", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/589787?v=4", "type": "User" }, { "login": "gustavosnovaes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33347337?v=4", "type": "User" } ] }, { "repo": "joasasantos/red-team-management", "name": "red-team-management", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Red-Team-Management", "stars": 915, "language": "HTML", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0172f898eca5", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-17T15:10:05Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "bats3c/adcspwn", "name": "ADCSPwn", "owner": "bats3c", "url": "https://github.com/bats3c/ADCSPwn", "id": "a3c1d024653c", "stars": 878, "language": "C#", "description": "A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.", "type": "tool", "pushedAt": "2023-03-20T20:30:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "bats3c", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" }, { "login": "FlangvikOld", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/19530801?v=4", "type": "User" }, { "login": "rvrsh3ll", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "inspiringz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47313597?v=4", "type": "User" } ] }, { "repo": "bats3c/darkarmour", "name": "darkarmour", "owner": "bats3c", "url": "https://github.com/bats3c/darkarmour", "stars": 871, "language": "Python", "description": "Windows AV Evasion", "type": "tool", "lanes": [ "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "825e8047ab6f", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-13T10:56:23Z", "archived": false, "topContributors": [ { "login": "bats3c", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" } ] }, { "repo": "1n3/reverseapk", "name": "ReverseAPK", "owner": "1N3", "url": "https://github.com/1N3/ReverseAPK", "id": "d183041121df", "stars": 866, "language": "Shell", "description": "Quickly analyze and reverse engineer Android packages", "type": "tool", "pushedAt": "2022-12-21T17:02:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ken Gannon", "cardId": "cda1ad1ab035b0f5", "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4", "login": "Yogehi" } ], "adoptionOperators": 0, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "1N3", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "HanseSecure", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24669088?v=4", "type": "User" }, { "login": "Yogehi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10925671?v=4", "type": "User" }, { "login": "CYB3RMX", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42123683?v=4", "type": "User" } ] }, { "repo": "s0md3v/jshell", "name": "jshell", "owner": "s0md3v", "url": "https://github.com/s0md3v/JShell", "stars": 532, "language": "Python", "description": "JShell - Get a JavaScript shell with XSS.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a01f58b6d005", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2019-05-05T15:49:41Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" } ] }, { "repo": "trustedsec/meterssh", "name": "meterssh", "owner": "trustedsec", "url": "https://github.com/trustedsec/meterssh", "id": "d5cf9fcd4750", "stars": 528, "language": "Python", "description": "MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injectin", "type": "tool", "pushedAt": "2017-04-13T17:55:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mandreko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/419731?v=4", "type": "User" }, { "login": "ryman1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8972914?v=4", "type": "User" } ] }, { "repo": "michenriksen/birdwatcher", "name": "birdwatcher", "owner": "michenriksen", "url": "https://github.com/michenriksen/birdwatcher", "stars": 417, "language": "Ruby", "description": "Data analysis and OSINT framework for Twitter", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Henriksen", "cardId": "9a2720188c485b00", "avatar": "https://avatars.githubusercontent.com/u/304361?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ab216320aa0e", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 0, "contributors": [], "pushedAt": "2020-10-18T21:46:58Z", "archived": false, "topContributors": [] }, { "repo": "trustedsec/egressbuster", "name": "egressbuster", "owner": "trustedsec", "url": "https://github.com/trustedsec/egressbuster", "id": "ecfc958ccede", "stars": 375, "language": "Python", "description": "Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.", "type": "tool", "pushedAt": "2024-07-30T16:17:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" } ], "adoptionOperators": 1, "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "g0tmi1k", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/535942?v=4", "type": "User" }, { "login": "HackingDave", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "mshaneck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8493198?v=4", "type": "User" }, { "login": "fopina", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/636320?v=4", "type": "User" }, { "login": "pierce403", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76767?v=4", "type": "User" } ] }, { "repo": "joswr1ght/pcaphistogram", "name": "pcaphistogram", "owner": "joswr1ght", "url": "https://github.com/joswr1ght/pcaphistogram", "stars": 25, "language": "Python", "description": "Generate a histogram of TCP and UDP payload bytes from a pcap file", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua Wright", "cardId": "6a36ba135603772e", "avatar": "https://avatars.githubusercontent.com/u/1318817?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d6a3cf6a279", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Justin Searle", "cardId": "74c2a7eae4c0d8df", "avatar": "https://avatars.githubusercontent.com/u/1956932?v=4", "login": "meeas" } ], "pushedAt": "2022-08-01T14:01:18Z", "archived": false, "topContributors": [ { "login": "joswr1ght", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1318817?v=4", "type": "User" }, { "login": "meeas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1956932?v=4", "type": "User" } ] }, { "repo": "pinkflawd/mipsreverseengineeringworkshop", "name": "mipsreverseengineeringworkshop", "owner": "pinkflawd", "url": "https://github.com/pinkflawd/MIPSReverseEngineeringWorkshop", "stars": 25, "language": null, "description": "Materials for my MIPS workshop at Recon 2026", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marion Marschalek", "cardId": "ca5bfeefb5ebf1f5", "avatar": "https://avatars.githubusercontent.com/u/5487036?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0d366cca41fd", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-27T06:18:53Z", "archived": false, "topContributors": [ { "login": "pinkflawd", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5487036?v=4", "type": "User" } ] }, { "repo": "marcograss/cve-2014-4323", "name": "cve-2014-4323", "owner": "marcograss", "url": "https://github.com/marcograss/cve-2014-4323", "stars": 25, "language": "C", "description": "cve-2014-4323 poc", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Grassi", "cardId": "cc622e5905e809a7", "avatar": "https://avatars.githubusercontent.com/u/1010159?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "de7ecd46e3de", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-10-15T04:21:45Z", "archived": false, "topContributors": [ { "login": "marcograss", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1010159?v=4", "type": "User" } ] }, { "repo": "0xdea/shellcode", "name": "shellcode", "owner": "0xdea", "url": "https://github.com/0xdea/shellcode", "stars": 24, "language": "C", "description": "A collection of my shellcode samples.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30c509c31ca3", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-10T13:51:32Z", "archived": false, "topContributors": [ { "login": "0xdea", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "hackvertor/clickbandit", "name": "clickbandit", "owner": "hackvertor", "url": "https://github.com/hackvertor/clickbandit", "stars": 24, "language": "JavaScript", "description": "A JavaScript clickjacking PoC generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gareth Heyes", "cardId": "0c8f7458f3455124", "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "78140c476829", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-07-03T14:51:41Z", "archived": false, "topContributors": [ { "login": "gareth-swigger", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/202628051?v=4", "type": "User" }, { "login": "hackvertor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4", "type": "User" } ] }, { "repo": "albertzsigovits/malware-mutex", "name": "malware-mutex", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-mutex", "stars": 24, "language": null, "description": "Muteces (mutexes/mutants) used by various malware families", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "21831803829d", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-11T11:40:00Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/google-colab-hashcat", "name": "google-colab-hashcat", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/google-colab-hashcat", "stars": 24, "language": "Jupyter Notebook", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cf3c47f63ce5", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-16T16:37:07Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" } ] }, { "repo": "thuyimingli/open-sourced_dataset_protection", "name": "open-sourced_dataset_protection", "owner": "thuyimingli", "url": "https://github.com/THUYimingLi/Open-sourced_Dataset_Protection", "stars": 23, "language": "Python", "description": "This is the implementation of our paper 'Open-sourced Dataset Protection via Backdoor Watermarking', accepted by the NeurIPS Workshop on Dataset Curation and Security, 2020.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yiming Li", "cardId": "17e4afe2a5635d60", "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9dfb65e01f8", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-10-13T14:51:16Z", "archived": false, "topContributors": [ { "login": "THUYimingLi", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/46520010?v=4", "type": "User" }, { "login": "Vicky7777", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31157206?v=4", "type": "User" } ] }, { "repo": "wunderwuzzi23/offensive-bpf", "name": "offensive-bpf", "owner": "wunderwuzzi23", "url": "https://github.com/wunderwuzzi23/Offensive-BPF", "stars": 23, "language": "C", "description": "Various BPF resources, tools, scripts and experiments created while learning more about the eBPF technology.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johann Rehberger", "cardId": "549d2d53d4f9b03f", "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "75a08081b1e7", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-11T06:45:49Z", "archived": false, "topContributors": [ { "login": "wunderwuzzi23", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4", "type": "User" } ] }, { "repo": "ald3ns/xz-backdoor-github-analysis", "name": "xz-backdoor-github-analysis", "owner": "ald3ns", "url": "https://github.com/ald3ns/xz-backdoor-github-analysis", "stars": 23, "language": "Jupyter Notebook", "description": "A simple Jupyter Notebook to graph a users commit history over time, specifically looking at the author of the xz backdoor.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alden Schmidt", "cardId": "561e312abc707a44", "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cc0f19c316c1", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-30T18:33:33Z", "archived": false, "topContributors": [ { "login": "ald3ns", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4", "type": "User" } ] }, { "repo": "gergelykalman/cve-2023-32364-macos-app-sandbox-escape", "name": "cve-2023-32364-macos-app-sandbox-escape", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/CVE-2023-32364-macos-app-sandbox-escape", "stars": 23, "language": "Makefile", "description": "Exploit for CVE-2023-32364", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9ecdbbd955c", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-26T14:44:09Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "jstrosch/graph-maldoc-similar-images", "name": "graph-maldoc-similar-images", "owner": "jstrosch", "url": "https://github.com/jstrosch/graph-maldoc-similar-images", "stars": 23, "language": "Python", "description": "A script that extracts embedded images from Office Open XML (OOXML) documents and generates image hash similarity graphs that cluster visually similar images together. The script computes the Average ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Stroschein", "cardId": "ca3f07d87861323c", "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cb5b186a48ea", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-12-12T22:23:42Z", "archived": false, "topContributors": [] }, { "repo": "ortegaalfredo/vulns-ai", "name": "vulns-ai", "owner": "ortegaalfredo", "url": "https://github.com/ortegaalfredo/vulns-ai", "stars": 23, "language": "HTML", "description": "Vulnerabilities advisories and PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alfredo Ortega", "cardId": "dd6ee85ba241a9a9", "avatar": "https://avatars.githubusercontent.com/u/1576696?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f7319821b937", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-19T17:50:05Z", "archived": false, "topContributors": [ { "login": "ortegaalfredo", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1576696?v=4", "type": "User" } ] }, { "repo": "parzel/gobofrunner", "name": "gobofrunner", "owner": "parzel", "url": "https://github.com/parzel/GoBofRunner", "stars": 23, "language": "Go", "description": "A BOF/COFF loader implemented in Go and CGO.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8defd4837c78", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-16T11:28:50Z", "archived": false, "topContributors": [ { "login": "parzel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "dump-guy/get-unjlaive", "name": "get-unjlaive", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/Get-UnJlaive", "stars": 22, "language": "PowerShell", "description": "Get-UnJlaive is tool which is able to reconstruct Jlaive (.NET Antivirus Evasion Tool (Exe2Bat)) to original Assembly and stub Assembly.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c8e23a23e64", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-19T22:54:25Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "ccob/poc", "name": "poc", "owner": "ccob", "url": "https://github.com/CCob/PoC", "stars": 22, "language": "Python", "description": "Exploit PoC for CVE's and non CVE's alike", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b96005babb87", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-24T12:39:14Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/rootkits-development-starter-pack", "name": "rootkits-development-starter-pack", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Rootkits-Development-Starter-Pack", "stars": 22, "language": "C", "description": "Starter pack for learning how to develop Kernel-Mode rootkits: basic proof-of-concepts, development environment configuration, and step-by-step resources to begin coding low-level rootkit components f", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e0c4eb69f205", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-24T16:35:32Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "valdikss/openvpn-tunpipe", "name": "openvpn-tunpipe", "owner": "valdikss", "url": "https://github.com/ValdikSS/openvpn-tunpipe", "stars": 22, "language": "C", "description": "OpenVPN with ocproxy/tunsocks VPN-to-proxy (\"socks2tun\") support Proof-of-concept", "type": "tool", "lanes": [ "2" ], "author": { "name": "ValdikSS", "cardId": "c76eaa2d709872a9", "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6f70248e0914", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [], "pushedAt": "2023-07-25T21:53:48Z", "archived": false, "topContributors": [ { "login": "jamesyonan", "c": 560, "avatar": "https://avatars.githubusercontent.com/u/4657916?v=4", "type": "User" }, { "login": "schwabe", "c": 487, "avatar": "https://avatars.githubusercontent.com/u/1038539?v=4", "type": "User" }, { "login": "syzzer", "c": 338, "avatar": "https://avatars.githubusercontent.com/u/3830300?v=4", "type": "User" }, { "login": "cron2", "c": 296, "avatar": "https://avatars.githubusercontent.com/u/3456368?v=4", "type": "User" }, { "login": "ordex", "c": 175, "avatar": "https://avatars.githubusercontent.com/u/3433035?v=4", "type": "User" }, { "login": "selvanair", "c": 145, "avatar": "https://avatars.githubusercontent.com/u/3981391?v=4", "type": "User" }, { "login": "andj", "c": 132, "avatar": "https://avatars.githubusercontent.com/u/888117?v=4", "type": "User" }, { "login": "dsommers", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/1685255?v=4", "type": "User" }, { "login": "lstipakov", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/643110?v=4", "type": "User" }, { "login": "alonbl", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/1263789?v=4", "type": "User" }, { "login": "rozmansi", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/6889694?v=4", "type": "User" }, { "login": "mattock", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/1554045?v=4", "type": "User" }, { "login": "chipitsine", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/2217296?v=4", "type": "User" }, { "login": "emmanuel-deloget", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/9452911?v=4", "type": "User" }, { "login": "mfil", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/11407287?v=4", "type": "User" }, { "login": "eworm-de", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/970853?v=4", "type": "User" }, { "login": "d12fk", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/15199641?v=4", "type": "User" }, { "login": "themiron", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/566150?v=4", "type": "User" }, { "login": "fknittel", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1201001?v=4", "type": "User" }, { "login": "jjkeijser", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/7151077?v=4", "type": "User" }, { "login": "jejb", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/281772?v=4", "type": "User" }, { "login": "QueuingKoala", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3850683?v=4", "type": "User" }, { "login": "mandree", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5079167?v=4", "type": "User" }, { "login": "jcourreges", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/45601387?v=4", "type": "User" }, { "login": "TinCanTech", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/25598447?v=4", "type": "User" }, { "login": "jkbullard", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/127273?v=4", "type": "User" }, { "login": "neuhalje", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3842066?v=4", "type": "User" }, { "login": "guidovranken", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6846644?v=4", "type": "User" }, { "login": "flichtenheld", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/93940?v=4", "type": "User" }, { "login": "dpensa", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4677428?v=4", "type": "User" } ] }, { "repo": "filipi86/threat-hunting", "name": "threat-hunting", "owner": "filipi86", "url": "https://github.com/filipi86/Threat-Hunting", "stars": 21, "language": null, "description": "The purpose of these documents, it was to execute several efficiency and detection tests in some endpoint solutions, this document brings the result of the defensive security analysis with an offensiv", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filipi Pires", "cardId": "ad05414c70858a66", "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9f320d4bb27a", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-23T13:33:32Z", "archived": false, "topContributors": [ { "login": "filipi86", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4", "type": "User" } ] }, { "repo": "francozappa/blur", "name": "blur", "owner": "francozappa", "url": "https://github.com/francozappa/blur", "stars": 21, "language": "Python", "description": "BLURtooth: Exploiting Cross-Transport Key Derivation in Bluetooth Classic and Bluetooth Low Energy [CVE-2020-15802] [CVE-2022-20361]", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniele Antonioli", "cardId": "3dc546077c56f5d8", "avatar": "https://avatars.githubusercontent.com/u/4628017?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2b879b3fd2dd", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-17T19:20:34Z", "archived": false, "topContributors": [ { "login": "francozappa", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4628017?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-netsessionenum", "name": "get-netsessionenum", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-NetSessionEnum", "stars": 21, "language": "PowerShell", "description": "Automate Network sessions enumeration of connected users in the domain, to facilitate AD Reconnaissance for Adversary simulation & Red Teams", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ae5466be3b41", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-10-30T10:26:24Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "fs0c131y/anubismalware", "name": "anubismalware", "owner": "fs0c131y", "url": "https://github.com/fs0c131y/AnubisMalware", "stars": 21, "language": null, "description": "Anubis Malware Samples", "type": "tool", "lanes": [ "2" ], "author": { "name": "Baptiste Robert", "cardId": "4e39c1e7f599b1aa", "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0a535b41b36b", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-19T23:26:07Z", "archived": false, "topContributors": [ { "login": "fs0c131y", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36547191?v=4", "type": "User" } ] }, { "repo": "idov31/nidhoggcsharpapi", "name": "nidhoggcsharpapi", "owner": "idov31", "url": "https://github.com/Idov31/NidhoggCSharpApi", "stars": 21, "language": "C#", "description": "C# API for Nidhogg rootkit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ido Veltzman", "cardId": "6a6b459370488f2a", "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bad7e8468caf", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-25T13:49:07Z", "archived": false, "topContributors": [ { "login": "Idov31", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/62358580?v=4", "type": "User" } ] }, { "repo": "johnhammond/cve-2036-69420", "name": "cve-2036-69420", "owner": "johnhammond", "url": "https://github.com/JohnHammond/CVE-2036-69420", "stars": 21, "language": null, "description": "uwu", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d92aec616b08", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2024-08-19T20:57:16Z", "archived": false, "topContributors": [] }, { "repo": "travisgoodspeed/lpc13-exploit", "name": "lpc13-exploit", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/lpc13-exploit", "stars": 20, "language": "Go", "description": "Minimal UART client in Golang that dumps LPC1343 chips that are locked at CRP1.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a96d389c20a1", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-27T18:58:16Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" } ] }, { "repo": "patchpoint/cve-2024-38063", "name": "cve-2024-38063", "owner": "patchpoint", "url": "https://github.com/patchpoint/CVE-2024-38063", "stars": 20, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Donghyeon Oh", "cardId": "b8b1b1aced4002d5", "avatar": "https://avatars.githubusercontent.com/u/174953042?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dec6ec508530", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-27T17:48:16Z", "archived": false, "topContributors": [ { "login": "patchpoint", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/174953042?v=4", "type": "User" } ] }, { "repo": "rolfrolles/hiddenbeeloader", "name": "hiddenbeeloader", "owner": "rolfrolles", "url": "https://github.com/RolfRolles/HiddenBeeLoader", "stars": 20, "language": "Python", "description": "IDA loader module for Hidden Bee's custom executable file format", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rolf Rolles", "cardId": "c28c691cb82760e4", "avatar": "https://avatars.githubusercontent.com/u/680819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cf82e2326e8f", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-09-02T22:53:00Z", "archived": false, "topContributors": [ { "login": "RolfRolles", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/680819?v=4", "type": "User" } ] }, { "repo": "d4stiny/pyhack", "name": "pyhack", "owner": "d4stiny", "url": "https://github.com/D4stiny/PyHack", "stars": 19, "language": "Python", "description": "Python based memory cheat for the game Counter-Strike: Global Offensive.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2506f0f88af8", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-04-14T02:33:10Z", "archived": false, "topContributors": [] }, { "repo": "gergelykalman/cve-2023-32428-a-macos-lpe-via-mallocstacklogging", "name": "cve-2023-32428-a-macos-lpe-via-mallocstacklogging", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging", "stars": 19, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "960ddd612728", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-26T08:06:06Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "gergelykalman/brew-lpe-via-periodic", "name": "brew-lpe-via-periodic", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/brew-lpe-via-periodic", "stars": 19, "language": "Shell", "description": "Brew Local Privilege Escalation exploit on Intel macOS", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d8d279f4acd6", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-06T12:09:50Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "adamdoupe/enemy-of-the-state", "name": "enemy-of-the-state", "owner": "adamdoupe", "url": "https://github.com/adamdoupe/enemy-of-the-state", "stars": 19, "language": "Python", "description": "This novel black-box web vulnerability scanner attempts to infer the state machine of the web application.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Doupé", "cardId": "add208fc8def4dda", "avatar": "https://avatars.githubusercontent.com/u/48102?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5fc967432747", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-03-12T14:01:17Z", "archived": false, "topContributors": [ { "login": "cavedon", "c": 238, "avatar": "https://avatars.githubusercontent.com/u/171046?v=4", "type": "User" }, { "login": "adamdoupe", "c": 95, "avatar": "https://avatars.githubusercontent.com/u/48102?v=4", "type": "User" } ] }, { "repo": "ch0pin/androidwebdoor", "name": "androidwebdoor", "owner": "ch0pin", "url": "https://github.com/Ch0pin/AndroidWebDoor", "stars": 19, "language": "Java", "description": "A minimalistic android backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dimitrios Valsamaras", "cardId": "cc8cff1f4fc0f423", "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "72a1882eaf9d", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-01T19:08:39Z", "archived": false, "topContributors": [ { "login": "Ch0pin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4", "type": "User" } ] }, { "repo": "mgeeky/prc_xchk", "name": "prc_xchk", "owner": "mgeeky", "url": "https://github.com/mgeeky/prc_xchk", "stars": 19, "language": "C++", "description": "User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87e6e4adf0a0", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-03-03T02:37:49Z", "archived": false, "topContributors": [ { "login": "mgeeky", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" } ] }, { "repo": "jprx/cve-2022-29968", "name": "cve-2022-29968", "owner": "jprx", "url": "https://github.com/jprx/CVE-2022-29968", "stars": 19, "language": "C", "description": "Exploit PoC for CVE-2022-29968 by Joseph Ravichandran and Michael Wang", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joseph Ravichandran", "cardId": "ecea8f6ea1f778c2", "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "06b022704aff", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-09T22:48:37Z", "archived": false, "topContributors": [ { "login": "jprx", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4", "type": "User" } ] }, { "repo": "shutdownrepo/cve-2020-7961", "name": "cve-2020-7961", "owner": "shutdownrepo", "url": "https://github.com/ShutdownRepo/CVE-2020-7961", "stars": 18, "language": "Python", "description": "Exploit script for CVE-2020-7961", "type": "tool", "lanes": [ "2" ], "author": { "name": "Charlie Bromberg", "cardId": "ae6498ca90347178", "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b99fd9cf8943", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-15T10:51:58Z", "archived": false, "topContributors": [ { "login": "ShutdownRepo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40902872?v=4", "type": "User" } ] }, { "repo": "javanxd/demo-exploit-jackson-rce", "name": "demo-exploit-jackson-rce", "owner": "javanxd", "url": "https://github.com/JavanXD/Demo-Exploit-Jackson-RCE", "stars": 18, "language": "TypeScript", "description": "Exploiting CVE-2017-7525 demo project with Angular7 frontend and Spring.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Javan Rasokat", "cardId": "11f99027fc57056c", "avatar": "https://avatars.githubusercontent.com/u/4342160?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1492999b5eda", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-02-21T13:18:24Z", "archived": false, "topContributors": [ { "login": "JavanXD", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4342160?v=4", "type": "User" } ] }, { "repo": "abhaybhargav/robonmap", "name": "robonmap", "owner": "abhaybhargav", "url": "https://github.com/abhaybhargav/RoboNmap", "stars": 18, "language": "Python", "description": "Robot Framework Library for popular Open Source Port Scanner and Vulnerability Scanner, Nmap", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhay Bhargav", "cardId": "10eabff78c05af64", "avatar": "https://avatars.githubusercontent.com/u/4427607?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "62f17f5aa8e4", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-07-16T06:43:31Z", "archived": false, "topContributors": [ { "login": "abhaybhargav", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/4427607?v=4", "type": "User" }, { "login": "sudarshan-narayanan-we45", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29887777?v=4", "type": "User" } ] }, { "repo": "kiwids0220/cve-2024-26230", "name": "cve-2024-26230", "owner": "kiwids0220", "url": "https://github.com/kiwids0220/CVE-2024-26230", "stars": 4, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kai Huang", "cardId": "bfccd516f1bc4cfc", "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "11297f3e3fc2", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-09T15:02:24Z", "archived": false, "topContributors": [ { "login": "kiwids0220", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/60630639?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/ghostshell", "name": "ghostshell", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/GhostShell", "stars": 4, "language": "Python", "description": "Covert C2 tool using Telegram Bot API as communication channel, command delivery is implemented by transfering emojis", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7129600a91b", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-23T19:26:23Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "viralmaniar/cloudspecter", "name": "cloudspecter", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/CloudSpecter", "stars": 4, "language": "Shell", "description": "CloudSpecter is a multi-cloud bucket reconnaissance and permission testing tool for AWS S3, Google Cloud Storage, and Azure Blob Storage. It detects publicly accessible or misconfigured buckets/contai", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60534716cf37", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-07T06:49:27Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2025-46819", "name": "cve-2025-46819", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/CVE-2025-46819", "stars": 4, "language": "Lua", "description": "CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "355cbdab8999", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-07T05:07:48Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "zephrfish/exch-cve-2021-26855_priv", "name": "exch-cve-2021-26855_priv", "owner": "zephrfish", "url": "https://github.com/ZephrFish/Exch-CVE-2021-26855_Priv", "stars": 4, "language": "Python", "description": "patched to work", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "889edf03e658", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-07T01:31:34Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "techspence/splashpwn", "name": "splashpwn", "owner": "techspence", "url": "https://github.com/techspence/SplashPWN", "stars": 4, "language": "C++", "description": "A local privilege escalation exploit for Splashtop Streamer for Windows prior to version 3.5.0.0", "type": "tool", "lanes": [ "2" ], "author": { "name": "Spencer Alessi", "cardId": "eae812c5a3f7c337", "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5561cd9823cf", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-22T14:24:38Z", "archived": false, "topContributors": [ { "login": "techspence", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/emoji-encoder", "name": "emoji-encoder", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/emoji-encoder", "stars": 3, "language": "Python", "description": "Emoji encoder for Red Team Ops ", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c521b44b95d", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-19T06:50:16Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "anubissec/bof-scripts", "name": "bof-scripts", "owner": "anubissec", "url": "https://github.com/AnubisSec/BOF-Scripts", "stars": 3, "language": "Python", "description": "Just some quick scripts to help doing some basic BOF challenges", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dylan Makowski", "cardId": "32827bc9451d9cd2", "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "23c3a0bc24da", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-25T02:20:07Z", "archived": false, "topContributors": [ { "login": "AnubisSec", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2025-46818", "name": "cve-2025-46818", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/CVE-2025-46818", "stars": 3, "language": "Lua", "description": "CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d3e29d73a37f", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-07T05:07:44Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "dwisiswant0/cve-2025-46817", "name": "cve-2025-46817", "owner": "dwisiswant0", "url": "https://github.com/dwisiswant0/CVE-2025-46817", "stars": 3, "language": "Lua", "description": "CVE-2025-46817 – Redis Lua unpack Integer Overflow (Potential RCE)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c5e17930b4db", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-07T05:07:40Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" } ] }, { "repo": "atomicchonk/prompt-linter-for-offsec", "name": "prompt-linter-for-offsec", "owner": "atomicchonk", "url": "https://github.com/atomicchonk/prompt-linter-for-offsec", "stars": 3, "language": null, "description": "A prompt “linting” layer for AI-assisted offensive security workflows. Rewrites prompts to reduce hallucination, constrain assumptions, and improve validation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Max Andreacchi", "cardId": "bccc5122014e16e0", "avatar": "https://avatars.githubusercontent.com/u/84281259?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "00f9369fd793", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-23T13:58:49Z", "archived": false, "topContributors": [ { "login": "atomicchonk", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/84281259?v=4", "type": "User" } ] }, { "repo": "wetw0rk/corelan-tutorials", "name": "corelan-tutorials", "owner": "wetw0rk", "url": "https://github.com/wetw0rk/Corelan-Tutorials", "stars": 3, "language": "Python", "description": "This repository will contain all code developed for the Corelan Exploit Development Tutorials (YouTube Collab).", "type": "tool", "lanes": [ "2" ], "author": { "name": "wetw0rk", "cardId": "cca3bc4f07b32950", "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c61b1a01891d", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-20T15:27:50Z", "archived": false, "topContributors": [ { "login": "wetw0rk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20763546?v=4", "type": "User" } ] }, { "repo": "k0keoyo/vir.it-explorer-anti-virus-null-pointer-reference-poc", "name": "vir.it-explorer-anti-virus-null-pointer-reference-poc", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/Vir.IT-explorer-Anti-Virus-Null-Pointer-Reference-PoC", "stars": 3, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "778489b540f6", "score": 24, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-11-28T11:14:28Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "secwiki/windows-kernel-exploits", "name": "windows-kernel-exploits", "owner": "secwiki", "url": "https://github.com/SecWiki/windows-kernel-exploits", "stars": 8703, "language": "C", "description": "windows-kernel-exploits Windows平台提权漏洞集合", "type": "tool", "lanes": [ "1" ], "author": { "name": "secwiki", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2019/03/12/htb-bastard.html", "title": "HTB: Bastard", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2018/10/27/htb-bounty.html", "title": "HTB: Bounty", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2021/03/17/htb-optimum.html", "title": "HTB: Optimum", "person": "0xdf" } ], "referencedCount": 3, "id": "e82712252476", "score": 23, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2021-06-11T23:29:15Z", "archived": false, "topContributors": [ { "login": "Gitmaninc", "c": 198, "avatar": "https://avatars.githubusercontent.com/u/23474504?v=4", "type": "User" }, { "login": "ourren", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/10292916?v=4", "type": "User" }, { "login": "CaledoniaProject", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1357701?v=4", "type": "User" }, { "login": "houjingyi233", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/20239840?v=4", "type": "User" }, { "login": "i0nAy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34414029?v=4", "type": "User" } ] }, { "repo": "googleprojectzero/symboliclink-testing-tools", "name": "symboliclink-testing-tools", "owner": "googleprojectzero", "url": "https://github.com/googleprojectzero/symboliclink-testing-tools", "stars": 861, "language": "C++", "description": "", "type": "tool", "lanes": [ "1" ], "author": { "name": "Google Project Zero", "cardId": "5319b799dd710ef8", "avatar": "https://avatars.githubusercontent.com/u/42936221?v=4" }, "referencedBy": [ { "url": "https://spaceraccoon.dev/zscaler-client-connector-local-privilege-escalation/", "title": "Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973)", "person": "Eugene Lim" }, { "url": "https://itm4n.github.io/cve-2020-0863-windows-diagtrack-info-disclo/", "title": "CVE-2020-0863 - An Arbitrary File Read Vulnerability in Windows Diagnostic Tracking Service", "person": "Clément Labro" }, { "url": "https://whereisk0shl.top/post/2019-06-08/", "title": "Whereisk0Shl", "person": "k0shl" } ], "referencedCount": 3, "id": "b05f43e7d97a", "score": 23, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "James Forshaw", "cardId": "04299fb937916aae", "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "login": "tyranid" } ], "pushedAt": "2022-12-13T16:01:13Z", "archived": true, "topContributors": [ { "login": "tyranid", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/461447?v=4", "type": "User" }, { "login": "lshagiev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1954912?v=4", "type": "User" }, { "login": "Jelana", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/957021?v=4", "type": "User" } ] }, { "repo": "hfiref0x/uacme", "name": "uacme", "owner": "hfiref0x", "url": "https://github.com/hfiref0x/UACME", "stars": 7702, "language": "C", "description": "Defeating Windows User Account Control", "type": "tool", "lanes": [ "1" ], "author": { "name": "hfiref0x", "cardId": null }, "referencedBy": [ { "url": "https://viralmaniar.github.io/internal%20pentest/internal%20infrastructure%20pentest/network%20pentest/active%20directory%20hacking/UAC-Bypass-Methods/", "title": "Internal Infrastructure Pentest - UAC Bypass", "person": "Viral Maniar" }, { "url": "https://hausec.com/2020/10/30/using-a-c-shellcode-runner-and-confuserex-to-bypass-uac-while-evading-av/", "title": "Using a C# Shellcode Runner and ConfuserEx to Bypass UAC", "person": "Ryan Hausknecht" } ], "referencedCount": 2, "id": "bbf87e590089", "score": 23, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-22T11:36:07Z", "archived": false, "topContributors": [ { "login": "hfiref0x", "c": 308, "avatar": "https://avatars.githubusercontent.com/u/10708977?v=4", "type": "User" }, { "login": "IvanovCosmin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12250543?v=4", "type": "User" } ] }, { "repo": "longld/peda", "name": "peda", "owner": "longld", "url": "https://github.com/longld/peda", "stars": 6139, "language": "Python", "description": "PEDA - Python Exploit Development Assistance for GDB", "type": "tool", "lanes": [ "1" ], "author": { "name": "longld", "cardId": null }, "referencedBy": [ { "url": "https://decoder.cloud/2017/06/15/simple-aslrnx-bypass-on-a-linux-32-bit-binary/", "title": "Simple ASLR/NX bypass on a Linux 32 bit binary", "person": "Andrea Pierini" }, { "url": "https://decoder.cloud/2017/01/25/idiots-guide-to-buffer-overflow-on-gnulinux-x64-architecture/", "title": "Idiot’s quick & dirty guide to buffer overflow on GNU/Linux X64 architecture", "person": "Andrea Pierini" } ], "referencedCount": 2, "id": "1254bd1fed21", "score": 23, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 24, "contributors": [], "pushedAt": "2024-07-29T08:32:28Z", "archived": false, "topContributors": [ { "login": "longld", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/38460?v=4", "type": "User" }, { "login": "danghvu", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1152714?v=4", "type": "User" }, { "login": "tmfink", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5265592?v=4", "type": "User" }, { "login": "n0tduck1e", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/40424574?v=4", "type": "User" }, { "login": "JonathanSalwan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/991046?v=4", "type": "User" }, { "login": "zachriggle", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/111640?v=4", "type": "User" }, { "login": "awailly", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/971755?v=4", "type": "User" }, { "login": "wapiflapi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1619783?v=4", "type": "User" }, { "login": "red0xff", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8383836?v=4", "type": "User" }, { "login": "nkitan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32483252?v=4", "type": "User" }, { "login": "Ali-Razmjoo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7676267?v=4", "type": "User" }, { "login": "Agahlot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8064144?v=4", "type": "User" }, { "login": "mancha1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2091641?v=4", "type": "User" }, { "login": "lambor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3370798?v=4", "type": "User" }, { "login": "degrigis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4940271?v=4", "type": "User" }, { "login": "bvanheu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/855181?v=4", "type": "User" }, { "login": "afq984", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4318379?v=4", "type": "User" }, { "login": "laanwj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/126646?v=4", "type": "User" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "quangnh89", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10832563?v=4", "type": "User" }, { "login": "mdumitru", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20269182?v=4", "type": "User" }, { "login": "privat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135828?v=4", "type": "User" }, { "login": "Grazfather", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/497310?v=4", "type": "User" }, { "login": "alanyee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1873994?v=4", "type": "User" } ] }, { "repo": "bats3c/ghost-in-the-logs", "name": "ghost-in-the-logs", "owner": "bats3c", "url": "https://github.com/bats3c/Ghost-In-The-Logs", "stars": 627, "language": "C", "description": "Evade sysmon and windows event logging", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [ { "url": "https://code-white.com/blog/2022-09-attacks-on-sysmon-revisited-sysmonente/", "title": "CODE WHITE | Attacks on Sysmon Revisited - SysmonEnte", "person": "Sebastian Feldmann" } ], "referencedCount": 1, "id": "300e4330f6d6", "score": 23, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-08T09:18:00Z", "archived": false, "topContributors": [ { "login": "bats3c", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" } ] }, { "repo": "bats3c/evtmute", "name": "evtmute", "owner": "bats3c", "url": "https://github.com/bats3c/EvtMute", "stars": 264, "language": "C#", "description": "Apply a filter to the events being reported by windows event logging", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [ { "url": "https://code-white.com/blog/2022-09-attacks-on-sysmon-revisited-sysmonente/", "title": "CODE WHITE | Attacks on Sysmon Revisited - SysmonEnte", "person": "Sebastian Feldmann" } ], "referencedCount": 1, "id": "8368010dde4f", "score": 23, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-24T19:23:39Z", "archived": false, "topContributors": [ { "login": "bats3c", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/cve-2022-22733", "name": "cve-2022-22733", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/CVE-2022-22733", "stars": 2, "language": "Java", "description": "Apache ShardingSphere ElasticJob-UI Privilege Escalation & RCE Exploit", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [ { "url": "https://zeyadazima.com/vulnerability/cve%20analysis/CVE_2022_22733_exploit/", "title": "Exploit Writing: CVE-2022-22733 Privilege Escalation & RCE", "person": "Zer0verflow" } ], "referencedCount": 1, "id": "163d7f883f35", "score": 23, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-22T12:49:23Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "google/tsunami-security-scanner", "name": "tsunami-security-scanner", "owner": "google", "url": "https://github.com/google/tsunami-security-scanner", "id": "1b6a84611184", "stars": 8594, "language": "Java", "description": "Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.", "type": "tool", "pushedAt": "2026-06-23T16:05:00Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "google", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 35, "topContributors": [ { "login": "tooryx", "c": 128, "avatar": "https://avatars.githubusercontent.com/u/1128705?v=4", "type": "User" }, { "login": "maoning", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/3221650?v=4", "type": "User" }, { "login": "magl0", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/62085925?v=4", "type": "User" }, { "login": "jkim-y", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/26202764?v=4", "type": "User" }, { "login": "copybara-github", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/32201506?v=4", "type": "User" }, { "login": "nttran8", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/56736094?v=4", "type": "User" }, { "login": "robert-doyensec", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/105673599?v=4", "type": "User" }, { "login": "gaby", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/835733?v=4", "type": "User" }, { "login": "moritzwilhelm", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/40300296?v=4", "type": "User" }, { "login": "cpovirk", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1703908?v=4", "type": "User" }, { "login": "giacomo-doyensec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/178813041?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "lokiuox", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25590129?v=4", "type": "User" }, { "login": "yusmer96-maker", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/254577896?v=4", "type": "User" }, { "login": "guolim", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7298964?v=4", "type": "User" }, { "login": "erikvarga", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6419841?v=4", "type": "User" }, { "login": "aminvakil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12948692?v=4", "type": "User" }, { "login": "YuriyPobezhymov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2714671?v=4", "type": "User" }, { "login": "W0ngL1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/148697527?v=4", "type": "User" }, { "login": "VHFG22", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7108358?v=4", "type": "User" }, { "login": "shrutig-287", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78169346?v=4", "type": "User" }, { "login": "runzw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78052475?v=4", "type": "User" }, { "login": "gameroman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/121314722?v=4", "type": "User" }, { "login": "rayanht", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42040895?v=4", "type": "User" }, { "login": "AleksMat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9626750?v=4", "type": "User" }, { "login": "ikkisoft", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6027823?v=4", "type": "User" }, { "login": "cushon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/478458?v=4", "type": "User" }, { "login": "LeonardoE95", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23461714?v=4", "type": "User" }, { "login": "JonZeolla", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1385510?v=4", "type": "User" }, { "login": "jeffbdye", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4132425?v=4", "type": "User" } ] }, { "repo": "nvidia/garak", "name": "garak", "owner": "NVIDIA", "url": "https://github.com/NVIDIA/garak", "id": "5bd46cb5aca0", "stars": 8484, "language": "Python", "description": "the LLM vulnerability scanner", "type": "tool", "pushedAt": "2026-07-14T20:29:03Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "NVIDIA", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Erick Galinkin", "cardId": "4bd8253a2fb511e3", "avatar": "https://avatars.githubusercontent.com/u/43585941?v=4", "login": "erickgalinkin" } ], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "leondz", "c": 1963, "avatar": "https://avatars.githubusercontent.com/u/121934?v=4", "type": "User" }, { "login": "jmartin-tech", "c": 788, "avatar": "https://avatars.githubusercontent.com/u/7873740?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 334, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "erickgalinkin", "c": 232, "avatar": "https://avatars.githubusercontent.com/u/43585941?v=4", "type": "User" }, { "login": "patriciapampanelli", "c": 163, "avatar": "https://avatars.githubusercontent.com/u/38949950?v=4", "type": "User" }, { "login": "dchiitmalla", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/19983789?v=4", "type": "User" }, { "login": "dyrtyData", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/128150296?v=4", "type": "User" }, { "login": "aishwaryap", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/6442600?v=4", "type": "User" }, { "login": "arjun-krishna1", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/45014214?v=4", "type": "User" }, { "login": "masayaOgushi", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/69960846?v=4", "type": "User" }, { "login": "martinebl", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/31307962?v=4", "type": "User" }, { "login": "otavionvidia", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/198823484?v=4", "type": "User" }, { "login": "Shine-afk", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/64374762?v=4", "type": "User" }, { "login": "Nakul-Rajpal", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/66713174?v=4", "type": "User" }, { "login": "mikemckiernan", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/18604620?v=4", "type": "User" }, { "login": "shubhobm", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/5998450?v=4", "type": "User" }, { "login": "mrowebot", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/155050?v=4", "type": "User" }, { "login": "mmilenkovic-groq", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/167300017?v=4", "type": "User" }, { "login": "fabriziorocco", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/34063386?v=4", "type": "User" }, { "login": "JosephDavisC", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/118593202?v=4", "type": "User" }, { "login": "Abhiraj-GetGarak", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/224738401?v=4", "type": "User" }, { "login": "Har1sh-k", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/175143685?v=4", "type": "User" }, { "login": "paulinek13", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/71526180?v=4", "type": "User" }, { "login": "dimensi0n", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/25726586?v=4", "type": "User" }, { "login": "iamnotcj", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/69222710?v=4", "type": "User" }, { "login": "eric-therond", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/11455652?v=4", "type": "User" }, { "login": "leoneperdigao", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/8030485?v=4", "type": "User" }, { "login": "0x3df", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/97925421?v=4", "type": "User" }, { "login": "markd88", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/60863693?v=4", "type": "User" }, { "login": "JakeBx", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10805197?v=4", "type": "User" } ] }, { "repo": "nccgroup/scoutsuite", "name": "ScoutSuite", "owner": "nccgroup", "url": "https://github.com/nccgroup/ScoutSuite", "id": "8595a2d987ce", "stars": 7753, "language": "Python", "description": "Multi-Cloud Security Auditing Tool", "type": "tool", "pushedAt": "2025-09-23T18:33:52Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Philippe Dugre", "cardId": "936bcc469125be85", "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "login": "zer0x64" }, { "name": "Thomas Wilson", "cardId": "198187605611d67f", "avatar": "https://avatars.githubusercontent.com/u/59574692?v=4", "login": "twilson-bf" } ], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 88, "topContributors": [ { "login": "x4v13r64", "c": 2465, "avatar": "https://avatars.githubusercontent.com/u/4206926?v=4", "type": "User" }, { "login": "l01cd3v", "c": 1107, "avatar": "https://avatars.githubusercontent.com/u/751555?v=4", "type": "User" }, { "login": "Aboisier", "c": 671, "avatar": "https://avatars.githubusercontent.com/u/6698529?v=4", "type": "User" }, { "login": "misg", "c": 340, "avatar": "https://avatars.githubusercontent.com/u/9290766?v=4", "type": "User" }, { "login": "Remi05", "c": 282, "avatar": "https://avatars.githubusercontent.com/u/12770956?v=4", "type": "User" }, { "login": "vifor2", "c": 210, "avatar": "https://avatars.githubusercontent.com/u/17322874?v=4", "type": "User" }, { "login": "zer0x64", "c": 156, "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "type": "User" }, { "login": "klauern", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/4735?v=4", "type": "User" }, { "login": "fernando-gallego", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/102300106?v=4", "type": "User" }, { "login": "PizcoJose", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/2911340?v=4", "type": "User" }, { "login": "xnkevinnguyen", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/23067852?v=4", "type": "User" }, { "login": "alessandrogonzalez3", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/45611322?v=4", "type": "User" }, { "login": "SophieDorval", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/42855086?v=4", "type": "User" }, { "login": "ramimac", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/13310971?v=4", "type": "User" }, { "login": "michyweb", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/18649677?v=4", "type": "User" }, { "login": "rossja", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/230677?v=4", "type": "User" }, { "login": "rtomlinson-latacora", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/46055422?v=4", "type": "User" }, { "login": "ncc-akis", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/109275466?v=4", "type": "User" }, { "login": "alessandrogonzalez", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/38495473?v=4", "type": "User" }, { "login": "lowSoA", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/66413174?v=4", "type": "User" }, { "login": "liyun-li", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/6879211?v=4", "type": "User" }, { "login": "mitsuo0114", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1777798?v=4", "type": "User" }, { "login": "gebailey", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6430187?v=4", "type": "User" }, { "login": "4ndygu", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/9059403?v=4", "type": "User" }, { "login": "rieck-srlabs", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/135810953?v=4", "type": "User" }, { "login": "rdegraaf-ncc3", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/136008756?v=4", "type": "User" }, { "login": "cckev", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/24238564?v=4", "type": "User" }, { "login": "rscottbailey", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/10817431?v=4", "type": "User" }, { "login": "franco-bb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1777967?v=4", "type": "User" }, { "login": "saez0pub", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3484146?v=4", "type": "User" } ] }, { "repo": "presidentbeef/brakeman", "name": "brakeman", "owner": "presidentbeef", "url": "https://github.com/presidentbeef/brakeman", "id": "849b62a23a7f", "stars": 7256, "language": "Ruby", "description": "A static analysis security vulnerability scanner for Ruby on Rails applications", "type": "tool", "pushedAt": "2026-06-15T15:20:22Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "presidentbeef", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Joernchen", "cardId": "f6bb8abb77bc86d6", "avatar": "https://avatars.githubusercontent.com/u/1334559?v=4", "login": "joernchen" } ], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "presidentbeef", "c": 3001, "avatar": "https://avatars.githubusercontent.com/u/75613?v=4", "type": "User" }, { "login": "oreoshake", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/448516?v=4", "type": "User" }, { "login": "ptoomey3", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/103360?v=4", "type": "User" }, { "login": "escheiner", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/29931264?v=4", "type": "User" }, { "login": "barttenbrinke", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/8935?v=4", "type": "User" }, { "login": "mastahyeti", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/68609591?v=4", "type": "User" }, { "login": "andyw8", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/13400?v=4", "type": "User" }, { "login": "themetric", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1435186?v=4", "type": "User" }, { "login": "zlx", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1835854?v=4", "type": "User" }, { "login": "bethanyr", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/4753589?v=4", "type": "User" }, { "login": "JacobEvelyn", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1114569?v=4", "type": "User" }, { "login": "codeferret", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/872048?v=4", "type": "User" }, { "login": "jsyeo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1090020?v=4", "type": "User" }, { "login": "noahd1", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/11672?v=4", "type": "User" }, { "login": "pbernery", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13909?v=4", "type": "User" }, { "login": "viralpraxis", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/39729785?v=4", "type": "User" }, { "login": "gazayas", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10546292?v=4", "type": "User" }, { "login": "grosser", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/11367?v=4", "type": "User" }, { "login": "wfleming", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188402?v=4", "type": "User" }, { "login": "btoews", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1144197?v=4", "type": "User" }, { "login": "eliblock", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3347571?v=4", "type": "User" }, { "login": "adamnengland", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/160137?v=4", "type": "User" }, { "login": "abedra", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2090?v=4", "type": "User" }, { "login": "arpitjain099", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3242828?v=4", "type": "User" }, { "login": "brynary", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19?v=4", "type": "User" }, { "login": "phene", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/166528?v=4", "type": "User" }, { "login": "jeffrafter", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4064?v=4", "type": "User" }, { "login": "fsword", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/18908?v=4", "type": "User" }, { "login": "pocke", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4361134?v=4", "type": "User" }, { "login": "ssendev", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/450793?v=4", "type": "User" } ] }, { "repo": "the-z-labs/linux-exploit-suggester", "name": "linux-exploit-suggester", "owner": "the-z-labs", "url": "https://github.com/The-Z-Labs/linux-exploit-suggester", "stars": 6565, "language": "Shell", "description": "Linux privilege escalation auditing tool", "type": "tool", "lanes": [ "1" ], "author": { "name": "the-z-labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "id": "daea2d2f92fd", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2026-03-20T13:15:21Z", "archived": false, "topContributors": [ { "login": "mzet-", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/4785347?v=4", "type": "User" }, { "login": "bcoles", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "z-labs-eu", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/69972030?v=4", "type": "User" }, { "login": "emanuelduss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/438188?v=4", "type": "User" }, { "login": "stuartw1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1748393?v=4", "type": "User" }, { "login": "vanhauser-thc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7396244?v=4", "type": "User" } ] }, { "repo": "sensepost/regeorg", "name": "reGeorg", "owner": "sensepost", "url": "https://github.com/sensepost/reGeorg", "id": "e949ba60f497", "stars": 3183, "language": "Python", "description": "The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.", "type": "tool", "pushedAt": "2025-03-06T09:56:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "login": "staaldraad" } ], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "joda32", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/5188052?v=4", "type": "User" }, { "login": "vulp1n3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6046311?v=4", "type": "User" }, { "login": "staaldraad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" } ] }, { "repo": "netspi/powerupsql", "name": "PowerUpSQL", "owner": "NetSPI", "url": "https://github.com/NetSPI/PowerUpSQL", "id": "d25a72ee8713", "stars": 2726, "language": "PowerShell", "description": "PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server", "type": "tool", "pushedAt": "2024-12-12T18:09:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Karl Fosaaen", "cardId": "e43baf62974d03ca", "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "login": "kfosaaen" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Leo Pitt", "cardId": "97717313eb48577a", "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "login": "D00MFist" }, { "name": "Andrew Luke", "cardId": "4bc975d1fc1597df", "avatar": "https://avatars.githubusercontent.com/u/7460483?v=4", "login": "Sw4mpf0x" } ], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 15, "topContributors": [ { "login": "nullbind", "c": 960, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" }, { "login": "thomaselling", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2888142?v=4", "type": "User" }, { "login": "kfosaaen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "type": "User" }, { "login": "0xe7", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13423848?v=4", "type": "User" }, { "login": "egru", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" }, { "login": "phackt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19553457?v=4", "type": "User" }, { "login": "mgeeky", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "0xbadjuju", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1656007?v=4", "type": "User" }, { "login": "D00MFist", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17372992?v=4", "type": "User" }, { "login": "ktaranov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6460726?v=4", "type": "User" }, { "login": "megabug", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15011974?v=4", "type": "User" }, { "login": "Sw4mpf0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7460483?v=4", "type": "User" }, { "login": "YinjiDawn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23437371?v=4", "type": "User" }, { "login": "nerotix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6172483?v=4", "type": "User" }, { "login": "vsamiamv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63832288?v=4", "type": "User" } ] }, { "repo": "ghostpack/safetykatz", "name": "SafetyKatz", "owner": "GhostPack", "url": "https://github.com/GhostPack/SafetyKatz", "id": "11e939a58ea5", "stars": 1327, "language": "C#", "description": "SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader", "type": "tool", "pushedAt": "2019-10-01T16:47:21Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 2, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "cnotin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" } ] }, { "repo": "firefart/stunner", "name": "stunner", "owner": "firefart", "url": "https://github.com/firefart/stunner", "stars": 854, "language": "Go", "description": "Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers.", "type": "tool", "lanes": [ "2" ], "author": { "name": "C:\\hristian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "47508c085f9c", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-07-16T20:42:54Z", "archived": false, "topContributors": [ { "login": "firefart", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 58, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "github-actions[bot]", "c": 11, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "kmathisbf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82833266?v=4", "type": "User" } ] }, { "repo": "cracked5pider/ekko", "name": "Ekko", "owner": "Cracked5pider", "url": "https://github.com/Cracked5pider/Ekko", "id": "28db52209b70", "stars": 839, "language": "C", "description": "Sleep Obfuscation", "type": "tool", "pushedAt": "2023-12-03T18:14:03Z", "archived": true, "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Cracked5pider", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" }, { "login": "adamsvoboda", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3341597?v=4", "type": "User" }, { "login": "timwhitez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36320909?v=4", "type": "User" } ] }, { "repo": "gossithedog/hivenightmare", "name": "hivenightmare", "owner": "gossithedog", "url": "https://github.com/GossiTheDog/HiveNightmare", "stars": 835, "language": "C++", "description": "Exploit allowing you to read registry hives as non-admin on Windows 10 and 11", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kevin Beaumont", "cardId": "34404b75de29b57f", "avatar": "https://avatars.githubusercontent.com/u/34346399?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1b029bcdfbb2", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 4, "contributors": [], "pushedAt": "2021-07-26T14:17:54Z", "archived": false, "topContributors": [ { "login": "GossiTheDog", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/34346399?v=4", "type": "User" }, { "login": "K-Mistele", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/18430555?v=4", "type": "User" }, { "login": "DHerls", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5505389?v=4", "type": "User" }, { "login": "HynekPetrak", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8593983?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2021-31166", "name": "cve-2021-31166", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2021-31166", "stars": 828, "language": "Python", "description": "Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6f86d14f213", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-12T08:27:09Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/inveighzero", "name": "InveighZero", "owner": "Kevin-Robertson", "url": "https://github.com/Kevin-Robertson/InveighZero", "id": "e559f6ae88eb", "stars": 816, "language": null, "description": ".NET IPv4/IPv6 machine-in-the-middle tool for penetration testers", "type": "tool", "pushedAt": "2022-08-28T22:17:52Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Kevin-Robertson", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" }, { "login": "mcorybillington", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24510213?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "hasherezade/dll_to_exe", "name": "dll_to_exe", "owner": "hasherezade", "url": "https://github.com/hasherezade/dll_to_exe", "stars": 814, "language": "C++", "description": "Converts a DLL into EXE", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "daf707bdd1e9", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-23T22:00:44Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "hasherezade/demos", "name": "demos", "owner": "hasherezade", "url": "https://github.com/hasherezade/demos", "stars": 787, "language": "C", "description": "Demos of various injection techniques found in malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aea2583ccda4", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-15T13:26:57Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "maldev-academy/dumpbrowsersecrets", "name": "DumpBrowserSecrets", "owner": "Maldev-Academy", "url": "https://github.com/Maldev-Academy/DumpBrowserSecrets", "id": "0a15a41e9781", "stars": 782, "language": "C", "description": "Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Ch", "type": "tool", "pushedAt": "2026-05-31T12:27:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "login": "NUL0x4C" } ], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "NUL0x4C", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "type": "User" }, { "login": "l00sy4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/142809264?v=4", "type": "User" } ] }, { "repo": "x86byte/obfusk8", "name": "Obfusk8", "owner": "x86byte", "url": "https://github.com/x86byte/Obfusk8", "id": "68e3dcd9c05d", "stars": 778, "language": "C++", "description": "Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries", "type": "tool", "pushedAt": "2026-06-25T14:45:47Z", "archived": false, "lanes": [ "2" ], "author": { "name": "x86byte", "cardId": "ac9359867d6fdf55", "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "x86byte", "c": 107, "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4", "type": "User" }, { "login": "stroofen", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/58114490?v=4", "type": "User" } ] }, { "repo": "luckypipewrench/pipelock", "name": "pipelock", "owner": "luckypipewrench", "url": "https://github.com/luckyPipewrench/pipelock", "stars": 771, "language": "Go", "description": "Open-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action rec", "type": "tool", "lanes": [ "2" ], "author": { "name": "LPW", "cardId": "fe5137b0f9aa2973", "avatar": "https://avatars.githubusercontent.com/u/142104046?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5eee3997bb96", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [], "pushedAt": "2026-07-18T02:34:37Z", "archived": false, "topContributors": [ { "login": "luckyPipewrench", "c": 871, "avatar": "https://avatars.githubusercontent.com/u/142104046?v=4", "type": "User" }, { "login": "renovate[bot]", "c": 48, "avatar": "https://avatars.githubusercontent.com/in/2740?v=4", "type": "Bot" }, { "login": "dependabot[bot]", "c": 45, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Ayush7614", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/67006255?v=4", "type": "User" }, { "login": "annawhooo", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/67273818?v=4", "type": "User" }, { "login": "DeathCamel58", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/37940282?v=4", "type": "User" }, { "login": "Jorilx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/600767?v=4", "type": "User" } ] }, { "repo": "zigoo0/jsonbee", "name": "jsonbee", "owner": "zigoo0", "url": "https://github.com/zigoo0/JSONBee", "stars": 763, "language": "PHP", "description": "A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ahmed Zayed (Zigoo0)", "cardId": "76eca05f315563a7", "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4abb8153ed4e", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-05-06T17:53:51Z", "archived": false, "topContributors": [ { "login": "zigoo0", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4", "type": "User" }, { "login": "Maltemo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18104855?v=4", "type": "User" }, { "login": "PinkDraconian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44903767?v=4", "type": "User" } ] }, { "repo": "ropnop/impacket_static_binaries", "name": "impacket_static_binaries", "owner": "ropnop", "url": "https://github.com/ropnop/impacket_static_binaries", "stars": 751, "language": "Python", "description": "Standalone binaries for Linux/Windows of Impacket's examples", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "833adf0159ce", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 94, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" }, { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" } ], "pushedAt": "2023-07-25T12:36:19Z", "archived": false, "topContributors": [ { "login": "asolino", "c": 1318, "avatar": "https://avatars.githubusercontent.com/u/11577828?v=4", "type": "User" }, { "login": "ropnop", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "dirkjanm", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "mohemiv", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/5724896?v=4", "type": "User" }, { "login": "kacpern", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/1493775?v=4", "type": "User" }, { "login": "cnotin", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "MrAnde7son", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/15673250?v=4", "type": "User" }, { "login": "0xdeaddood", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/56035084?v=4", "type": "User" }, { "login": "rdubourguais", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/12847917?v=4", "type": "User" }, { "login": "martinuy", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/22035856?v=4", "type": "User" }, { "login": "cclauss", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "franferrax", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/8713657?v=4", "type": "User" }, { "login": "cube0x0", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/39370848?v=4", "type": "User" }, { "login": "contactr2m", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13003246?v=4", "type": "User" }, { "login": "rmaksimov", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "real-datagram", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/20213337?v=4", "type": "User" }, { "login": "0xsauby", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7544525?v=4", "type": "User" }, { "login": "machosec", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17451964?v=4", "type": "User" }, { "login": "exploide", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5670236?v=4", "type": "User" }, { "login": "c0d3z3r0", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6205797?v=4", "type": "User" }, { "login": "mgeeky", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "G0ldenGunSec", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/28241763?v=4", "type": "User" }, { "login": "Rcarnus", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8790185?v=4", "type": "User" }, { "login": "mlefebvre", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2453368?v=4", "type": "User" }, { "login": "mubix", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" }, { "login": "MrTchuss", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1767120?v=4", "type": "User" }, { "login": "Mr-Yacin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5294237?v=4", "type": "User" }, { "login": "skelsec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19204702?v=4", "type": "User" }, { "login": "fuzzKitty", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/31076796?v=4", "type": "User" }, { "login": "UNC1739", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "renwax23/xsstron", "name": "xsstron", "owner": "renwax23", "url": "https://github.com/RenwaX23/XSSTRON", "stars": 747, "language": "JavaScript", "description": "Electron JS Browser To Find XSS Vulnerabilities Automatically", "type": "tool", "lanes": [ "2" ], "author": { "name": "Renwa", "cardId": "37d4c41b4f63c494", "avatar": "https://avatars.githubusercontent.com/u/13907591?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d022b3d429ba", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-03-30T06:23:00Z", "archived": false, "topContributors": [ { "login": "RenwaX23", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/13907591?v=4", "type": "User" }, { "login": "parad0x-0xff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62678327?v=4", "type": "User" } ] }, { "repo": "octoberfest7/inline-execute-pe", "name": "Inline-Execute-PE", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/Inline-Execute-PE", "id": "4170244b6b59", "stars": 724, "language": "C", "description": "Execute unmanaged Windows executables in CobaltStrike Beacons ", "type": "tool", "pushedAt": "2023-03-04T00:07:49Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Octoberfest7", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "dsfgfdg", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5831365?v=4", "type": "User" } ] }, { "repo": "joasasantos/red-team-exercises", "name": "red-team-exercises", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Red-Team-Exercises", "stars": 719, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "66b0dd4f7538", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-09T22:52:06Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 105, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "taksec/chatgpt-prompts-bug-bounty", "name": "chatgpt-prompts-bug-bounty", "owner": "TakSec", "url": "https://github.com/TakSec/chatgpt-prompts-bug-bounty", "id": "5637de5e1ccc", "stars": 711, "language": null, "description": "ChatGPT Prompts for Bug Bounty & Pentesting", "type": "tool", "pushedAt": "2023-10-03T17:36:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mike Takahashi", "cardId": "6b4cebd7323e9607", "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "TakSec", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4", "type": "User" } ] }, { "repo": "hasherezade/process_ghosting", "name": "process_ghosting", "owner": "hasherezade", "url": "https://github.com/hasherezade/process_ghosting", "stars": 694, "language": "C", "description": "Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1fd52fd727a5", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-11T18:23:06Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "jobertabma/virtual-host-discovery", "name": "virtual-host-discovery", "owner": "jobertabma", "url": "https://github.com/jobertabma/virtual-host-discovery", "id": "8ce67c97d5da", "stars": 694, "language": "Ruby", "description": "A script to enumerate virtual hosts on a server.", "type": "tool", "pushedAt": "2017-12-28T19:07:10Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jobert Abma", "cardId": "0d878e2584e64386", "avatar": "https://avatars.githubusercontent.com/u/156693?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jobertabma", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/156693?v=4", "type": "User" } ] }, { "repo": "nicholasaleks/damn-vulnerable-drone", "name": "Damn-Vulnerable-Drone", "owner": "nicholasaleks", "url": "https://github.com/nicholasaleks/Damn-Vulnerable-Drone", "id": "100ec662dbfe", "stars": 689, "language": "JavaScript", "description": "Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking.", "type": "tool", "pushedAt": "2026-07-08T19:22:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nick Aleks", "cardId": "28d1808f86ede3c0", "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "nicholasaleks", "c": 252, "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4", "type": "User" }, { "login": "Rud3m", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/164388826?v=4", "type": "User" }, { "login": "pljoel", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/19435107?v=4", "type": "User" }, { "login": "NotReallyJustin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60296568?v=4", "type": "User" }, { "login": "dwdrone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/141360363?v=4", "type": "User" } ] }, { "repo": "urbanadventurer/urlcrazy", "name": "urlcrazy", "owner": "urbanadventurer", "url": "https://github.com/urbanadventurer/urlcrazy", "id": "1238fd42802b", "stars": 687, "language": "Ruby", "description": "Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.", "type": "tool", "pushedAt": "2025-07-28T07:24:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Andrew Horton", "cardId": "ce17217268421b81", "avatar": "https://avatars.githubusercontent.com/u/101783?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "urbanadventurer", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/101783?v=4", "type": "User" }, { "login": "HenkPoley", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2931213?v=4", "type": "User" }, { "login": "matthewflannery", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12246589?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "rek7/fireelf", "name": "fireelf", "owner": "rek7", "url": "https://github.com/rek7/fireELF", "stars": 684, "language": "Python", "description": "fireELF - Fileless Linux Malware Framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df43bc3d8b8f", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-17T21:42:38Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "mordavid/networkhound", "name": "networkhound", "owner": "mordavid", "url": "https://github.com/MorDavid/NetworkHound", "stars": 674, "language": "Python", "description": "Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑com", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "284d0c888296", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-16T14:43:51Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" }, { "login": "AlexLinov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74632540?v=4", "type": "User" } ] }, { "repo": "hasherezade/process_doppelganging", "name": "process_doppelganging", "owner": "hasherezade", "url": "https://github.com/hasherezade/process_doppelganging", "stars": 651, "language": "C", "description": "My implementation of enSilo's Process Doppelganging (PE injection technique)", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "44cdb1db5712", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-08-30T17:24:29Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "DymOK93", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66731516?v=4", "type": "User" } ] }, { "repo": "bohops/ultimatewdacbypasslist", "name": "ultimatewdacbypasslist", "owner": "bohops", "url": "https://github.com/bohops/UltimateWDACBypassList", "stars": 630, "language": null, "description": "A centralized resource for previously documented WDAC bypass techniques", "type": "tool", "lanes": [ "2" ], "author": { "name": "bohops", "cardId": "e2182aefda331dc9", "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c23f639b8b5", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-08T02:25:05Z", "archived": false, "topContributors": [ { "login": "bohops", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4", "type": "User" } ] }, { "repo": "soxoj/counter-osint-guide-ru", "name": "counter-osint-guide-ru", "owner": "soxoj", "url": "https://github.com/soxoj/counter-osint-guide-ru", "stars": 627, "language": null, "description": "Исчерпывающее руководство по приватности и контр-ОСИНТ для Рунета и всего СНГ 🇷🇺 ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d6b756e7088a", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-05-05T20:05:03Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" }, { "login": "whoamins", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/66217512?v=4", "type": "User" }, { "login": "duk3r4", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/137871056?v=4", "type": "User" }, { "login": "SOsintOps", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/28706121?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2019-11708", "name": "cve-2019-11708", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2019-11708", "stars": 625, "language": "JavaScript", "description": "Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "009df44f73dd", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-13T17:40:14Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "epi052/osed-scripts", "name": "osed-scripts", "owner": "epi052", "url": "https://github.com/epi052/osed-scripts", "stars": 622, "language": "Python", "description": "bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)", "type": "tool", "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da60d73630c9", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 9, "contributors": [ { "name": "netspooky", "cardId": "2871024bf179b2d2", "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "login": "netspooky" } ], "pushedAt": "2024-07-15T15:59:57Z", "archived": false, "topContributors": [ { "login": "epi052", "c": 80, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" }, { "login": "matthiaskonrath", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/14911746?v=4", "type": "User" }, { "login": "cj-zoltan-balazs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60389717?v=4", "type": "User" }, { "login": "GJL", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1681921?v=4", "type": "User" }, { "login": "tahadraidia", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3128363?v=4", "type": "User" }, { "login": "mulpdev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20996483?v=4", "type": "User" }, { "login": "mahatah", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3663872?v=4", "type": "User" }, { "login": "netspooky", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26436276?v=4", "type": "User" }, { "login": "pussinboots1992", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36692110?v=4", "type": "User" } ] }, { "repo": "eversinc33/banshee", "name": "banshee", "owner": "eversinc33", "url": "https://github.com/eversinc33/Banshee", "stars": 610, "language": "C++", "description": "Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "77854933d3de", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Victor", "cardId": "968f64759458be6a", "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "login": "joaoviictorti" } ], "pushedAt": "2025-08-02T06:49:58Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" }, { "login": "joaoviictorti", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/85838827?v=4", "type": "User" }, { "login": "donnaskiez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/54422048?v=4", "type": "User" } ] }, { "repo": "s0md3v/parth", "name": "parth", "owner": "s0md3v", "url": "https://github.com/s0md3v/Parth", "stars": 604, "language": "Python", "description": "Heuristic Vulnerable Parameter Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b0866cc1206", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-01-08T06:26:26Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "rykkard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51889048?v=4", "type": "User" } ] }, { "repo": "s0md3v/bolt", "name": "bolt", "owner": "s0md3v", "url": "https://github.com/s0md3v/Bolt", "stars": 591, "language": "Python", "description": "CSRF Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c9e490192275", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-06-28T06:36:05Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "fabelx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38182176?v=4", "type": "User" }, { "login": "kenjoe41", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5236699?v=4", "type": "User" } ] }, { "repo": "specterops/mssqlhound", "name": "MSSQLHound", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/MSSQLHound", "id": "3f58cae7f62b", "stars": 338, "language": "Go", "description": "Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph", "type": "tool", "pushedAt": "2026-07-10T05:24:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" } ], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "Mayyhem", "c": 169, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" }, { "login": "jazofra", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/33320493?v=4", "type": "User" }, { "login": "claude", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" }, { "login": "danti1988", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91211347?v=4", "type": "User" } ] }, { "repo": "trustedsec/elfloader", "name": "ELFLoader", "owner": "trustedsec", "url": "https://github.com/trustedsec/ELFLoader", "id": "b97850696fa9", "stars": 328, "language": "C", "description": "", "type": "tool", "pushedAt": "2022-05-16T17:48:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kevin Haubris", "cardId": "3675f451e4ed1ecc", "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "login": "kev169" } ], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kev169", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "type": "User" } ] }, { "repo": "trustedsec/ridenum", "name": "ridenum", "owner": "trustedsec", "url": "https://github.com/trustedsec/ridenum", "id": "8eff8f254eea", "stars": 315, "language": "Python", "description": "Rid_enum is a null session RID cycle attack for brute forcing domain controllers.", "type": "tool", "pushedAt": "2024-07-28T12:31:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "login": "ropnop" } ], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "tomsteele", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2497381?v=4", "type": "User" }, { "login": "HackingDave", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "nccbarny", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/284573920?v=4", "type": "User" }, { "login": "0v3rride", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35246589?v=4", "type": "User" }, { "login": "ropnop", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "g0tmi1k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/535942?v=4", "type": "User" } ] }, { "repo": "trustedsec/spraywmi", "name": "spraywmi", "owner": "trustedsec", "url": "https://github.com/trustedsec/spraywmi", "id": "a026d8b08cba", "stars": 251, "language": "Python", "description": "SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.", "type": "tool", "pushedAt": "2015-11-24T15:13:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "leebaird", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" } ] }, { "repo": "jeffmcjunkin/endgame", "name": "endgame", "owner": "jeffmcjunkin", "url": "https://github.com/jeffmcjunkin/endgame", "stars": 17, "language": "Python", "description": "An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0be3536a355d", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 7, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-16T22:36:47Z", "archived": false, "topContributors": [ { "login": "jeffmcjunkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" } ] }, { "repo": "stokfredrik/argus", "name": "argus", "owner": "stokfredrik", "url": "https://github.com/stokfredrik/argus", "stars": 17, "language": "Shell", "description": "Forensic-by-default OSX sandbox for AI coding agents.", "type": "tool", "lanes": [ "2" ], "author": { "name": "STÖK", "cardId": "0b2906a332aac817", "avatar": "https://avatars.githubusercontent.com/u/41341680?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "975f3d2e343f", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-21T09:27:24Z", "archived": false, "topContributors": [ { "login": "stokfredrik", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/41341680?v=4", "type": "User" } ] }, { "repo": "wunderwuzzi23/wuzzi-chat", "name": "wuzzi-chat", "owner": "wunderwuzzi23", "url": "https://github.com/wunderwuzzi23/wuzzi-chat", "stars": 17, "language": "Python", "description": "Simple Chatbot for testing AI Red Team tooling", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johann Rehberger", "cardId": "549d2d53d4f9b03f", "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7cb7ed4bba83", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-02-11T06:05:00Z", "archived": false, "topContributors": [ { "login": "tcpiplab", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/816651?v=4", "type": "User" }, { "login": "johannr-dev", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/172562254?v=4", "type": "User" }, { "login": "wunderwuzzi23", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4", "type": "User" }, { "login": "lshep-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117468106?v=4", "type": "User" } ] }, { "repo": "deletehead/soc-200-osda", "name": "soc-200-osda", "owner": "deletehead", "url": "https://github.com/deletehead/SOC-200-OSDA", "stars": 17, "language": "PowerShell", "description": "Resources and notes for Offensive Security's SOC-200 course and OffSec Defense Analyst (OSDA) exam", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jake Mayhew", "cardId": "96557237148df963", "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7c81d49d0b81", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-19T18:56:26Z", "archived": false, "topContributors": [ { "login": "deletehead", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/49874223?v=4", "type": "User" } ] }, { "repo": "haxorthematrix/bleptd", "name": "bleptd", "owner": "haxorthematrix", "url": "https://github.com/haxorthematrix/BLEPTD", "stars": 16, "language": "C++", "description": "BLE Privacy Threat Detector - ESP32 CYD firmware for detecting trackers, smart glasses, and other BLE surveillance devices", "type": "tool", "lanes": [ "2" ], "author": { "name": "Larry Pesce", "cardId": "03ac265c7f266f92", "avatar": "https://avatars.githubusercontent.com/u/273335?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5a1d97ad809a", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-15T13:19:22Z", "archived": false, "topContributors": [ { "login": "haxorthematrix", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/273335?v=4", "type": "User" } ] }, { "repo": "its-a-feature/macos-popups", "name": "macos-popups", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/macos-popups", "stars": 16, "language": null, "description": "Catalog Red Team techniques that cause popups in various macOS versions", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9da47c3e1f8b", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-18T23:16:05Z", "archived": false, "topContributors": [ { "login": "its-a-feature", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4", "type": "User" } ] }, { "repo": "carnal0wnage/redteam-backlog", "name": "redteam-backlog", "owner": "carnal0wnage", "url": "https://github.com/carnal0wnage/redteam-backlog", "stars": 16, "language": null, "description": "A list of generic Red Team \"backlog\" items that most Red Teams would do to prep for operations or to work on during down time", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Gates", "cardId": "2c54f9f640a5a08f", "avatar": "https://avatars.githubusercontent.com/u/735360?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "11c15e045ac9", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-28T19:16:24Z", "archived": false, "topContributors": [ { "login": "carnal0wnage", "c": 274, "avatar": "https://avatars.githubusercontent.com/u/735360?v=4", "type": "User" } ] }, { "repo": "yossisassi/invoke-adminsdholderpermissioncheck", "name": "invoke-adminsdholderpermissioncheck", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Invoke-AdminSDHolderPermissionCheck", "stars": 16, "language": "PowerShell", "description": "Analyzes AdminSDHolder permissions & compares with default baseline or a previous run, to detect potential backdoor/excessive persistent permission(s)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b01fd665397", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-08T14:17:04Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/ad-replication-metadata", "name": "ad-replication-metadata", "owner": "yossisassi", "url": "https://github.com/YossiSassi/AD-Replication-Metadata", "stars": 16, "language": "PowerShell", "description": "Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.g. during an Incident Response). Uses Replication metadata hist", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec632f4c995d", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-25T14:08:07Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "shipcod3/sploitchits", "name": "sploitchits", "owner": "shipcod3", "url": "https://github.com/shipcod3/sploitchits", "stars": 16, "language": "Classic ASP", "description": "My collection of exploit development skeletons for fuzzing, overwriting the stack, remote code execution, etc.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a6143f7fd566", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-19T10:15:10Z", "archived": false, "topContributors": [ { "login": "shipcod3", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" } ] }, { "repo": "rocky/trepanjs", "name": "trepanjs", "owner": "rocky", "url": "https://github.com/rocky/trepanjs", "stars": 16, "language": "JavaScript", "description": "A more gdb-like debugger for nodejs. In style of the trepan family of debuggers.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "311569405e50", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-25T23:38:48Z", "archived": false, "topContributors": [ { "login": "rocky", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" } ] }, { "repo": "ang13t/duck-duck-boom", "name": "duck-duck-boom", "owner": "ang13t", "url": "https://github.com/ANG13T/duck-duck-boom", "stars": 16, "language": "TypeScript", "description": "A VS Code Extension to import USB Rubber Ducky keystroke injection payloads quickly!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9439d53feeb5", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-29T14:47:52Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "porterhau5/bash-port-scanner", "name": "bash-port-scanner", "owner": "porterhau5", "url": "https://github.com/porterhau5/bash-port-scanner", "stars": 16, "language": null, "description": "Port scanner in bash", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tom Porter", "cardId": "fec0a09412335bcf", "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "44964cd8f8bb", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-11-08T17:30:30Z", "archived": false, "topContributors": [ { "login": "porterhau5", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "type": "User" } ] }, { "repo": "johnhammond/sshkeys", "name": "sshkeys", "owner": "johnhammond", "url": "https://github.com/JohnHammond/sshkeys", "stars": 15, "language": null, "description": "A weaponized technique for SSH to accept an inserted public/private key. Useful for red team effects.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8b3525ded6fb", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-27T20:45:44Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "johnhammond/cve-2021-4034", "name": "cve-2021-4034", "owner": "johnhammond", "url": "https://github.com/JohnHammond/CVE-2021-4034", "stars": 15, "language": null, "description": "Bash implementation of CVE-2021-4034", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "45c5c05d83b8", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2022-01-26T01:05:56Z", "archived": false, "topContributors": [] }, { "repo": "johnhammond/cve-2020-35846", "name": "cve-2020-35846", "owner": "johnhammond", "url": "https://github.com/JohnHammond/CVE-2020-35846", "stars": 15, "language": "Python", "description": "Python PoC for CVE-2020-35846 targeting Cockpit 0.11.1", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7e02cfdb1703", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-25T05:28:51Z", "archived": false, "topContributors": [ { "login": "JohnHammond", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "d4stiny/veracrypt-password-extractor", "name": "veracrypt-password-extractor", "owner": "d4stiny", "url": "https://github.com/D4stiny/Veracrypt-Password-Extractor", "stars": 15, "language": "C", "description": "A proof-of-concept DLL that prints out the password a user enters into Veracrypt while decrypting a volume.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1eb06ffde243", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-10-26T00:30:08Z", "archived": false, "topContributors": [ { "login": "D4stiny", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4", "type": "User" } ] }, { "repo": "jgamblin/cve-mcp", "name": "cve-mcp", "owner": "jgamblin", "url": "https://github.com/jgamblin/CVE-MCP", "stars": 15, "language": "Python", "description": "A CVE Data MCP using the CVE.ORG API", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jerry Gamblin", "cardId": "0eae75bb01ff28f8", "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec67b5be7a69", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-04T21:07:24Z", "archived": false, "topContributors": [ { "login": "jgamblin", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4", "type": "User" } ] }, { "repo": "rootup/claude-poc", "name": "claude-poc", "owner": "rootup", "url": "https://github.com/RootUp/claude-poc", "stars": 15, "language": null, "description": "Claude Code Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "29169ab1f97e", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-03T08:33:36Z", "archived": false, "topContributors": [ { "login": "RootUp", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" } ] }, { "repo": "ang13t/adsb-spoof-detector", "name": "adsb-spoof-detector", "owner": "ang13t", "url": "https://github.com/ANG13T/ADSB-Spoof-Detector", "stars": 15, "language": "Jupyter Notebook", "description": "A neural network that detects spoofed aircraft via ADS-B input", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59ff7f7780b0", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-02T01:09:52Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "orenyomtov/velas-infinite-mint-poc", "name": "velas-infinite-mint-poc", "owner": "orenyomtov", "url": "https://github.com/orenyomtov/velas-infinite-mint-poc", "stars": 14, "language": "TypeScript", "description": "The repository contains a runnable PoC for the Velas infinite mint vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Oren Yomtov", "cardId": "711dbdd0078f13b0", "avatar": "https://avatars.githubusercontent.com/u/168856?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5503f0626515", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-23T19:55:25Z", "archived": false, "topContributors": [ { "login": "orenyomtov", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/168856?v=4", "type": "User" } ] }, { "repo": "zer0mem/heapsaboutcorruption", "name": "heapsaboutcorruption", "owner": "zer0mem", "url": "https://github.com/zer0mem/HeapsAboutCorruption", "stars": 14, "language": "C", "description": "HeapsAboutCorruption - set of implementation / demonstration public heap specific exploit techniques, enjoy!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Peter Hlavaty", "cardId": "8960b7aa8e89e8eb", "avatar": "https://avatars.githubusercontent.com/u/4034536?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f6c0ba156c36", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-09-27T09:09:24Z", "archived": false, "topContributors": [ { "login": "zer0mem", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4034536?v=4", "type": "User" } ] }, { "repo": "brutelogic/unkover", "name": "unkover", "owner": "brutelogic", "url": "https://github.com/BRuteLogic/unKover", "stars": 13, "language": "Shell", "description": "403 Access Bypass Tester", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rodolfo Assis (Brute Logic)", "cardId": "073ef5e4d16742d8", "avatar": "https://avatars.githubusercontent.com/u/20602952?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4df1f2ebaeaf", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-28T04:03:52Z", "archived": false, "topContributors": [ { "login": "BRuteLogic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20602952?v=4", "type": "User" } ] }, { "repo": "daddycocoaman/azdummy", "name": "azdummy", "owner": "daddycocoaman", "url": "https://github.com/daddycocoaman/AzDummy", "stars": 13, "language": "Python", "description": "A Python Typer-based CLI tool to generate fake data for Azure AD. AzDummy also uses Rich for some dope console output.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b82e0ad378b8", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-27T04:29:02Z", "archived": false, "topContributors": [ { "login": "daddycocoaman", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" } ] }, { "repo": "bugch3ck/aspectinstallassistantrce", "name": "aspectinstallassistantrce", "owner": "bugch3ck", "url": "https://github.com/bugch3ck/AspectInstallAssistantRCE", "stars": 13, "language": "C#", "description": "POC for unauthenticated RCE in Aspect Unified Installation Assistant by Aspect Software found in 2021.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd8b263ff9b2", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-29T21:59:59Z", "archived": false, "topContributors": [ { "login": "bugch3ck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" } ] }, { "repo": "dump-guy/voicec2_poc", "name": "voicec2_poc", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/VoiceC2_POC", "stars": 13, "language": "C#", "description": "Simple POC of Voice C2 using Speech Recognition", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2167244973d3", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-27T13:22:03Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "gergelykalman/cve-2023-38571-a-macos-tcc-bypass-in-music-and-tv", "name": "cve-2023-38571-a-macos-tcc-bypass-in-music-and-tv", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV", "stars": 13, "language": "Python", "description": "Exploit for CVE-2023-38571", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4038b86d1521", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-27T14:08:42Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/pyspot", "name": "pyspot", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/pyspot", "stars": 13, "language": "Python", "description": "Python client for the SPOT Connect satellite beacon.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d33962738f15", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2015-05-09T16:44:21Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" }, { "login": "ulrichard", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1116405?v=4", "type": "User" } ] }, { "repo": "lockfale/cackalackybadgyfirmware2024", "name": "cackalackybadgyfirmware2024", "owner": "lockfale", "url": "https://github.com/lockfale/cackalackybadgyfirmware2024", "stars": 13, "language": null, "description": "Firmware for the Cackalackabadgy from CackalackyCon 2024", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fa4167561584", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-05-19T23:16:34Z", "archived": false, "topContributors": [ { "login": "pandatrax", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/20147940?v=4", "type": "User" }, { "login": "melvin2001", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/370916?v=4", "type": "User" } ] }, { "repo": "danmcinerney/obf-cats", "name": "obf-cats", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/Obf-Cats", "stars": 13, "language": "PowerShell", "description": "Obfuscated Invoke-Mimikatz script", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f0e59f5cb1a", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2018-05-29T23:31:11Z", "archived": false, "topContributors": [] }, { "repo": "ohjeongwook/loaddll", "name": "loaddll", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/LoadDLL", "stars": 12, "language": "C++", "description": "Windows DLL Loading Utility", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7ea7188dba5", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 3, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-11T19:30:02Z", "archived": false, "topContributors": [ { "login": "ohjeongwook", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "msuiche/dinfo", "name": "dinfo", "owner": "msuiche", "url": "https://github.com/msuiche/dinfo", "stars": 12, "language": "C", "description": "Offline Active Directory Domain Services (AD DS) Join", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matt Suiche", "cardId": "bda3839f4b2fa897", "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ab968a6e85f2", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2017-01-04T11:14:13Z", "archived": false, "topContributors": [ { "login": "msuiche", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1621145?v=4", "type": "User" } ] }, { "repo": "ohjeongwook/runshellcode", "name": "runshellcode", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/RunShellcode", "stars": 12, "language": "C++", "description": "Windows Shellcode Testing Utility to Run Shellcode From A File", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "89db7f4d5c37", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-06T06:46:02Z", "archived": false, "topContributors": [ { "login": "ohjeongwook", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "xorrior/apfell-chrome-extension-c2server", "name": "apfell-chrome-extension-c2server", "owner": "xorrior", "url": "https://github.com/xorrior/apfell-chrome-extension-c2server", "stars": 12, "language": "Go", "description": "Apfell C2 Server for the Google Chrome Extension Payload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "169dcbade013", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-12T16:05:41Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-adgroupchanges", "name": "get-adgroupchanges", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-ADGroupChanges", "stars": 12, "language": "PowerShell", "description": "\"Pure\" powershell command (no dependencies, no special permissions etc') to retrieve change history in an AD group membership. relies on object metadata rather than event logs. useful for DF/IR, track", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1470819c37cb", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-30T14:05:39Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "ccob/jboss-wilfly-hashes-to-hashcat", "name": "jboss-wilfly-hashes-to-hashcat", "owner": "ccob", "url": "https://github.com/CCob/Jboss-Wilfly-Hashes-to-Hashcat", "stars": 12, "language": "Python", "description": "Converts JBoss/Wildfly management users properties file to hashcat format compatible with mode 20", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4897ba61194b", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-26T16:42:01Z", "archived": false, "topContributors": [ { "login": "CCob", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" } ] }, { "repo": "joegrand/watchpat-vfi", "name": "watchpat-vfi", "owner": "joegrand", "url": "https://github.com/joegrand/watchpat-vfi", "stars": 12, "language": "Jupyter Notebook", "description": "WatchPAT One nRF52832 Fault Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joe Grand (Kingpin)", "cardId": "7fc270d88cd7d3a8", "avatar": "https://avatars.githubusercontent.com/u/4250259?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d79545e0f783", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-23T17:50:30Z", "archived": false, "topContributors": [ { "login": "joegrand", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4250259?v=4", "type": "User" } ] }, { "repo": "0xdea/ttyinject-rs", "name": "ttyinject-rs", "owner": "0xdea", "url": "https://github.com/0xdea/ttyinject-rs", "stars": 12, "language": "Rust", "description": "Linux local privilege escalation via TIOCSTI tty injection.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Ivaldi", "cardId": "ad7609bb62bf9887", "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4be4dceda0de", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-17T15:51:36Z", "archived": false, "topContributors": [ { "login": "0xdea", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/30093440?v=4", "type": "User" } ] }, { "repo": "patchpoint/cve-2026-20841", "name": "cve-2026-20841", "owner": "patchpoint", "url": "https://github.com/patchpoint/CVE-2026-20841", "stars": 12, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Donghyeon Oh", "cardId": "b8b1b1aced4002d5", "avatar": "https://avatars.githubusercontent.com/u/174953042?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5b84cd2c3306", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-12T05:13:05Z", "archived": false, "topContributors": [ { "login": "patchpoint", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/174953042?v=4", "type": "User" } ] }, { "repo": "nopcorn/patdown", "name": "patdown", "owner": "nopcorn", "url": "https://github.com/nopcorn/patdown", "stars": 2, "language": "Python", "description": "A red team CLI for auditing what a GitHub token can do. Hand it any GitHub token and it returns a structured picture of what you can do with it.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Max CM", "cardId": "155643420d496227", "avatar": "https://avatars.githubusercontent.com/u/143365389?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e5052c9eada", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-13T13:03:54Z", "archived": false, "topContributors": [ { "login": "nopcorn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/143365389?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/wmihacker", "name": "wmihacker", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/WMIHACKER", "stars": 2, "language": "Python", "description": "PoC tool for S0LD13R - WMIHACKER 2.0", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ccd9531b737b", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-05T11:17:25Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/chocopie", "name": "chocopie", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/chocopie", "stars": 2, "language": "Go", "description": "Red Team Host Reconnaissance Tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7e654d2af102", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-19T20:29:10Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "r3verii/cve-2026-33555", "name": "cve-2026-33555", "owner": "r3verii", "url": "https://github.com/r3verii/CVE-2026-33555", "stars": 2, "language": "Python", "description": "One zero-byte QUIC packet is enough to desynchronize HAProxy's backend connection pool and smuggle HTTP requests across unrelated users — even users on a completely different frontend protocol.", "type": "tool", "lanes": [ "2" ], "author": { "name": "r3verii", "cardId": "3d2fe2062aa55193", "avatar": "https://avatars.githubusercontent.com/u/143962203?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd9072a03b7d", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-17T15:45:05Z", "archived": false, "topContributors": [ { "login": "r3verii", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/143962203?v=4", "type": "User" } ] }, { "repo": "viralmaniar/bandicoot", "name": "bandicoot", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/Bandicoot", "stars": 2, "language": "C#", "description": "C2 Framework in C# to handle reverse shells", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2234d73ab170", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-23T06:39:41Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/0dayhugegraph", "name": "0dayhugegraph", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/0DayHugeGraph", "stars": 2, "language": "Shell", "description": "RCE on patched HugeGraph Server ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6594a6f71e8d", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-18T16:16:32Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/killx108", "name": "killx108", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/KILLx108", "stars": 2, "language": "Python", "description": "Exploit for unknown vulnerability in `ZXHN H168N V3.5` to kill the device with one request.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c03ed2c385a", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-04T08:36:41Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "hackinglz/panrapidcheck", "name": "panrapidcheck", "owner": "hackinglz", "url": "https://github.com/HackingLZ/panrapidcheck", "stars": 2, "language": "Python", "description": "Extract useful information from PANOS support file for CVE-2024-3400", "type": "tool", "lanes": [ "2" ], "author": { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3965654914a5", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-19T17:24:23Z", "archived": false, "topContributors": [ { "login": "HackingLZ", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "k0keoyo/cve-2012-0003_exp", "name": "cve-2012-0003_exp", "owner": "k0keoyo", "url": "https://github.com/k0keoyo/CVE-2012-0003_eXP", "stars": 2, "language": "HTML", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "k0shl", "cardId": "d3610316610d066d", "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ff0144a87fa1", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-26T13:35:19Z", "archived": false, "topContributors": [ { "login": "k0keoyo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13257929?v=4", "type": "User" } ] }, { "repo": "zephrfish/cve-2024-3400-canary", "name": "cve-2024-3400-canary", "owner": "zephrfish", "url": "https://github.com/ZephrFish/CVE-2024-3400-Canary", "stars": 2, "language": "Python", "description": "Have we not learnt from HoneyPoC?", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6bffd9db3787", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-07T01:30:58Z", "archived": false, "topContributors": [ { "login": "ZephrFish", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" } ] }, { "repo": "brmkit/bof-vscode", "name": "bof-vscode", "owner": "brmkit", "url": "https://github.com/brmkit/bof-vscode", "stars": 2, "language": "C", "description": "vscode development environment for Beacon Object Files (BOFs)", "type": "tool", "lanes": [ "2" ], "author": { "name": "_brmkit", "cardId": "e5df5d93846412ff", "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6591272cdad6", "score": 23, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-30T08:13:02Z", "archived": false, "topContributors": [ { "login": "brmkit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4", "type": "User" } ] }, { "repo": "internetwache/gittools", "name": "gittools", "owner": "internetwache", "url": "https://github.com/internetwache/GitTools", "stars": 4163, "language": "Shell", "description": "A repository with 3 tools for pwn'ing websites with .git repositories available", "type": "tool", "lanes": [ "1" ], "author": { "name": "internetwache", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2021/05/29/htb-cereal.html", "title": "HTB: Cereal", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/03/10/htb-epsilon.html", "title": "HTB: Epsilon", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2020/09/12/htb-travel.html", "title": "HTB: Travel", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2020/10/24/htb-dyplesher.html", "title": "HTB: Dyplesher", "person": "0xdf" } ], "referencedCount": 4, "id": "7965a5ebc808", "score": 22, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 17, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2026-07-15T08:19:13Z", "archived": false, "topContributors": [ { "login": "gehaxelt", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/1652523?v=4", "type": "User" }, { "login": "alanyee", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1873994?v=4", "type": "User" }, { "login": "rleh", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2820734?v=4", "type": "User" }, { "login": "Kuermel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6574969?v=4", "type": "User" }, { "login": "jramos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51933434?v=4", "type": "User" }, { "login": "aancw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6284204?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "cyberknight777", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68801681?v=4", "type": "User" }, { "login": "Gutem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/342215?v=4", "type": "User" }, { "login": "stamparm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/921555?v=4", "type": "User" }, { "login": "nick-botticelli", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25168557?v=4", "type": "User" }, { "login": "hz61p1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12779610?v=4", "type": "User" }, { "login": "bryant1410", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3905501?v=4", "type": "User" }, { "login": "masterT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2584158?v=4", "type": "User" }, { "login": "Low-power", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6129385?v=4", "type": "User" }, { "login": "lopci", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13263440?v=4", "type": "User" }, { "login": "prechayimmee2412", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/192257740?v=4", "type": "User" } ] }, { "repo": "google/security-research", "name": "security-research", "owner": "google", "url": "https://github.com/google/security-research", "stars": 4573, "language": "C", "description": "This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.", "type": "tool", "lanes": [ "1" ], "author": { "name": "google", "cardId": null }, "referencedBy": [ { "url": "https://kqx.io/writeups/fileno/", "title": "FileNo - ASIS CTF 2025 – kqx", "person": "kqx" }, { "url": "https://qriousec.github.io/post/cve-2023-52927/", "title": "CVE-2023-52927: Turning a Forgotten Syzkaller Report into kCTF Exploit", "person": "qriousec" } ], "referencedCount": 2, "id": "63e12c029a0b", "score": 22, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 65, "contributors": [ { "name": "M Ramdhan", "cardId": "2ac50e551513369f", "avatar": "https://avatars.githubusercontent.com/u/29397847?v=4", "login": "d4em0n" }, { "name": "Tavis Ormandy", "cardId": "f8252c7b6035a712", "avatar": "https://avatars.githubusercontent.com/u/123814?v=4", "login": "taviso" }, { "name": "Pumpkin", "cardId": "5f13610453fd0dab", "avatar": "https://avatars.githubusercontent.com/u/34729870?v=4", "login": "u1f383" } ], "pushedAt": "2026-07-16T09:29:54Z", "archived": false, "topContributors": [ { "login": "koczkatamas", "c": 148, "avatar": "https://avatars.githubusercontent.com/u/2608082?v=4", "type": "User" }, { "login": "sirdarckcat", "c": 134, "avatar": "https://avatars.githubusercontent.com/u/33089?v=4", "type": "User" }, { "login": "sroettger", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/18457758?v=4", "type": "User" }, { "login": "artmetla", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/77324544?v=4", "type": "User" }, { "login": "rcorrea35", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/108009481?v=4", "type": "User" }, { "login": "st424204", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/17705615?v=4", "type": "User" }, { "login": "matrizzo", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/32157960?v=4", "type": "User" }, { "login": "liona24", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/25030208?v=4", "type": "User" }, { "login": "TheOfficialFloW", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/14246466?v=4", "type": "User" }, { "login": "mingi", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5960123?v=4", "type": "User" }, { "login": "d4em0n", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/29397847?v=4", "type": "User" }, { "login": "conlonial", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/47856257?v=4", "type": "User" }, { "login": "kevinrich1337", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/160715919?v=4", "type": "User" }, { "login": "taviso", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/123814?v=4", "type": "User" }, { "login": "JordyZomer", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/17198473?v=4", "type": "User" }, { "login": "conlonialC", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/155211323?v=4", "type": "User" }, { "login": "marpom", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/110858090?v=4", "type": "User" }, { "login": "0xdevil", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/52781556?v=4", "type": "User" }, { "login": "4ab48b3f1ded2472", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/194175654?v=4", "type": "User" }, { "login": "lonialcon2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/164828181?v=4", "type": "User" }, { "login": "chanijindal1", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/15211513?v=4", "type": "User" }, { "login": "kungfulon", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1312612?v=4", "type": "User" }, { "login": "akrasuski1", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5507813?v=4", "type": "User" }, { "login": "thatjiaozi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8826664?v=4", "type": "User" }, { "login": "quanggle97", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/107147000?v=4", "type": "User" }, { "login": "lambdasprocket", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/247263343?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "conlonial77", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/236601099?v=4", "type": "User" }, { "login": "salmanmkc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32169182?v=4", "type": "User" }, { "login": "nightuhu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/114425292?v=4", "type": "User" } ] }, { "repo": "bluscreenofjeff/red-team-infrastructure-wiki", "name": "red-team-infrastructure-wiki", "owner": "bluscreenofjeff", "url": "https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki", "stars": 4503, "language": null, "description": "Wiki to collect Red Team infrastructure hardening resources", "type": "tool", "lanes": [ "1" ], "author": { "name": "bluscreenofjeff", "cardId": null }, "referencedBy": [ { "url": "https://zeyadazima.com/certificates/ecptx/", "title": "eCPTX: The Honest Review", "person": "Zer0verflow" }, { "url": "https://byt3bl33d3r.substack.com/p/taking-the-pain-out-of-c2-infrastructure", "title": "Taking the pain out of C2 Infrastructure (Part 1)", "person": "Marcello Salvati" } ], "referencedCount": 2, "id": "8f9f5f9b9be8", "score": 22, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 14, "contributors": [ { "name": "Steve Borosh", "cardId": "121e5cc018a16349", "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "login": "rvrsh3ll" }, { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" } ], "pushedAt": "2025-10-01T17:10:58Z", "archived": false, "topContributors": [ { "login": "rvrsh3ll", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/6186835?v=4", "type": "User" }, { "login": "bluscreenofjeff", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/6732151?v=4", "type": "User" }, { "login": "vysec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" }, { "login": "ktlmsney", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49543676?v=4", "type": "User" }, { "login": "001SPARTaN", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4355842?v=4", "type": "User" }, { "login": "Chiggins", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/350596?v=4", "type": "User" }, { "login": "dan1t0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5350944?v=4", "type": "User" }, { "login": "fxkjd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6142041?v=4", "type": "User" }, { "login": "V1V1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17599553?v=4", "type": "User" }, { "login": "ImpostorKeanu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11574161?v=4", "type": "User" }, { "login": "leesoh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1276654?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "sunnyneo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9748813?v=4", "type": "User" }, { "login": "tophertimzen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5971396?v=4", "type": "User" } ] }, { "repo": "lanmaster53/recon-ng", "name": "recon-ng", "owner": "lanmaster53", "url": "https://github.com/lanmaster53/recon-ng", "id": "5d9df33e8ac0", "stars": 5784, "language": "Python", "description": "Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.", "type": "tool", "pushedAt": "2024-11-01T20:11:51Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "lanmaster53", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "login": "shipcod3" }, { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "login": "qkaiser" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 28, "topContributors": [ { "login": "lanmaster53", "c": 699, "avatar": "https://avatars.githubusercontent.com/u/2516395?v=4", "type": "User" }, { "login": "WebBreacher", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/2359093?v=4", "type": "User" }, { "login": "shipcod3", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" }, { "login": "thrapt2", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/6548920?v=4", "type": "User" }, { "login": "ethack", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/1696711?v=4", "type": "User" }, { "login": "qkaiser", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" }, { "login": "fork-while-fork", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/962226?v=4", "type": "User" }, { "login": "dewoodruff", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/897202?v=4", "type": "User" }, { "login": "Lost4Now", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/7550560?v=4", "type": "User" }, { "login": "dandare100", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5639208?v=4", "type": "User" }, { "login": "bcoles", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "averagesecurityguy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1117951?v=4", "type": "User" }, { "login": "zaeyx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3677067?v=4", "type": "User" }, { "login": "0xd0ug", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32918088?v=4", "type": "User" }, { "login": "Aaron-A-zz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6710841?v=4", "type": "User" }, { "login": "aayush420", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16898783?v=4", "type": "User" }, { "login": "catatonicprime", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2341167?v=4", "type": "User" }, { "login": "Verdagio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15673201?v=4", "type": "User" }, { "login": "dinkleburger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/184680573?v=4", "type": "User" }, { "login": "Scarbaci", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3945109?v=4", "type": "User" }, { "login": "JJK96", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11193274?v=4", "type": "User" }, { "login": "JaredStemper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31346981?v=4", "type": "User" }, { "login": "spameier", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40004508?v=4", "type": "User" }, { "login": "logensiva136", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53439230?v=4", "type": "User" }, { "login": "rxwx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" }, { "login": "sdcampbell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10532268?v=4", "type": "User" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "cdves", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/198975805?v=4", "type": "User" } ] }, { "repo": "commixproject/commix", "name": "commix", "owner": "commixproject", "url": "https://github.com/commixproject/commix", "id": "bcf0bd893c67", "stars": 5781, "language": "Python", "description": "Automated All-in-One OS Command Injection Exploitation Tool", "type": "tool", "pushedAt": "2026-07-13T05:20:53Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "commixproject", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 17, "topContributors": [ { "login": "stasinopoulos", "c": 2327, "avatar": "https://avatars.githubusercontent.com/u/5289251?v=4", "type": "User" }, { "login": "apprentice", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/32694883?v=4", "type": "User" }, { "login": "dnet", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" }, { "login": "galihap76", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/83481679?v=4", "type": "User" }, { "login": "halilkirazkaya", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/90972683?v=4", "type": "User" }, { "login": "g0tmi1k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/535942?v=4", "type": "User" }, { "login": "shelld3v", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" }, { "login": "blshkv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/309751?v=4", "type": "User" }, { "login": "verfosec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/104883832?v=4", "type": "User" }, { "login": "Placidina", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37387435?v=4", "type": "User" }, { "login": "Raymond-JV", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23642921?v=4", "type": "User" }, { "login": "timgates42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873678?v=4", "type": "User" }, { "login": "raeph123", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53398218?v=4", "type": "User" }, { "login": "anonymousdouble", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112695649?v=4", "type": "User" }, { "login": "daniruiz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12565871?v=4", "type": "User" }, { "login": "jhelie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7881978?v=4", "type": "User" }, { "login": "n00b-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43785370?v=4", "type": "User" } ] }, { "repo": "usarmyresearchlab/dshell", "name": "Dshell", "owner": "USArmyResearchLab", "url": "https://github.com/USArmyResearchLab/Dshell", "id": "73522b95301b", "stars": 5490, "language": "Python", "description": "Dshell is a network forensic analysis framework.", "type": "tool", "pushedAt": "2024-05-07T12:53:36Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "USArmyResearchLab", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "dev195", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/10209158?v=4", "type": "User" }, { "login": "wglodek", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/9535039?v=4", "type": "User" }, { "login": "dek443", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/41297634?v=4", "type": "User" }, { "login": "amm3", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/15837582?v=4", "type": "User" }, { "login": "dc3-tsd", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/12175126?v=4", "type": "User" }, { "login": "1modm", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4355335?v=4", "type": "User" }, { "login": "djds", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4218822?v=4", "type": "User" }, { "login": "Primal-Security", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10282030?v=4", "type": "User" }, { "login": "DeKrych", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4120224?v=4", "type": "User" }, { "login": "volkjohn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7529930?v=4", "type": "User" }, { "login": "UNSUBB", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/131689589?v=4", "type": "User" }, { "login": "drewbrew", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7773256?v=4", "type": "User" }, { "login": "joshua-stone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8183967?v=4", "type": "User" }, { "login": "kstrauser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/295674?v=4", "type": "User" }, { "login": "ThomasWunderlich", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/796958?v=4", "type": "User" }, { "login": "traviswparker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10813609?v=4", "type": "User" } ] }, { "repo": "kingofbugbounty/kingofbugbountytips", "name": "KingOfBugBountyTips", "owner": "KingOfBugbounty", "url": "https://github.com/KingOfBugbounty/KingOfBugBountyTips", "id": "50bc27f1966a", "stars": 5463, "language": "Python", "description": "Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish t", "type": "tool", "pushedAt": "2026-07-01T17:25:57Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "KingOfBugbounty", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jason Haddix", "cardId": "f3f4293bba8a6ba6", "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4", "login": "jhaddix" }, { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 17, "topContributors": [ { "login": "KingOfBugbounty", "c": 160, "avatar": "https://avatars.githubusercontent.com/u/28729614?v=4", "type": "User" }, { "login": "OFJAAAH", "c": 105, "avatar": "https://avatars.githubusercontent.com/u/70953773?v=4", "type": "User" }, { "login": "pdelteil", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/20244863?v=4", "type": "User" }, { "login": "jhaddix", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3488554?v=4", "type": "User" }, { "login": "Shivang0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/69757440?v=4", "type": "User" }, { "login": "hiddengearz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17349277?v=4", "type": "User" }, { "login": "vasanth15-hts", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/181850234?v=4", "type": "User" }, { "login": "0dayCTF", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44453666?v=4", "type": "User" }, { "login": "NoThrowForwardIt", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6081236?v=4", "type": "User" }, { "login": "zeroc00I", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12475057?v=4", "type": "User" }, { "login": "adrianovalle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10232239?v=4", "type": "User" }, { "login": "AlexandreVandamme59", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97494331?v=4", "type": "User" }, { "login": "FARUK-YILDIRIM", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26284092?v=4", "type": "User" }, { "login": "spekulatius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8433587?v=4", "type": "User" }, { "login": "YouGina", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5002624?v=4", "type": "User" }, { "login": "hudsonrock-partnerships", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/163282900?v=4", "type": "User" }, { "login": "six2dez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "spieglt/flyingcarpet", "name": "FlyingCarpet", "owner": "spieglt", "url": "https://github.com/spieglt/FlyingCarpet", "id": "40d173258f65", "stars": 5231, "language": "Rust", "description": "Cross-platform AirDrop. File transfer between Android, iOS, Linux, macOS, and Windows over ad hoc WiFi. No network infrastructure required, just two devices with WiFi chips (and optionally Bluetooth) ", "type": "tool", "pushedAt": "2026-07-18T05:25:59Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "spieglt", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "spieglt", "c": 188, "avatar": "https://avatars.githubusercontent.com/u/22626146?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "andresriancho/w3af", "name": "w3af", "owner": "andresriancho", "url": "https://github.com/andresriancho/w3af", "id": "559f31f04ffd", "stars": 4898, "language": "Python", "description": "w3af: web application attack and audit framework, the open source web vulnerability scanner.", "type": "tool", "pushedAt": "2023-02-22T06:05:59Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "andresriancho", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 58, "topContributors": [ { "login": "andresriancho", "c": 5471, "avatar": "https://avatars.githubusercontent.com/u/865200?v=4", "type": "User" }, { "login": "stamparm", "c": 4150, "avatar": "https://avatars.githubusercontent.com/u/921555?v=4", "type": "User" }, { "login": "bdamele", "c": 1798, "avatar": "https://avatars.githubusercontent.com/u/675322?v=4", "type": "User" }, { "login": "pvdl", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/1476340?v=4", "type": "User" }, { "login": "artem-smotrakov", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/19523081?v=4", "type": "User" }, { "login": "Meatballs1", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "Q-back", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/25378062?v=4", "type": "User" }, { "login": "mdeous", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/393165?v=4", "type": "User" }, { "login": "attwad", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1255432?v=4", "type": "User" }, { "login": "mleblebici", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19292195?v=4", "type": "User" }, { "login": "mpoindexter", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1626393?v=4", "type": "User" }, { "login": "paralax", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "nixwizard", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3982790?v=4", "type": "User" }, { "login": "Leks-ha", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6592389?v=4", "type": "User" }, { "login": "linerd0196", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10868737?v=4", "type": "User" }, { "login": "codychamberlain", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10276144?v=4", "type": "User" }, { "login": "aronmolnar", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/25219407?v=4", "type": "User" }, { "login": "vulnersCom", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22376776?v=4", "type": "User" }, { "login": "jarrodcoulter", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7229351?v=4", "type": "User" }, { "login": "OwenTuz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7415484?v=4", "type": "User" }, { "login": "inkz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2299241?v=4", "type": "User" }, { "login": "Gxsghsn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7546494?v=4", "type": "User" }, { "login": "maniqui", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/333695?v=4", "type": "User" }, { "login": "foobarmonk", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8442720?v=4", "type": "User" }, { "login": "vinnytroia", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1675215?v=4", "type": "User" }, { "login": "swans0n", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5408241?v=4", "type": "User" }, { "login": "jekil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1069119?v=4", "type": "User" }, { "login": "glira", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2602039?v=4", "type": "User" }, { "login": "tvelazquez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2956664?v=4", "type": "User" }, { "login": "rhabacker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/602903?v=4", "type": "User" } ] }, { "repo": "bitsadmin/wesng", "name": "wesng", "owner": "bitsadmin", "url": "https://github.com/bitsadmin/wesng", "id": "e6d840dfa327", "stars": 4894, "language": "Python", "description": "Windows Exploit Suggester - Next Generation", "type": "tool", "pushedAt": "2026-07-16T15:55:41Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "bitsadmin", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "bitsadmin", "c": 372, "avatar": "https://avatars.githubusercontent.com/u/9055728?v=4", "type": "User" }, { "login": "DominicBreuker", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5805095?v=4", "type": "User" }, { "login": "jasperla", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/637504?v=4", "type": "User" }, { "login": "monomagentaeggroll", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/32424535?v=4", "type": "User" }, { "login": "MaineK00n", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16035056?v=4", "type": "User" }, { "login": "cHJlaXpoZXI", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/54248704?v=4", "type": "User" }, { "login": "SpencerIsGiddy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/109806759?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "alxchk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/329535?v=4", "type": "User" }, { "login": "ymeheut", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61005540?v=4", "type": "User" }, { "login": "2xyo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31675?v=4", "type": "User" }, { "login": "aconite33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" }, { "login": "renzhexigua", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4772169?v=4", "type": "User" } ] }, { "repo": "hephaest0s/usbkill", "name": "usbkill", "owner": "hephaest0s", "url": "https://github.com/hephaest0s/usbkill", "id": "529b49d5d44f", "stars": 4590, "language": "Python", "description": "« usbkill » is an anti-forensic kill-switch that waits for a change on your USB ports and then immediately shuts down your computer.", "type": "tool", "pushedAt": "2024-03-01T03:31:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "hephaest0s", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "hephaest0s", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/11010193?v=4", "type": "User" }, { "login": "pwnsdx", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/212565231?v=4", "type": "User" }, { "login": "deekayen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/382319?v=4", "type": "User" }, { "login": "rsrdesarrollo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5142014?v=4", "type": "User" }, { "login": "Brobin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6194619?v=4", "type": "User" }, { "login": "nadavge", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8128237?v=4", "type": "User" } ] }, { "repo": "spipm/depixelization_poc", "name": "Depixelization_poc", "owner": "spipm", "url": "https://github.com/spipm/Depixelization_poc", "id": "bfd3ec495605", "stars": 4548, "language": "Python", "description": "Depix is a PoC for a technique to recover plaintext from pixelized screenshots.", "type": "tool", "pushedAt": "2026-04-14T14:10:25Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "spipm", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "spipm", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/4620457?v=4", "type": "User" }, { "login": "eggplants", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/42153744?v=4", "type": "User" }, { "login": "toydotgame", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/64190512?v=4", "type": "User" }, { "login": "Artoria2e5", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6459309?v=4", "type": "User" }, { "login": "davidhcefx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23246033?v=4", "type": "User" }, { "login": "G-flat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63449095?v=4", "type": "User" }, { "login": "JonasSchatz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13544864?v=4", "type": "User" }, { "login": "neilgoyal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54841976?v=4", "type": "User" }, { "login": "compi2k", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65253326?v=4", "type": "User" }, { "login": "coinforensics", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59567284?v=4", "type": "User" } ] }, { "repo": "sensepost/gowitness", "name": "gowitness", "owner": "sensepost", "url": "https://github.com/sensepost/gowitness", "id": "da88a8833820", "stars": 4368, "language": "Go", "description": "🔍 gowitness - a golang, web screenshot utility using Chrome Headless", "type": "tool", "pushedAt": "2026-04-22T17:28:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 40, "topContributors": [ { "login": "leonjza", "c": 448, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "random-robbie", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "randomactsofsecurity", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/51393999?v=4", "type": "User" }, { "login": "jughead", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1525060?v=4", "type": "User" }, { "login": "alileza", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1962129?v=4", "type": "User" }, { "login": "crypt0rr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57799908?v=4", "type": "User" }, { "login": "djallalzoldik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45321671?v=4", "type": "User" }, { "login": "knavesec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28929566?v=4", "type": "User" }, { "login": "Elymaro", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/124057003?v=4", "type": "User" }, { "login": "GOAT-FARM3R", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28618286?v=4", "type": "User" }, { "login": "gmessow-cxomni", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59447062?v=4", "type": "User" }, { "login": "gorgiaxx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9295584?v=4", "type": "User" }, { "login": "helviojunior", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34519097?v=4", "type": "User" }, { "login": "Ice3man543", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "laluka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7013722?v=4", "type": "User" }, { "login": "michael-bey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1136610?v=4", "type": "User" }, { "login": "Mickdep", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11573097?v=4", "type": "User" }, { "login": "nikaiw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1255732?v=4", "type": "User" }, { "login": "NickChillClub", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/74833982?v=4", "type": "User" }, { "login": "alexandear", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3228886?v=4", "type": "User" }, { "login": "mr-pmillz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58376398?v=4", "type": "User" }, { "login": "noob6t5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67364489?v=4", "type": "User" }, { "login": "Serizao", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11671895?v=4", "type": "User" }, { "login": "viaccoz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42694303?v=4", "type": "User" }, { "login": "terrabitz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11320431?v=4", "type": "User" }, { "login": "brettgus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4873772?v=4", "type": "User" }, { "login": "coldshell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1130373?v=4", "type": "User" }, { "login": "compass-dexter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/145257008?v=4", "type": "User" }, { "login": "fork-while-fork", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/962226?v=4", "type": "User" }, { "login": "testwill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8717479?v=4", "type": "User" } ] }, { "repo": "strozfriedberg/windows-exploit-suggester", "name": "Windows-Exploit-Suggester", "owner": "strozfriedberg", "url": "https://github.com/strozfriedberg/Windows-Exploit-Suggester", "id": "3b5f6c5c0fe7", "stars": 4220, "language": "Python", "description": "This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploit", "type": "tool", "pushedAt": "2023-05-11T12:44:55Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "strozfriedberg", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "sammbertram", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/5989847?v=4", "type": "User" }, { "login": "Neo23x0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2851492?v=4", "type": "User" }, { "login": "jonaslejon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/190150?v=4", "type": "User" } ] }, { "repo": "outflanknl/evilclippy", "name": "EvilClippy", "owner": "outflanknl", "url": "https://github.com/outflanknl/EvilClippy", "id": "c71971dbbab7", "stars": 2248, "language": "C#", "description": "A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.", "type": "tool", "pushedAt": "2023-12-27T12:37:47Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Carrie Roberts", "cardId": "42edbf3ebbe40f00", "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4", "login": "clr2of8" } ], "adoptionOperators": 1, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "stanhegt", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" }, { "login": "clr2of8", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/22311332?v=4", "type": "User" }, { "login": "kirk-sayre-work", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/29897701?v=4", "type": "User" }, { "login": "boar24", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/52359342?v=4", "type": "User" }, { "login": "hfz1337", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32499116?v=4", "type": "User" } ] }, { "repo": "p3nt4/powershdll", "name": "PowerShdll", "owner": "p3nt4", "url": "https://github.com/p3nt4/PowerShdll", "id": "c7d85e3efc36", "stars": 1830, "language": "C#", "description": "Run PowerShell with rundll32. Bypass software restrictions.", "type": "tool", "pushedAt": "2021-03-17T02:02:23Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "p3nt4", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "p3nt4", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/19682240?v=4", "type": "User" } ] }, { "repo": "notmedic/netntlmtosilverticket", "name": "NetNTLMtoSilverTicket", "owner": "NotMedic", "url": "https://github.com/NotMedic/NetNTLMtoSilverTicket", "id": "c3f75d0039a7", "stars": 973, "language": "PowerShell", "description": "SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket", "type": "tool", "pushedAt": "2021-07-26T15:16:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "NotMedic", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "TimXom", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/71893378?v=4", "type": "User" }, { "login": "NotMedic", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17074002?v=4", "type": "User" }, { "login": "phra", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" }, { "login": "evilmog", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3283026?v=4", "type": "User" }, { "login": "sebrink", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29733832?v=4", "type": "User" } ] }, { "repo": "ghostpack/pspkiaudit", "name": "PSPKIAudit", "owner": "GhostPack", "url": "https://github.com/GhostPack/PSPKIAudit", "id": "a0e2fcbdfc8f", "stars": 937, "language": "PowerShell", "description": "PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.", "type": "tool", "pushedAt": "2024-02-28T15:10:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 2, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "leechristensen", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "SamErde", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/20478745?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "PrzemyslawKlys", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15063294?v=4", "type": "User" }, { "login": "jakehildreth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/93942157?v=4", "type": "User" } ] }, { "repo": "fuzzysecurity/standin", "name": "StandIn", "owner": "FuzzySecurity", "url": "https://github.com/FuzzySecurity/StandIn", "id": "a8c656bdf83b", "stars": 865, "language": "C#", "description": "StandIn is a small .NET35/45 AD post-exploitation toolkit", "type": "tool", "pushedAt": "2023-12-02T21:20:09Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "FuzzySecurity", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "FuzzySecurity", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/10997340?v=4", "type": "User" }, { "login": "G0ldenGunSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28241763?v=4", "type": "User" }, { "login": "guervild", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11190755?v=4", "type": "User" } ] }, { "repo": "ghostpack/forgecert", "name": "ForgeCert", "owner": "GhostPack", "url": "https://github.com/GhostPack/ForgeCert", "id": "68c01e21c3b6", "stars": 715, "language": "C#", "description": "\"Golden\" certificates", "type": "tool", "pushedAt": "2024-08-17T16:40:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" } ], "adoptionOperators": 2, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "leechristensen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "lennybacon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/272164?v=4", "type": "User" }, { "login": "f-bader", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3834359?v=4", "type": "User" } ] }, { "repo": "hasherezade/transacted_hollowing", "name": "transacted_hollowing", "owner": "hasherezade", "url": "https://github.com/hasherezade/transacted_hollowing", "stars": 581, "language": "C", "description": "Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "056ebc272c24", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-03-08T12:38:43Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "kkent030315", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37926134?v=4", "type": "User" } ] }, { "repo": "trustedsec/cve-2019-19781", "name": "cve-2019-19781", "owner": "trustedsec", "url": "https://github.com/trustedsec/cve-2019-19781", "id": "b0d364aa3af8", "stars": 573, "language": "Python", "description": "This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.", "type": "tool", "pushedAt": "2020-01-22T20:23:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "~billswearingen☎️# 🟩", "cardId": "4bfe962d0c189bba", "avatar": "https://avatars.githubusercontent.com/u/4072860?v=4", "login": "hevnsnt" }, { "name": "Nick Carr", "cardId": "311acb54a7dfa64f", "avatar": "https://avatars.githubusercontent.com/u/7584935?v=4", "login": "itsreallynick" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "HackingDave", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "hevnsnt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4072860?v=4", "type": "User" }, { "login": "Stahlz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4689086?v=4", "type": "User" }, { "login": "ruppde", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46819580?v=4", "type": "User" }, { "login": "evilmog", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3283026?v=4", "type": "User" }, { "login": "itsreallynick", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7584935?v=4", "type": "User" }, { "login": "mammix2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6670513?v=4", "type": "User" } ] }, { "repo": "maldev-academy/dumpchromesecrets", "name": "DumpChromeSecrets", "owner": "Maldev-Academy", "url": "https://github.com/Maldev-Academy/DumpChromeSecrets", "id": "eb190604f5f8", "stars": 558, "language": "C", "description": "Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks", "type": "tool", "pushedAt": "2026-01-08T05:53:20Z", "archived": true, "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "login": "NUL0x4C" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "NUL0x4C", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-ai-extension", "name": "nuclei-ai-extension", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-ai-extension", "stars": 557, "language": "JavaScript", "description": "Nuclei AI - Browser Extension for Rapid Nuclei Template Generation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87b95c45516b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2026-01-19T14:12:07Z", "archived": true, "topContributors": [ { "login": "techcraver", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24464620?v=4", "type": "User" }, { "login": "ehsandeep", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" } ] }, { "repo": "cracked5pider/kaynldr", "name": "kaynldr", "owner": "cracked5pider", "url": "https://github.com/Cracked5pider/KaynLdr", "stars": 554, "language": "C", "description": "KaynLdr is a Reflective Loader written in C/ASM", "type": "tool", "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "92a0ca032252", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-03T18:26:04Z", "archived": true, "topContributors": [ { "login": "Cracked5pider", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" } ] }, { "repo": "zigoo0/arabicwebappspentesting", "name": "arabicwebappspentesting", "owner": "zigoo0", "url": "https://github.com/zigoo0/ArabicWebAppsPentesting", "stars": 553, "language": "PHP", "description": "This repo will contain POC, demo files, and any links given during the Arab web application penetration testing course.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ahmed Zayed (Zigoo0)", "cardId": "76eca05f315563a7", "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1da05493a030", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-12T23:15:17Z", "archived": false, "topContributors": [ { "login": "zigoo0", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4", "type": "User" } ] }, { "repo": "jobertabma/ground-control", "name": "ground-control", "owner": "jobertabma", "url": "https://github.com/jobertabma/ground-control", "stars": 552, "language": "Ruby", "description": "A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jobert Abma", "cardId": "0d878e2584e64386", "avatar": "https://avatars.githubusercontent.com/u/156693?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "859f903f156d", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-06-12T20:51:38Z", "archived": false, "topContributors": [ { "login": "jobertabma", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/156693?v=4", "type": "User" } ] }, { "repo": "frkngksl/huan", "name": "huan", "owner": "frkngksl", "url": "https://github.com/frkngksl/Huan", "stars": 548, "language": "C", "description": "Encrypted PE Loader Generator", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0a3b3c39363a", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T12:00:24Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "joasasantos/syswhispers4", "name": "syswhispers4", "owner": "joasasantos", "url": "https://github.com/JoasASantos/SysWhispers4", "stars": 541, "language": "Python", "description": "AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f515630149fe", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-03-07T15:39:27Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" }, { "login": "Lavender-exe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32195948?v=4", "type": "User" } ] }, { "repo": "struppigel/portex", "name": "portex", "owner": "struppigel", "url": "https://github.com/struppigel/PortEx", "stars": 532, "language": "Scala", "description": "Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karsten Hahn", "cardId": "2c4963b333ad77b5", "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87812647dabb", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-04-03T02:53:29Z", "archived": false, "topContributors": [ { "login": "struppigel", "c": 261, "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4", "type": "User" }, { "login": "katjahahn", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/227363017?v=4", "type": "User" }, { "login": "HairyFotr", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/566245?v=4", "type": "User" }, { "login": "heineson", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22792988?v=4", "type": "User" } ] }, { "repo": "3lp4tr0n/beaconhunter", "name": "beaconhunter", "owner": "3lp4tr0n", "url": "https://github.com/3lp4tr0n/BeaconHunter", "stars": 516, "language": "C#", "description": "Detect and respond to Cobalt Strike beacons using ETW.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Oliveau", "cardId": "20c11d79521effac", "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d96b374d0d89", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-07-15T09:02:54Z", "archived": false, "topContributors": [ { "login": "3lp4tr0n", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4", "type": "User" }, { "login": "aholdeno", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/78443499?v=4", "type": "User" } ] }, { "repo": "malvuln/ransomlord", "name": "ransomlord", "owner": "malvuln", "url": "https://github.com/malvuln/RansomLord", "stars": 516, "language": null, "description": "RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Malvuln (aka hyp3rlinx)", "cardId": "68d2b7258663f41f", "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1a5c416d33b2", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-20T01:03:46Z", "archived": false, "topContributors": [ { "login": "malvuln", "c": 99, "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4", "type": "User" } ] }, { "repo": "vyntral/god-eye", "name": "god-eye", "owner": "Vyntral", "url": "https://github.com/Vyntral/god-eye", "id": "17922d5c3183", "stars": 515, "language": "Go", "description": "AI-powered subdomain enumeration tool with local LLM analysis via Ollama - 100% private, zero API costs", "type": "tool", "pushedAt": "2026-07-02T07:45:03Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Vyntral", "cardId": "92505dbcd097b890", "avatar": "https://avatars.githubusercontent.com/u/128867964?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Vyntral", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/128867964?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/maliciousmacromsbuild", "name": "maliciousmacromsbuild", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/MaliciousMacroMSBuild", "stars": 508, "language": "Python", "description": "Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "443627018bb7", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-08-06T08:16:05Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" } ] }, { "repo": "executemalware/malware-iocs", "name": "malware-iocs", "owner": "executemalware", "url": "https://github.com/executemalware/Malware-IOCs", "stars": 508, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "ExecuteMalware", "cardId": "98abe3ee2592bc1b", "avatar": "https://avatars.githubusercontent.com/u/22508495?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b89e7196edf9", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-07T11:05:16Z", "archived": false, "topContributors": [ { "login": "executemalware", "c": 787, "avatar": "https://avatars.githubusercontent.com/u/22508495?v=4", "type": "User" } ] }, { "repo": "trustedsec/tap", "name": "tap", "owner": "trustedsec", "url": "https://github.com/trustedsec/tap", "id": "8ce3804d5e15", "stars": 505, "language": "Python", "description": "The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.", "type": "tool", "pushedAt": "2022-11-17T16:29:36Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "login": "darkoperator" }, { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Kevin Haubris", "cardId": "3675f451e4ed1ecc", "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "login": "kev169" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "darkoperator", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "HackingDave", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "kev169", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2339235?v=4", "type": "User" }, { "login": "Caprico1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24262012?v=4", "type": "User" }, { "login": "ninewires", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3959047?v=4", "type": "User" }, { "login": "Spoonman1091", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1806514?v=4", "type": "User" } ] }, { "repo": "bohops/sharprdphijack", "name": "sharprdphijack", "owner": "bohops", "url": "https://github.com/bohops/SharpRDPHijack", "stars": 503, "language": "C#", "description": " A proof-of-concept Remote Desktop (RDP) session hijack utility", "type": "tool", "lanes": [ "2" ], "author": { "name": "bohops", "cardId": "e2182aefda331dc9", "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1accb863a322", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-28T06:08:58Z", "archived": false, "topContributors": [ { "login": "bohops", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4", "type": "User" } ] }, { "repo": "s0md3v/cloak", "name": "cloak", "owner": "s0md3v", "url": "https://github.com/s0md3v/Cloak", "stars": 502, "language": "Python", "description": "Cloak can backdoor any python script with some tricks.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "04fc9bfdf752", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2019-05-05T15:49:36Z", "archived": true, "topContributors": [ { "login": "s0md3v", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "duck-nukem", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9606801?v=4", "type": "User" } ] }, { "repo": "boku7/azureoutlookc2", "name": "azureoutlookc2", "owner": "boku7", "url": "https://github.com/boku7/azureOutlookC2", "stars": 502, "language": "C", "description": "Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Micro", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "407df6ffd90f", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "login": "Cracked5pider" } ], "pushedAt": "2023-05-16T22:53:39Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "Cracked5pider", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" }, { "login": "wand3rlust", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83376115?v=4", "type": "User" } ] }, { "repo": "1n3/wordpress-xmlrpc-brute-force-exploit", "name": "wordpress-xmlrpc-brute-force-exploit", "owner": "1n3", "url": "https://github.com/1N3/Wordpress-XMLRPC-Brute-Force-Exploit", "stars": 499, "language": "Python", "description": "Wordpress XMLRPC System Multicall Brute Force Exploit (0day) by 1N3 @ CrowdShield", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3e9081e16c7b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2025-08-10T13:11:57Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "tylerwhardy", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/50224819?v=4", "type": "User" }, { "login": "snyk-bot", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19733683?v=4", "type": "User" }, { "login": "davistardif", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16528981?v=4", "type": "User" }, { "login": "Roshane-Johnson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39389600?v=4", "type": "User" }, { "login": "subfission", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8132423?v=4", "type": "User" } ] }, { "repo": "trustedsec/physical-docs", "name": "physical-docs", "owner": "trustedsec", "url": "https://github.com/trustedsec/physical-docs", "id": "a280952bdb72", "stars": 497, "language": null, "description": "This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves w", "type": "tool", "pushedAt": "2019-11-21T14:55:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" }, { "name": "Jay Beale", "cardId": "60e1738e0952ff61", "avatar": "https://avatars.githubusercontent.com/u/1235374?v=4", "login": "JayBeale" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "HackingDave", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" }, { "login": "JayBeale", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1235374?v=4", "type": "User" } ] }, { "repo": "octoberfest7/memfiles", "name": "memfiles", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/MemFiles", "stars": 478, "language": "C", "description": "A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3409a17d06bb", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-07-06T17:02:28Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "dsfgfdg", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5831365?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" } ] }, { "repo": "swisskyrepo/damnwebscanner", "name": "damnwebscanner", "owner": "swisskyrepo", "url": "https://github.com/swisskyrepo/DamnWebScanner", "stars": 469, "language": "Python", "description": "Another web vulnerabilities scanner, this extension works on Chrome and Opera", "type": "tool", "lanes": [ "2" ], "author": { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e95a9c3dddea", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-22T14:11:50Z", "archived": false, "topContributors": [ { "login": "swisskyrepo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" } ] }, { "repo": "cracked5pider/ldrlibraryex", "name": "ldrlibraryex", "owner": "cracked5pider", "url": "https://github.com/Cracked5pider/LdrLibraryEx", "stars": 469, "language": "C", "description": "A small x64 library to load dll's into memory.", "type": "tool", "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "34a42559b3b9", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-06T15:36:41Z", "archived": true, "topContributors": [ { "login": "Cracked5pider", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" } ] }, { "repo": "digitalbond/redpoint", "name": "Redpoint", "owner": "digitalbond", "url": "https://github.com/digitalbond/Redpoint", "id": "94b79fe4ff3d", "stars": 468, "language": "Lua", "description": "Digital Bond's ICS Enumeration Tools", "type": "tool", "pushedAt": "2020-03-10T16:54:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Dale Peterson", "cardId": "0e8814f71408b138", "avatar": "https://avatars.githubusercontent.com/u/7040516?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Stephen Hilt", "cardId": "bb673daf96e9659f", "avatar": "https://avatars.githubusercontent.com/u/6362482?v=4", "login": "sjhilt" } ], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "sjhilt", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/6362482?v=4", "type": "User" }, { "login": "bonsaiviking", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/768278?v=4", "type": "User" }, { "login": "giminy", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1558555?v=4", "type": "User" }, { "login": "DalePeterson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9507950?v=4", "type": "User" } ] }, { "repo": "boku7/spawn", "name": "spawn", "owner": "boku7", "url": "https://github.com/boku7/spawn", "stars": 467, "language": "C", "description": "Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG),", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cad344af854a", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:53:44Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "hasherezade/malware_analysis", "name": "malware_analysis", "owner": "hasherezade", "url": "https://github.com/hasherezade/malware_analysis", "stars": 464, "language": "Python", "description": "Various snippets created during malware analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c344a5cfbf22", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-10-03T22:40:06Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "malwarezone", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/30694372?v=4", "type": "User" }, { "login": "adnahmed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70430987?v=4", "type": "User" } ] }, { "repo": "zigoo0/webpwn3r", "name": "webpwn3r", "owner": "zigoo0", "url": "https://github.com/zigoo0/webpwn3r", "stars": 459, "language": "Python", "description": "WebPwn3r - Web Applications Security Scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ahmed Zayed (Zigoo0)", "cardId": "76eca05f315563a7", "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ccac9f21c9ba", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-09T21:20:53Z", "archived": false, "topContributors": [ { "login": "zigoo0", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/tater", "name": "tater", "owner": "kevin-robertson", "url": "https://github.com/Kevin-Robertson/Tater", "stars": 455, "language": "PowerShell", "description": "Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "57d4620a4ca5", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-04-22T03:04:24Z", "archived": false, "topContributors": [ { "login": "Kevin-Robertson", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" } ] }, { "repo": "epi052/recon-pipeline", "name": "recon-pipeline", "owner": "epi052", "url": "https://github.com/epi052/recon-pipeline", "stars": 452, "language": "Python", "description": "An automated target reconnaissance pipeline.", "type": "tool", "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1298724d6bd9", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-02-13T16:35:28Z", "archived": false, "topContributors": [ { "login": "epi052", "c": 104, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" }, { "login": "GreaterGoodest", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/10263380?v=4", "type": "User" }, { "login": "spothound", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15269938?v=4", "type": "User" }, { "login": "bamhm182", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/920269?v=4", "type": "User" } ] }, { "repo": "boku7/ninja_uuid_runner", "name": "ninja_uuid_runner", "owner": "boku7", "url": "https://github.com/boku7/Ninja_UUID_Runner", "stars": 450, "language": "C", "description": "Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "56ad3af02765", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:53:15Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "trustedsec/nps_payload", "name": "nps_payload", "owner": "trustedsec", "url": "https://github.com/trustedsec/nps_payload", "id": "db75a118a711", "stars": 448, "language": "Python", "description": "This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload", "type": "tool", "pushedAt": "2023-11-30T09:24:13Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Chiggins", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/350596?v=4", "type": "User" } ] }, { "repo": "octoberfest7/xll_phishing", "name": "XLL_Phishing", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/XLL_Phishing", "id": "88d9bb748169", "stars": 441, "language": "C", "description": "XLL Phishing Tradecraft", "type": "tool", "pushedAt": "2022-05-24T00:35:33Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Octoberfest7", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "dsfgfdg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5831365?v=4", "type": "User" } ] }, { "repo": "boku7/venom", "name": "venom", "owner": "boku7", "url": "https://github.com/boku7/venom", "stars": 435, "language": "Python", "description": "Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "426ac4d84ad0", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-07T18:35:57Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "0xsyr0/red-team-playbooks", "name": "red-team-playbooks", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/Red-Team-Playbooks", "stars": 433, "language": "PowerShell", "description": "This repository contains cutting-edge open-source security notes and tools that will help you during your Red Team assessments.", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "738aa3a98a18", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-06T14:04:49Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 252, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" }, { "login": "purplestormctf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/123364396?v=4", "type": "User" } ] }, { "repo": "swisskyrepo/vulny-code-static-analysis", "name": "Vulny-Code-Static-Analysis", "owner": "swisskyrepo", "url": "https://github.com/swisskyrepo/Vulny-Code-Static-Analysis", "id": "7754edeab191", "stars": 424, "language": "PHP", "description": "Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex", "type": "tool", "pushedAt": "2025-02-27T16:11:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "swisskyrepo", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" }, { "login": "tanaydin", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/400388?v=4", "type": "User" }, { "login": "chgq1020", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39968695?v=4", "type": "User" }, { "login": "Rude-Monkey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16140019?v=4", "type": "User" } ] }, { "repo": "trustedsec/orpheus", "name": "orpheus", "owner": "trustedsec", "url": "https://github.com/trustedsec/orpheus", "id": "2a10fc66449b", "stars": 421, "language": "Python", "description": "Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types", "type": "tool", "pushedAt": "2025-03-21T19:02:27Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "clod81", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1020921?v=4", "type": "User" } ] }, { "repo": "swiftonsecurity/swiftfilter", "name": "SwiftFilter", "owner": "SwiftOnSecurity", "url": "https://github.com/SwiftOnSecurity/SwiftFilter", "id": "ec2fb5c45085", "stars": 415, "language": null, "description": "Exchange Transport rules to detect and enable response to phishing", "type": "tool", "pushedAt": "2020-05-09T15:26:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "SwiftOnSecurity", "cardId": "21eb4a885bf6539b", "avatar": "https://avatars.githubusercontent.com/u/25470060?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "SwiftOnSecurity", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/25470060?v=4", "type": "User" } ] }, { "repo": "rivitna/malware", "name": "malware", "owner": "rivitna", "url": "https://github.com/rivitna/Malware", "stars": 400, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "rivitna", "cardId": "fada6f7dd53a12b7", "avatar": "https://avatars.githubusercontent.com/u/56387892?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09af82499090", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-13T22:08:51Z", "archived": false, "topContributors": [ { "login": "rivitna", "c": 3070, "avatar": "https://avatars.githubusercontent.com/u/56387892?v=4", "type": "User" } ] }, { "repo": "outflanknl/printnightmare", "name": "PrintNightmare", "owner": "outflanknl", "url": "https://github.com/outflanknl/PrintNightmare", "id": "c4e80f742a3f", "stars": 345, "language": "C", "description": "", "type": "tool", "pushedAt": "2021-09-13T08:45:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 3, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "trustedsec/lnkmemaybe", "name": "LnkMeMaybe", "owner": "trustedsec", "url": "https://github.com/trustedsec/LnkMeMaybe", "id": "13046340fea1", "stars": 181, "language": "C#", "description": "Lnk crafting and research tools", "type": "tool", "pushedAt": "2026-03-04T16:46:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "freefirex", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" } ] }, { "repo": "silascutler/miscmalware", "name": "miscmalware", "owner": "silascutler", "url": "https://github.com/silascutler/MiscMalware", "stars": 11, "language": "Python", "description": "Misc malware stuff", "type": "tool", "lanes": [ "2" ], "author": { "name": "Silas Cutler (p1nk)", "cardId": "fc10e9db73947aeb", "avatar": "https://avatars.githubusercontent.com/u/2154372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bdad148bb745", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-30T19:54:24Z", "archived": false, "topContributors": [ { "login": "silascutler", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2154372?v=4", "type": "User" } ] }, { "repo": "sonofagl1tch/malwareresearch", "name": "malwareresearch", "owner": "sonofagl1tch", "url": "https://github.com/sonofagl1tch/MalwareResearch", "stars": 11, "language": "C#", "description": "This directory contains random scripts from threat hunting or malware research", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ryan Nolette", "cardId": "0bd9b689d2369162", "avatar": "https://avatars.githubusercontent.com/u/20155474?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3562a3d9f6d4", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-02-15T01:28:49Z", "archived": false, "topContributors": [ { "login": "sonofagl1tch", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/20155474?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/lempo", "name": "lempo", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/lempo", "stars": 11, "language": "Ruby", "description": "LEMPO (Ldap Exposure on POrtainer) is an exploit for CVE-2018-19466 (LDAP Credentials Disclosure on Portainer). Featured @ DevFest Siberia 2018", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a373eaefcbfc", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-12T15:34:51Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "gergelykalman/cve-2023-32407-a-macos-tcc-bypass-in-metal", "name": "cve-2023-32407-a-macos-tcc-bypass-in-metal", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/CVE-2023-32407-a-macOS-TCC-bypass-in-Metal", "stars": 11, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c75e1cfcb562", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-14T20:54:26Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "reyammer/a11y-flag-secure-poc", "name": "a11y-flag-secure-poc", "owner": "reyammer", "url": "https://github.com/reyammer/a11y-flag-secure-poc", "stars": 11, "language": "Java", "description": "POC to test FLAG_SECURE vs a11y", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yanick Fratantonio", "cardId": "5e6311184bcc0981", "avatar": "https://avatars.githubusercontent.com/u/1136172?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b3dd943d56f", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-10T12:44:28Z", "archived": false, "topContributors": [ { "login": "reyammer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1136172?v=4", "type": "User" } ] }, { "repo": "chapinb/pythonforensics", "name": "pythonforensics", "owner": "chapinb", "url": "https://github.com/chapinb/pythonforensics", "stars": 11, "language": "Jupyter Notebook", "description": "Jupyter Notebooks from Python as a Forensic Tool presentation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chapin Bryce", "cardId": "6b37e90f806fe4e4", "avatar": "https://avatars.githubusercontent.com/u/7152035?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6177c405e89d", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-02-10T23:07:57Z", "archived": false, "topContributors": [ { "login": "chapinb", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/7152035?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 10, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "apurvsinghgautam/hacker-forum-exploit-and-classification-for-proactive-cyber-threat-intelligence", "name": "hacker-forum-exploit-and-classification-for-proactive-cyber-threat-intelligence", "owner": "apurvsinghgautam", "url": "https://github.com/apurvsinghgautam/Hacker-Forum-Exploit-and-Classification-for-Proactive-Cyber-Threat-Intelligence", "stars": 11, "language": "Jupyter Notebook", "description": "Hacker Forum Classification for Threat Intelligence", "type": "tool", "lanes": [ "2" ], "author": { "name": "Apurv Singh Gautam", "cardId": "e17347a79dfabe2b", "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "12907abebe48", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-25T22:28:29Z", "archived": false, "topContributors": [ { "login": "apurvsinghgautam", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/20106707?v=4", "type": "User" } ] }, { "repo": "csandker/spnegodown", "name": "spnegodown", "owner": "csandker", "url": "https://github.com/csandker/spnegoDown", "stars": 11, "language": "Python", "description": "PoC Tool for SPNEGO Downgrade", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carsten Sandker", "cardId": "8e4383b825a0355e", "avatar": "https://avatars.githubusercontent.com/u/4909972?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "00aac79ce23e", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-04T08:42:49Z", "archived": false, "topContributors": [ { "login": "csandker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4909972?v=4", "type": "User" } ] }, { "repo": "albertzsigovits/malware-yara", "name": "malware-yara", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-yara", "stars": 10, "language": "YARA", "description": "YARA rules for malware detection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7e2a3faf50d7", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-28T21:17:30Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "xorrior/apfell-chrome-ext-payload", "name": "apfell-chrome-ext-payload", "owner": "xorrior", "url": "https://github.com/xorrior/apfell-chrome-ext-payload", "stars": 10, "language": "JavaScript", "description": "Apfell POC Chrome Extension Payload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0ade9d9ff0d7", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-24T00:24:37Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-kerberosserviceticketaudit", "name": "get-kerberosserviceticketaudit", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-KerberosServiceTicketAudit", "stars": 10, "language": "PowerShell", "description": "Assess Kerberos Cipher and Hash usage in Active Directory environments (e.g. Weak/Deprecated encryption types, or Quantum-resilient candidates)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cacee2817215", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-09T14:08:38Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/mft", "name": "mft", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/mFT", "stars": 10, "language": "Ruby", "description": "mFT (Malicious Fungible Token) is a Web3 based C2 framework to demonstrate malicious capabilities of web3 assets.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c046d2e93f0", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-10T14:20:26Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/gevaudan", "name": "gevaudan", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/GEVAUDAN", "stars": 10, "language": "Ruby", "description": "Exploit for Red Hat / GlusterFS CVE-2018-1088 & CVE-2018-1112, featured @ DEFCON 26, Las Vegas!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8fadbd804154", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-30T20:18:17Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "dump-guy/sc2elf", "name": "sc2elf", "owner": "dump-guy", "url": "https://github.com/Dump-GUY/sc2elf", "stars": 10, "language": "C#", "description": "Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jiří Vinopal", "cardId": "55f2c1ff9adab80d", "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1fb3c67148da", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-21T14:28:58Z", "archived": false, "topContributors": [ { "login": "Dump-GUY", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/59492005?v=4", "type": "User" } ] }, { "repo": "valdikss/responder-brute", "name": "responder-brute", "owner": "valdikss", "url": "https://github.com/ValdikSS/responder-brute", "stars": 10, "language": "Python", "description": "Brute NTLM hashes captured by Responder with hashcat or john", "type": "tool", "lanes": [ "2" ], "author": { "name": "ValdikSS", "cardId": "c76eaa2d709872a9", "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "045fc9d5918b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-02-22T12:18:57Z", "archived": false, "topContributors": [ { "login": "ValdikSS", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/3054729?v=4", "type": "User" } ] }, { "repo": "0x4d31/cve-2024-6387_hassh", "name": "cve-2024-6387_hassh", "owner": "0x4d31", "url": "https://github.com/0x4D31/cve-2024-6387_hassh", "stars": 10, "language": "Python", "description": "HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 (regreSSHion).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adel Karimi", "cardId": "d370c84bd65364d0", "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "456704183f0f", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-05T03:40:53Z", "archived": false, "topContributors": [ { "login": "0x4D31", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/11577776?v=4", "type": "User" } ] }, { "repo": "seclab-ucr/clap", "name": "clap", "owner": "seclab-ucr", "url": "https://github.com/seclab-ucr/CLAP", "stars": 9, "language": "Python", "description": "This repository hosts the implementation of CLAP (Context Learning-based Adversarial Protection) that is proposed in our CoNEXT 2020 paper titled \"You Do (Not) Belong Here: Detecting DPI Evasion Attac", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zhiyun Qian", "cardId": "022713dbceffc744", "avatar": "https://avatars.githubusercontent.com/u/32003129?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "46711c031599", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-11T09:55:56Z", "archived": false, "topContributors": [ { "login": "shitongzhu", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6687806?v=4", "type": "User" } ] }, { "repo": "joelgmsec/evil-irc", "name": "evil-irc", "owner": "joelgmsec", "url": "https://github.com/JoelGMSec/Evil-IRC", "stars": 9, "language": "Perl", "description": "Old School IRC Backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joel Gámez", "cardId": "2748afff667684e5", "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "62814b425e6e", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-05T12:02:50Z", "archived": false, "topContributors": [ { "login": "JoelGMSec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34335312?v=4", "type": "User" } ] }, { "repo": "gergelykalman/no-cve-batsignal-a-macos-lpe-in-spotlight", "name": "no-cve-batsignal-a-macos-lpe-in-spotlight", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/no-CVE-batsignal-a-macOS-LPE-in-Spotlight", "stars": 9, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1f54c4eab8c0", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-31T18:48:32Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "0xkol/ripple20-digi-connect-exploit", "name": "ripple20-digi-connect-exploit", "owner": "0xkol", "url": "https://github.com/0xkol/ripple20-digi-connect-exploit", "stars": 9, "language": "Python", "description": "RCE exploit for CVE-2020-11896 (Ripple20 IP-in-IP Heap Overflow Vulnerability) targeting Digi Connect ME 9210", "type": "tool", "lanes": [ "2" ], "author": { "name": "Moshe Kol", "cardId": "626be8eaa344eeba", "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "14c0837243fa", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-30T18:46:27Z", "archived": false, "topContributors": [ { "login": "0xkol", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4", "type": "User" } ] }, { "repo": "ccelikanil/mapxtractor", "name": "mapxtractor", "owner": "ccelikanil", "url": "https://github.com/ccelikanil/mapxtractor", "stars": 9, "language": "Python", "description": "JS Source Map Extractor & Secrets Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Anil Celik", "cardId": "6cb62d472a3bbb85", "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1965b0cea1bb", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-17T07:38:28Z", "archived": false, "topContributors": [ { "login": "ccelikanil", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4", "type": "User" }, { "login": "KamilCavusoglu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85586283?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/uefi-firmware-analysis", "name": "uefi-firmware-analysis", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/UEFI-Firmware-Analysis", "stars": 9, "language": "PowerShell", "description": "UEFI firmware analysis & research on known vulnerabilities in early boot components", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da0b43c701a3", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-10T07:19:51Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "ang13t/digital_rain_payload", "name": "digital_rain_payload", "owner": "ang13t", "url": "https://github.com/ANG13T/Digital_Rain_Payload", "stars": 9, "language": null, "description": "Digital Rain Prank HID Payload written in Ducky Script. Works on MacOS with Homebrew", "type": "tool", "lanes": [ "2" ], "author": { "name": "Angelina Tsuboi", "cardId": "d6663195bc21ebb8", "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a60b021d40ce", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-14T17:07:30Z", "archived": false, "topContributors": [ { "login": "ANG13T", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/51937266?v=4", "type": "User" } ] }, { "repo": "jprx/cve-2024-54507", "name": "cve-2024-54507", "owner": "jprx", "url": "https://github.com/jprx/CVE-2024-54507", "stars": 9, "language": "C", "description": "An integer type confusion in XNU", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joseph Ravichandran", "cardId": "ecea8f6ea1f778c2", "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f3e957ff67d", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-23T20:50:46Z", "archived": false, "topContributors": [ { "login": "jprx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/36464332?v=4", "type": "User" } ] }, { "repo": "parzel/getsystem-bof", "name": "getsystem-bof", "owner": "parzel", "url": "https://github.com/parzel/getsystem-bof", "stars": 9, "language": "C", "description": "BOF to execute shellcode as SYSTEM via PPID spoofing.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9517db0ed065", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-07T14:02:37Z", "archived": false, "topContributors": [ { "login": "parzel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "filipi86/crowdstrike", "name": "crowdstrike", "owner": "filipi86", "url": "https://github.com/filipi86/CrowdStrike", "stars": 8, "language": null, "description": "The purpose of this document, it was to execute several efficiency and detection tests in our lab environment protected with an endpoint solution, provided by CrowdStrike, this document brings the res", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filipi Pires", "cardId": "ad05414c70858a66", "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f3d95cbda7d", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 16, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-21T17:42:21Z", "archived": false, "topContributors": [ { "login": "filipi86", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/31785433?v=4", "type": "User" } ] }, { "repo": "xorrior/webcam_dll", "name": "webcam_dll", "owner": "xorrior", "url": "https://github.com/xorrior/WebCam_Dll", "stars": 8, "language": "C", "description": "Capture Webcam Reflective Dll", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c6e9ffdcbf82", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-09T13:04:06Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "iiamit/data-sound-poc", "name": "data-sound-poc", "owner": "iiamit", "url": "https://github.com/iiamit/data-sound-poc", "stars": 8, "language": "Python", "description": "Data Sound Modulation POC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ian Amit", "cardId": "2ac1b192f87a5322", "avatar": "https://avatars.githubusercontent.com/u/1219407?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "63ce0b6256ca", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2011-11-25T05:23:43Z", "archived": false, "topContributors": [ { "login": "iiamit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1219407?v=4", "type": "User" } ] }, { "repo": "bitdefender/boxv2-firmware", "name": "boxv2-firmware", "owner": "bitdefender", "url": "https://github.com/bitdefender/boxv2-firmware", "stars": 8, "language": "C", "description": "OpenWRT-based OS for Bitdefender BOXv2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0f2d9ca43109", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-07T10:38:46Z", "archived": false, "topContributors": [ { "login": "ileonte-bitdefender", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/39797225?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-adminsdholder", "name": "get-adminsdholder", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-AdminSDHolder", "stars": 8, "language": "PowerShell", "description": "Analyze effective protected groups in AD, honoring dsHeuristics. Outputs to Console, CSV and DOT (creates a Visual Map using graphviz)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fdf0a08c69ab", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-09T14:18:48Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" }, { "login": "upltk47", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/120515490?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/prettyvisibleferret", "name": "prettyvisibleferret", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/prettyvisibleferret", "stars": 8, "language": null, "description": "A write-up and explained re-version of InvisibleFerret malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "adc3d72a6f62", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-24T22:56:20Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "rocky/pytest-trepan", "name": "pytest-trepan", "owner": "rocky", "url": "https://github.com/rocky/pytest-trepan", "stars": 8, "language": "Perl", "description": "pytest plugin to invoke the trepan debugger", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3debc6ad9336", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-14T22:39:48Z", "archived": false, "topContributors": [ { "login": "rocky", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "sheikheddy", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/30148602?v=4", "type": "User" } ] }, { "repo": "leo4j/invoke-grabthehash", "name": "invoke-grabthehash", "owner": "leo4j", "url": "https://github.com/Leo4j/Invoke-GrabTheHash", "stars": 8, "language": "PowerShell", "description": "Get the NTLM Hash for the User or Machine Account TGT held in your current session", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "68a8170eb04b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-26T10:52:51Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/stm32-poc-exploit", "name": "stm32-poc-exploit", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/stm32-poc-exploit", "stars": 8, "language": "Python", "description": "An exploit for the DFU ROM bootloader of the STM32F2xx, portable to the STM32F4xx.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "040efeab5f50", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-29T13:41:09Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" } ] }, { "repo": "conand/dissecting-malware-101", "name": "dissecting-malware-101", "owner": "conand", "url": "https://github.com/conand/dissecting-malware-101", "stars": 8, "language": "PHP", "description": "Malware Analysis Workshop", "type": "tool", "lanes": [ "2" ], "author": { "name": "A. Continella", "cardId": "850b5e1dd47688b1", "avatar": "https://avatars.githubusercontent.com/u/13064349?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "113ec021c9ca", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-01-25T06:39:42Z", "archived": false, "topContributors": [ { "login": "conand", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/13064349?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/binary-exploitation", "name": "binary-exploitation", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Binary-Exploitation", "stars": 8, "language": "Python", "description": "A hands-on foundation in memory corruption, fuzzing, crash triage, and mitigation bypasses (from lab setup through CVE research to exploit development ).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "209327869ecc", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-23T11:48:10Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/off-by-one-security-masterclass", "name": "off-by-one-security-masterclass", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Off-By-One-Security-Masterclass", "stars": 8, "language": null, "description": "Materials from the Masterclass I presented on the Off By One Security channel, hosted by Stephen Sims. The sessions covered how to develop and deploy rootkits and included an APT-style emulation demon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "203e9680fa14", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-07T10:05:23Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "lockfale/cackalackybadgyfirmware2025", "name": "cackalackybadgyfirmware2025", "owner": "lockfale", "url": "https://github.com/lockfale/cackalackybadgyfirmware2025", "stars": 8, "language": "C++", "description": "Firmware and source for the CackalackyBadgy from CackalackyCon 2025", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dd43b637d81c", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-08T22:05:29Z", "archived": false, "topContributors": [ { "login": "pandatrax", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/20147940?v=4", "type": "User" }, { "login": "persinac", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1282855?v=4", "type": "User" } ] }, { "repo": "actuator/com.heytap.browser", "name": "com.heytap.browser", "owner": "actuator", "url": "https://github.com/actuator/com.heytap.browser", "stars": 8, "language": null, "description": "CVE-2024-23729", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2225240bb039", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-29T21:40:11Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "staaldraad/offensive-powershell", "name": "offensive-powershell", "owner": "staaldraad", "url": "https://github.com/staaldraad/offensive-powershell", "stars": 8, "language": "PowerShell", "description": "Some Powershell scripts that do useful things", "type": "tool", "lanes": [ "2" ], "author": { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d4678144f6c6", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-10-06T18:06:41Z", "archived": false, "topContributors": [ { "login": "staaldraad", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" } ] }, { "repo": "0xricksanchez/fuzz_server_stub", "name": "fuzz_server_stub", "owner": "0xricksanchez", "url": "https://github.com/0xricksanchez/fuzz_server_stub", "stars": 1, "language": "Rust", "description": "Async (fuzz) server that handles incoming connections and forwards payloads to all connected clients", "type": "tool", "lanes": [ "2" ], "author": { "name": "434b", "cardId": "f3094bf5c4206fd6", "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7dc82121c459", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-03T10:35:11Z", "archived": false, "topContributors": [ { "login": "0xricksanchez", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17012133?v=4", "type": "User" } ] }, { "repo": "0xjin/xss.svg", "name": "xss.svg", "owner": "0xjin", "url": "https://github.com/0xJin/xss.svg", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xJin", "cardId": "52cb074eae97573e", "avatar": "https://avatars.githubusercontent.com/u/81621963?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8ad8e64fd9b1", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-07T14:06:08Z", "archived": false, "topContributors": [ { "login": "0xJin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/81621963?v=4", "type": "User" } ] }, { "repo": "olivierlaflamme/cve-2021-36934-export-shadow-volume-poc", "name": "cve-2021-36934-export-shadow-volume-poc", "owner": "olivierlaflamme", "url": "https://github.com/OlivierLaflamme/CVE-2021-36934-export-shadow-volume-POC", "stars": 1, "language": "C#", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Boschko", "cardId": "0672178ba18153b4", "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "08bbb42ce83e", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-10T19:43:21Z", "archived": false, "topContributors": [ { "login": "OlivierLaflamme", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25066959?v=4", "type": "User" } ] }, { "repo": "x-c3ll/ticketsentinnel", "name": "ticketsentinnel", "owner": "x-c3ll", "url": "https://github.com/X-C3LL/TicketSentinnel", "stars": 1, "language": "Python", "description": "PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "X-C3LL", "cardId": "0dcc4174f290a01e", "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b802772b5289", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-22T06:41:25Z", "archived": false, "topContributors": [ { "login": "X-C3LL", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4010240?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/flink-rce-by-design", "name": "flink-rce-by-design", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/flink-rce-by-design", "stars": 1, "language": "Java", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8b5107d0c1d3", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-11T14:23:24Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "s0ld13rr/modplant", "name": "modplant", "owner": "s0ld13rr", "url": "https://github.com/s0ld13rr/MODPlant", "stars": 1, "language": "C", "description": "MODPlant is an Apache HTTPD module designed for authorized security assessments. It accepts a Base64-encoded payload via a configurable HTTP header, executes it in a controlled context, and returns Ba", "type": "tool", "lanes": [ "2" ], "author": { "name": "s0ld13r", "cardId": "2d88aeb263677a72", "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9c865ad9a4c2", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-29T17:43:23Z", "archived": false, "topContributors": [ { "login": "s0ld13rr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68789713?v=4", "type": "User" } ] }, { "repo": "shad0wmazt3r/lattice-mind", "name": "lattice-mind", "owner": "shad0wmazt3r", "url": "https://github.com/Shad0wMazt3r/Lattice-Mind", "stars": 1, "language": "Python", "description": "MCP server for LLM-driven CTF exploitation — automated vuln discovery, payload execution, and HITL escalation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "shad0wmazt3r", "cardId": "2d9d7d3b97b1bb0c", "avatar": "https://avatars.githubusercontent.com/u/58432267?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e3e3a50071c", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-01T18:14:23Z", "archived": false, "topContributors": [ { "login": "Copilot", "c": 5, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "Shad0wMazt3r", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/58432267?v=4", "type": "User" } ] }, { "repo": "viralmaniar/l.o.l.v.e.r.s.e.", "name": "l.o.l.v.e.r.s.e.", "owner": "viralmaniar", "url": "https://github.com/Viralmaniar/L.O.L.V.E.R.S.E.", "stars": 1, "language": null, "description": "Living Off the Land – Versatile Ecosystem for Research, Security & Evasion", "type": "tool", "lanes": [ "2" ], "author": { "name": "Viral Maniar", "cardId": "51c574aac025e01d", "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ad55f9a3a93b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-20T23:12:01Z", "archived": false, "topContributors": [ { "login": "Viralmaniar", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3501170?v=4", "type": "User" } ] }, { "repo": "zeyad-azima/vicidial-stored-xss", "name": "vicidial-stored-xss", "owner": "zeyad-azima", "url": "https://github.com/Zeyad-Azima/Vicidial-stored-XSS", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zer0verflow", "cardId": "78b1bc3864bc9101", "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b2963a3cbc8b", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-14T22:51:59Z", "archived": false, "topContributors": [ { "login": "Zeyad-Azima", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/62406753?v=4", "type": "User" } ] }, { "repo": "martinsohn/cve-2020-8816", "name": "cve-2020-8816", "owner": "martinsohn", "url": "https://github.com/martinsohn/CVE-2020-8816", "stars": 1, "language": null, "description": "A PoC for CVE-2020-8816 that does not use $PATH but $PWD and globbing", "type": "tool", "lanes": [ "2" ], "author": { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf0a9f4690a5", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-17T23:06:35Z", "archived": false, "topContributors": [ { "login": "martinsohn", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "type": "User" } ] }, { "repo": "martinsohn/domain-security-scanner", "name": "domain-security-scanner", "owner": "martinsohn", "url": "https://github.com/martinsohn/domain-security-scanner", "stars": 1, "language": "Python", "description": "Code from 1st semester assignment for bachelor in it security", "type": "tool", "lanes": [ "2" ], "author": { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7a43ba996191", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-15T17:16:46Z", "archived": false, "topContributors": [ { "login": "martinsohn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "type": "User" } ] }, { "repo": "brmkit/engwrap", "name": "engwrap", "owner": "brmkit", "url": "https://github.com/brmkit/engwrap", "stars": 1, "language": "Go", "description": "A simple Docker wrapper for managing red team environments with full session logging.", "type": "tool", "lanes": [ "2" ], "author": { "name": "_brmkit", "cardId": "e5df5d93846412ff", "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "82b14d98f036", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-07T07:53:58Z", "archived": false, "topContributors": [ { "login": "brmkit", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4", "type": "User" } ] }, { "repo": "brmkit/ops-board", "name": "ops-board", "owner": "brmkit", "url": "https://github.com/brmkit/ops-board", "stars": 1, "language": "TypeScript", "description": "real-time collaborative graph board for red team ops ", "type": "tool", "lanes": [ "2" ], "author": { "name": "_brmkit", "cardId": "e5df5d93846412ff", "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8b37e07f220", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-08T14:06:46Z", "archived": false, "topContributors": [ { "login": "brmkit", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/29227228?v=4", "type": "User" } ] }, { "repo": "brunopujos/cve-2011-1237", "name": "cve-2011-1237", "owner": "brunopujos", "url": "https://github.com/BrunoPujos/CVE-2011-1237", "stars": 1, "language": "C++", "description": "POC for exploit of CVE-2011-1237", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bruno Pujos", "cardId": "f1815371a798ef13", "avatar": "https://avatars.githubusercontent.com/u/28804193?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f23df146d7d1", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-05-19T11:06:48Z", "archived": false, "topContributors": [ { "login": "BrunoPujos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28804193?v=4", "type": "User" } ] }, { "repo": "maclarel/windlass", "name": "windlass", "owner": "maclarel", "url": "https://github.com/maclarel/windlass", "stars": 1, "language": "C", "description": "Simple C-based dropper inspired by SNOWLIGHT", "type": "tool", "lanes": [ "2" ], "author": { "name": "Logan MacLaren", "cardId": "ff71881656dfe598", "avatar": "https://avatars.githubusercontent.com/u/21298298?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "db6f57de77f9", "score": 22, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": true, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-20T19:43:23Z", "archived": false, "topContributors": [ { "login": "maclarel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21298298?v=4", "type": "User" } ] }, { "repo": "leebaird/discover", "name": "discover", "owner": "leebaird", "url": "https://github.com/leebaird/discover", "stars": 3909, "language": "Shell", "description": "Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux and ", "type": "tool", "lanes": [ "1" ], "author": { "name": "leebaird", "cardId": null }, "referencedBy": [ { "url": "https://wehackpeople.wordpress.com/2017/11/08/osint-resources/", "title": "OSINT Resources", "person": "Tim Roberts" }, { "url": "https://hausec.com/pentesting-cheatsheet/", "title": "Pentesting Cheatsheet", "person": "Ryan Hausknecht" } ], "referencedCount": 2, "id": "bd43487312ce", "score": 21, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2026-07-16T16:26:13Z", "archived": false, "topContributors": [ { "login": "leebaird", "c": 1547, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "L1ghtn1ng", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/3628354?v=4", "type": "User" }, { "login": "ninewires", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/3959047?v=4", "type": "User" }, { "login": "arthurakay", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/401229?v=4", "type": "User" }, { "login": "michael-hart-github", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5470143?v=4", "type": "User" }, { "login": "aestone24", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/97988757?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "InsaneMiner", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58346322?v=4", "type": "User" }, { "login": "cmd-space", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10446071?v=4", "type": "User" }, { "login": "joacole", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29636217?v=4", "type": "User" } ] }, { "repo": "calebstewart/bypass-clm", "name": "bypass-clm", "owner": "calebstewart", "url": "https://github.com/calebstewart/bypass-clm", "stars": 309, "language": "C#", "description": "PowerShell Constrained Language Mode Bypass", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Caleb Stewart", "cardId": "ba74cf38708a6351", "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4" }, "referencedBy": [ { "url": "https://itm4n.github.io/reinventing-powershell/", "title": "Reinventing PowerShell in C/C++", "person": "Clément Labro" } ], "referencedCount": 1, "id": "e935475de973", "score": 21, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-31T19:13:55Z", "archived": false, "topContributors": [ { "login": "calebstewart", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4", "type": "User" } ] }, { "repo": "evyatarmeged/raccoon", "name": "Raccoon", "owner": "evyatarmeged", "url": "https://github.com/evyatarmeged/Raccoon", "id": "405b782689af", "stars": 3784, "language": "Python", "description": "A high performance offensive security tool for reconnaissance and vulnerability scanning", "type": "tool", "pushedAt": "2026-04-21T21:23:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "evyatarmeged", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "evyatarmeged", "c": 175, "avatar": "https://avatars.githubusercontent.com/u/29180932?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "mostafahussein", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4104127?v=4", "type": "User" }, { "login": "RecursiveForest", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/181812?v=4", "type": "User" }, { "login": "iddoeldor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16100975?v=4", "type": "User" }, { "login": "sgloutnikov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2321958?v=4", "type": "User" }, { "login": "evyatarguardicore", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43810628?v=4", "type": "User" }, { "login": "sar12332111", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/160210068?v=4", "type": "User" } ] }, { "repo": "pwntester/ysoserial.net", "name": "ysoserial.net", "owner": "pwntester", "url": "https://github.com/pwntester/ysoserial.net", "id": "c0a7610bf544", "stars": 3763, "language": "C#", "description": "Deserialization payload generator for a variety of .NET formatters", "type": "tool", "pushedAt": "2026-06-11T23:45:37Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "pwntester", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Piotr Bazydlo", "cardId": "cc6ff88c7ddf4de0", "avatar": "https://avatars.githubusercontent.com/u/36897432?v=4", "login": "chudyPB" }, { "name": "Markus Wulftange", "cardId": "47958d8bd725fdd0", "avatar": "https://avatars.githubusercontent.com/u/92552?v=4", "login": "mwulftange" }, { "name": "Steven Seeley", "cardId": "fde791457a7ce34d", "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "login": "stevenseeley" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 28, "topContributors": [ { "login": "pwntester", "c": 144, "avatar": "https://avatars.githubusercontent.com/u/125701?v=4", "type": "User" }, { "login": "irsdl", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/1798313?v=4", "type": "User" }, { "login": "Bort-Millipede", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/24467314?v=4", "type": "User" }, { "login": "chudyPB", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/36897432?v=4", "type": "User" }, { "login": "JarLob", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26652396?v=4", "type": "User" }, { "login": "nines-nine", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/67809900?v=4", "type": "User" }, { "login": "nt0xa", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3396041?v=4", "type": "User" }, { "login": "shelld3v", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/59408894?v=4", "type": "User" }, { "login": "testanull", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/21060210?v=4", "type": "User" }, { "login": "zcgonvh", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25787677?v=4", "type": "User" }, { "login": "CykuTW", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22723799?v=4", "type": "User" }, { "login": "mwulftange", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/92552?v=4", "type": "User" }, { "login": "yallie", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/672878?v=4", "type": "User" }, { "login": "RicterZ", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5282759?v=4", "type": "User" }, { "login": "DS-Kurt-Boberg", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32752289?v=4", "type": "User" }, { "login": "Frycos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20755282?v=4", "type": "User" }, { "login": "denandz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5291556?v=4", "type": "User" }, { "login": "hantwister", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1304167?v=4", "type": "User" }, { "login": "martinvw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2625279?v=4", "type": "User" }, { "login": "h3xstream", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/593130?v=4", "type": "User" }, { "login": "Ramzeth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25324933?v=4", "type": "User" }, { "login": "the-emmon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75249740?v=4", "type": "User" }, { "login": "Y4er", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40487319?v=4", "type": "User" }, { "login": "idealphase", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12832679?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" }, { "login": "stevenseeley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "type": "User" }, { "login": "GlitchWitch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32590246?v=4", "type": "User" }, { "login": "rotarydrone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26116086?v=4", "type": "User" } ] }, { "repo": "nixawk/pentest-wiki", "name": "pentest-wiki", "owner": "nixawk", "url": "https://github.com/nixawk/pentest-wiki", "id": "411707ff27e2", "stars": 3746, "language": "Python", "description": "PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.", "type": "tool", "pushedAt": "2023-09-13T13:51:04Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "nixawk", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "nixawk", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/7352479?v=4", "type": "User" }, { "login": "binarymist", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2862029?v=4", "type": "User" }, { "login": "leolashkevych", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7196103?v=4", "type": "User" }, { "login": "bkimminich", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3531020?v=4", "type": "User" }, { "login": "dsolstad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/346888?v=4", "type": "User" }, { "login": "sparcflow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25284445?v=4", "type": "User" }, { "login": "secureli", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10089608?v=4", "type": "User" }, { "login": "m1guelpf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23558090?v=4", "type": "User" }, { "login": "tanalam2411", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3388392?v=4", "type": "User" }, { "login": "Vokaysh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18655125?v=4", "type": "User" }, { "login": "sootysec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25612094?v=4", "type": "User" }, { "login": "nil0x42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3504393?v=4", "type": "User" }, { "login": "tomumk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20877957?v=4", "type": "User" } ] }, { "repo": "sc0tfree/updog", "name": "updog", "owner": "sc0tfree", "url": "https://github.com/sc0tfree/updog", "id": "32861246860b", "stars": 3371, "language": "Python", "description": "Updog is a replacement for Python's SimpleHTTPServer. It allows uploading and downloading via HTTP/S, can set ad hoc SSL certificates and use http basic auth.", "type": "tool", "pushedAt": "2025-11-16T20:20:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sc0tfree", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "sc0tfree", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/25855134?v=4", "type": "User" } ] }, { "repo": "gadievron/raptor", "name": "raptor", "owner": "gadievron", "url": "https://github.com/gadievron/raptor", "id": "0e648b49795e", "stars": 3347, "language": "Python", "description": "Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configur", "type": "tool", "pushedAt": "2026-07-18T02:12:30Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "gadievron", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Thomas Dullien", "cardId": "99a3f0b4f93ebd2b", "avatar": "https://avatars.githubusercontent.com/u/4587964?v=4", "login": "thomasdullien" }, { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" }, { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "login": "dinosn" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 26, "topContributors": [ { "login": "grokjc", "c": 1990, "avatar": "https://avatars.githubusercontent.com/u/248152903?v=4", "type": "User" }, { "login": "gadievron", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/223177581?v=4", "type": "User" }, { "login": "mbrg", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/11074433?v=4", "type": "User" }, { "login": "claude", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" }, { "login": "danielcuthbert", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/7882621?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 29, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "Hinotoi-agent", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/275430060?v=4", "type": "User" }, { "login": "unprovable", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/13507514?v=4", "type": "User" }, { "login": "northdpole", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1583262?v=4", "type": "User" }, { "login": "Copilot", "c": 7, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "l33tdawg", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16606836?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "thomasdullien", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4587964?v=4", "type": "User" }, { "login": "ZephrFish", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" }, { "login": "sapran", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/633520?v=4", "type": "User" }, { "login": "igama", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/76993?v=4", "type": "User" }, { "login": "poppaLol", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/149725905?v=4", "type": "User" }, { "login": "joshbouncesecurity", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/97975715?v=4", "type": "User" }, { "login": "acepace", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/231135?v=4", "type": "User" }, { "login": "CyRamos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40651473?v=4", "type": "User" }, { "login": "0xMattijs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83579637?v=4", "type": "User" }, { "login": "StefanFl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2698502?v=4", "type": "User" }, { "login": "stevemcgregory", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10984096?v=4", "type": "User" }, { "login": "martclau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7753513?v=4", "type": "User" }, { "login": "redwrasse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6155946?v=4", "type": "User" } ] }, { "repo": "almandin/fuxploider", "name": "fuxploider", "owner": "almandin", "url": "https://github.com/almandin/fuxploider", "id": "9a29db059864", "stars": 3328, "language": "Python", "description": "File upload vulnerability scanner and exploitation tool.", "type": "tool", "pushedAt": "2025-05-08T09:00:36Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "almandin", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "almandin", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/9830129?v=4", "type": "User" }, { "login": "themadhatter37", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/40098417?v=4", "type": "User" }, { "login": "mostafahussein", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4104127?v=4", "type": "User" }, { "login": "HarshCasper", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/47351025?v=4", "type": "User" }, { "login": "JackTheTripperr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/130310709?v=4", "type": "User" }, { "login": "deepsource-autofix[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/57168?v=4", "type": "Bot" }, { "login": "Alamot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3383610?v=4", "type": "User" }, { "login": "nyanshak", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3431490?v=4", "type": "User" }, { "login": "deepsourcebot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60907429?v=4", "type": "User" }, { "login": "d0gkiller87", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32069685?v=4", "type": "User" }, { "login": "EmreOvunc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15659223?v=4", "type": "User" }, { "login": "Calinou", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/180032?v=4", "type": "User" }, { "login": "dhnesh12", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34617145?v=4", "type": "User" }, { "login": "doomnuggets", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24980899?v=4", "type": "User" }, { "login": "keethesh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30286645?v=4", "type": "User" }, { "login": "siebz0r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1707143?v=4", "type": "User" } ] }, { "repo": "ekultek/whatwaf", "name": "WhatWaf", "owner": "Ekultek", "url": "https://github.com/Ekultek/WhatWaf", "id": "67848ffbafea", "stars": 2917, "language": "Python", "description": "Detect and bypass web application firewalls and protection systems", "type": "tool", "pushedAt": "2024-08-11T00:19:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Ekultek", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "Ekultek", "c": 124, "avatar": "https://avatars.githubusercontent.com/u/14183473?v=4", "type": "User" }, { "login": "ZacharyGroff", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/28795093?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "necrose99", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2396239?v=4", "type": "User" }, { "login": "TheCrott", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3626597?v=4", "type": "User" }, { "login": "TheBrownGroupOK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39389058?v=4", "type": "User" }, { "login": "Sija", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/988?v=4", "type": "User" }, { "login": "evs-ch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/27426009?v=4", "type": "User" }, { "login": "unxmaster", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38005147?v=4", "type": "User" }, { "login": "ziofil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8944955?v=4", "type": "User" } ] }, { "repo": "optiv/scarecrow", "name": "ScareCrow", "owner": "optiv", "url": "https://github.com/optiv/ScareCrow", "id": "6099806bf126", "stars": 2890, "language": "Go", "description": "ScareCrow - Payload creation framework designed around EDR bypass.", "type": "tool", "pushedAt": "2023-08-18T17:16:06Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "optiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Tylous", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "mgeeky", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "dloss/python-pentest-tools", "name": "python-pentest-tools", "owner": "dloss", "url": "https://github.com/dloss/python-pentest-tools", "id": "ed3d53e88226", "stars": 2877, "language": null, "description": "Python tools for penetration testers", "type": "tool", "pushedAt": "2025-04-14T18:45:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "dloss", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "dloss", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/744603?v=4", "type": "User" }, { "login": "fgeek", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/286959?v=4", "type": "User" }, { "login": "Luci-d", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55981308?v=4", "type": "User" }, { "login": "phaethon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1088890?v=4", "type": "User" }, { "login": "jnzonzidi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10021767?v=4", "type": "User" }, { "login": "pravinkumarosingh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43314676?v=4", "type": "User" }, { "login": "viren-nadkarni", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5170829?v=4", "type": "User" }, { "login": "rivermont", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25139386?v=4", "type": "User" } ] }, { "repo": "ghostpack/sharpup", "name": "SharpUp", "owner": "GhostPack", "url": "https://github.com/GhostPack/SharpUp", "id": "f511fef48de6", "stars": 1515, "language": "C#", "description": "SharpUp is a C# port of various PowerUp functionality.", "type": "tool", "pushedAt": "2024-02-14T16:38:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Hope Walker", "cardId": "49a0d4dc712d301f", "avatar": "https://avatars.githubusercontent.com/u/62567946?v=4", "login": "IceMoonHSV" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" }, { "name": "Lee Chagolla-Christensen", "cardId": "9438891833870d72", "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "login": "leechristensen" } ], "adoptionOperators": 1, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "IceMoonHSV", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/62567946?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "cnotin", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "djhohnstein", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" }, { "login": "leechristensen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5449193?v=4", "type": "User" }, { "login": "vysec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" } ] }, { "repo": "rootclay/wmihacker", "name": "WMIHACKER", "owner": "rootclay", "url": "https://github.com/rootclay/WMIHACKER", "id": "f5c150b328b5", "stars": 1465, "language": "VBScript", "description": "A Bypass Anti-virus Software Lateral Movement Command Execution Tool", "type": "tool", "pushedAt": "2025-01-20T15:37:28Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "rootclay", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "rootclay", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/29671471?v=4", "type": "User" } ] }, { "repo": "nccgroup/demiguise", "name": "demiguise", "owner": "nccgroup", "url": "https://github.com/nccgroup/demiguise", "id": "2caeae167a6c", "stars": 1428, "language": "Python", "description": "HTA encryption tool for RedTeams", "type": "tool", "pushedAt": "2022-11-09T08:12:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rxwx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" }, { "login": "Bob-Bobsen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66056660?v=4", "type": "User" } ] }, { "repo": "paranoidninja/carboncopy", "name": "CarbonCopy", "owner": "paranoidninja", "url": "https://github.com/paranoidninja/CarbonCopy", "id": "1c090e1fa814", "stars": 1422, "language": "Python", "description": "A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux", "type": "tool", "pushedAt": "2020-10-03T03:23:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "paranoidninja", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "dnet", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" }, { "login": "paranoidninja", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/21009111?v=4", "type": "User" }, { "login": "wikijm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10724809?v=4", "type": "User" } ] }, { "repo": "nccgroup/socksoverrdp", "name": "SocksOverRDP", "owner": "nccgroup", "url": "https://github.com/nccgroup/SocksOverRDP", "id": "6989ba8295b2", "stars": 1290, "language": "C++", "description": "Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop", "type": "tool", "pushedAt": "2022-11-02T18:34:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "earthquake", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/319949?v=4", "type": "User" } ] }, { "repo": "ropnop/go-windapsearch", "name": "go-windapsearch", "owner": "ropnop", "url": "https://github.com/ropnop/go-windapsearch", "id": "076bb2aa7bf2", "stars": 397, "language": "Go", "description": "Utility to enumerate users, groups and computers from a Windows domain through LDAP queries", "type": "tool", "pushedAt": "2021-03-25T16:05:02Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ropnop", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" } ] }, { "repo": "frkngksl/nimexec", "name": "nimexec", "owner": "frkngksl", "url": "https://github.com/frkngksl/NimExec", "stars": 394, "language": "Nim", "description": "Fileless Command Execution for Lateral Movement in Nim", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0bec8c15b8ad", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T11:57:59Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "ropnop/serverless_toolkit", "name": "serverless_toolkit", "owner": "ropnop", "url": "https://github.com/ropnop/serverless_toolkit", "id": "282d91a16ed1", "stars": 390, "language": "JavaScript", "description": "A collection of useful Serverless functions I use when pentesting", "type": "tool", "pushedAt": "2022-12-09T16:56:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ropnop", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "trustedsec/hardcidr", "name": "hardcidr", "owner": "trustedsec", "url": "https://github.com/trustedsec/hardcidr", "id": "6b54258e70dc", "stars": 382, "language": "Shell", "description": "hardCIDR is a Linux Bash script, but also functions under macOS. Your mileage may vary on other distros. The script with no specified options will query ARIN and a pool of BGP route servers. The route", "type": "tool", "pushedAt": "2022-02-04T17:10:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ninewires", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3959047?v=4", "type": "User" }, { "login": "sneakerhax", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8846726?v=4", "type": "User" } ] }, { "repo": "boku7/injectamsibypass", "name": "injectamsibypass", "owner": "boku7", "url": "https://github.com/boku7/injectAmsiBypass", "stars": 381, "language": "C", "description": "Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3a7adc71a502", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:54:57Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "koutto/ioctlbf", "name": "ioctlbf", "owner": "koutto", "url": "https://github.com/koutto/ioctlbf", "id": "1e766809ba19", "stars": 377, "language": "C", "description": "Windows Kernel Drivers fuzzer", "type": "tool", "pushedAt": "2017-03-15T13:37:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Koutto", "cardId": "a2c1c50a17fda9a6", "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "sbousseaden/pcap-attack", "name": "PCAP-ATTACK", "owner": "sbousseaden", "url": "https://github.com/sbousseaden/PCAP-ATTACK", "id": "a562a29baed6", "stars": 375, "language": null, "description": "PCAP Samples for Different Post Exploitation Techniques ", "type": "tool", "pushedAt": "2021-04-29T23:39:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Samir", "cardId": "e4db282b511228b1", "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "sbousseaden", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4", "type": "User" } ] }, { "repo": "noperator/cve-2019-18935", "name": "cve-2019-18935", "owner": "noperator", "url": "https://github.com/noperator/CVE-2019-18935", "stars": 374, "language": "Python", "description": "RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.", "type": "tool", "lanes": [ "2" ], "author": { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec44066a0dd6", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2022-04-14T18:23:38Z", "archived": false, "topContributors": [ { "login": "noperator", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" }, { "login": "mkunz7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5001991?v=4", "type": "User" } ] }, { "repo": "forrest-orr/phantom-dll-hollower-poc", "name": "phantom-dll-hollower-poc", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/phantom-dll-hollower-poc", "stars": 374, "language": "C++", "description": "Phantom DLL hollowing PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5652cf46fa08", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-05-23T19:15:36Z", "archived": false, "topContributors": [ { "login": "forrest-orr", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4", "type": "User" }, { "login": "forrest-re", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31349332?v=4", "type": "User" } ] }, { "repo": "maldev-academy/embedpayloadinpng", "name": "embedpayloadinpng", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/EmbedPayloadInPng", "stars": 371, "language": "C", "description": "Embed a payload inside a PNG file", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9add39a12393", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-10-24T08:30:33Z", "archived": false, "topContributors": [] }, { "repo": "mordavid/bloodhound-mcp-ai", "name": "bloodhound-mcp-ai", "owner": "mordavid", "url": "https://github.com/MorDavid/BloodHound-MCP-AI", "stars": 369, "language": "Python", "description": "BloodHound-MCP-AI is integration that connects BloodHound with AI through Model Context Protocol, allowing security professionals to analyze Active Directory attack paths using natural language instea", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7778a369bb63", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-02T22:21:26Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "hasherezade/module_overloading", "name": "module_overloading", "owner": "hasherezade", "url": "https://github.com/hasherezade/module_overloading", "stars": 367, "language": "C", "description": "A more stealthy variant of \"DLL hollowing\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d768709d5e69", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-08T12:10:18Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "codingo/dnscewl", "name": "DNSCewl", "owner": "codingo", "url": "https://github.com/codingo/DNSCewl", "id": "11c2ad8ff163", "stars": 363, "language": "C++", "description": "A DNS Bruteforcing Wordlist Generator", "type": "tool", "pushedAt": "2023-02-22T01:12:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Luke Stephens", "cardId": "9ac3ddb06c6f3825", "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4", "login": "hakluke" }, { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "codingo", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "hakluke", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4", "type": "User" }, { "login": "six2dez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "zer0h-bb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/77683857?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/copyfail-go", "name": "copyfail-go", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/copyfail-go", "stars": 361, "language": "Assembly", "description": "A Go implementation of copyfail (CVE-2026-31431)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "960dc7b209c7", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-01T03:24:14Z", "archived": false, "topContributors": [ { "login": "kernel-sanders", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" }, { "login": "mosajjal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10158936?v=4", "type": "User" } ] }, { "repo": "soxoj/counter-osint-guide-en", "name": "counter-osint-guide-en", "owner": "soxoj", "url": "https://github.com/soxoj/counter-osint-guide-en", "stars": 357, "language": null, "description": "Comprehensive Counter OSINT and privacy guide (initially for CIS countries)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c0882a6e34a1", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-05-26T13:17:49Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "SOsintOps", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/28706121?v=4", "type": "User" }, { "login": "duk3r4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/137871056?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" } ] }, { "repo": "sw33tlie/sns", "name": "sns", "owner": "sw33tlie", "url": "https://github.com/sw33tLie/sns", "stars": 357, "language": "Go", "description": "IIS shortname scanner written in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sw33tLie", "cardId": "c74674f8d0a8e7cf", "avatar": "https://avatars.githubusercontent.com/u/47645560?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2ed40f39abf5", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2023-03-25T18:14:45Z", "archived": false, "topContributors": [ { "login": "sw33tLie", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/47645560?v=4", "type": "User" }, { "login": "meme-lord", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/17912559?v=4", "type": "User" }, { "login": "tess-ss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65326024?v=4", "type": "User" } ] }, { "repo": "pwnfunction/cve-2021-4034", "name": "cve-2021-4034", "owner": "pwnfunction", "url": "https://github.com/PwnFunction/CVE-2021-4034", "stars": 351, "language": "C", "description": "Proof of concept for pwnkit vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "PwnFunction", "cardId": "561fb0609b29c08d", "avatar": "https://avatars.githubusercontent.com/u/19750782?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c26668ef33c", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-12T19:23:29Z", "archived": false, "topContributors": [ { "login": "PwnFunction", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19750782?v=4", "type": "User" } ] }, { "repo": "nicholasaleks/crackql", "name": "CrackQL", "owner": "nicholasaleks", "url": "https://github.com/nicholasaleks/CrackQL", "id": "5f082af01775", "stars": 348, "language": "Python", "description": "CrackQL is a GraphQL password brute-force and fuzzing utility.", "type": "tool", "pushedAt": "2024-08-03T23:34:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nick Aleks", "cardId": "28d1808f86ede3c0", "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "nicholasaleks", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4", "type": "User" }, { "login": "dolevf", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/5857304?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" }, { "login": "Xplo8E", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55936553?v=4", "type": "User" } ] }, { "repo": "jobertabma/recon.sh", "name": "recon.sh", "owner": "jobertabma", "url": "https://github.com/jobertabma/recon.sh", "stars": 347, "language": "Shell", "description": "A toolset to track and organize output of reconnaissance tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jobert Abma", "cardId": "0d878e2584e64386", "avatar": "https://avatars.githubusercontent.com/u/156693?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "909e8b2d7a98", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2018-01-03T22:44:51Z", "archived": false, "topContributors": [ { "login": "jobertabma", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/156693?v=4", "type": "User" }, { "login": "t94j0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5448134?v=4", "type": "User" } ] }, { "repo": "eversinc33/unkover", "name": "unkover", "owner": "eversinc33", "url": "https://github.com/eversinc33/unKover", "stars": 340, "language": "C++", "description": "Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a8cb36c4f162", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-03-12T08:09:19Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" }, { "login": "not1cyyy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/101048320?v=4", "type": "User" } ] }, { "repo": "trustedsec/artillery", "name": "artillery", "owner": "trustedsec", "url": "https://github.com/trustedsec/artillery", "id": "74c3d1f8a12c", "stars": 340, "language": null, "description": "The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.", "type": "tool", "pushedAt": "2020-09-30T12:44:23Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "katkad", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1788468?v=4", "type": "User" }, { "login": "vaizguy", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2795461?v=4", "type": "User" }, { "login": "dagonis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3951566?v=4", "type": "User" }, { "login": "Cashiuus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2146322?v=4", "type": "User" }, { "login": "JDogHerman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1299282?v=4", "type": "User" }, { "login": "ericl42", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8741574?v=4", "type": "User" }, { "login": "ev0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5706118?v=4", "type": "User" }, { "login": "kas21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/367045?v=4", "type": "User" }, { "login": "tomsteele", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2497381?v=4", "type": "User" } ] }, { "repo": "arizvisa/ida-minsc", "name": "ida-minsc", "owner": "arizvisa", "url": "https://github.com/arizvisa/ida-minsc", "id": "ed216a85bbe6", "stars": 332, "language": "Python", "description": "A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the \"persistence-refactor\" branch, ancient (but stable) work is in \"master\", so... create", "type": "tool", "pushedAt": "2026-06-15T05:07:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ali Rizvi-Santiago", "cardId": "507e20e060bbc5a9", "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "arizvisa", "c": 2129, "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4", "type": "User" } ] }, { "repo": "botherder/kraken", "name": "kraken", "owner": "botherder", "url": "https://github.com/botherder/kraken", "stars": 327, "language": "Go", "description": "Cross-platform Yara scanner written in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "nex", "cardId": "ebbd5cd763363431", "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "982f24597fa2", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2023-02-25T07:17:42Z", "archived": false, "topContributors": [ { "login": "botherder", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4", "type": "User" }, { "login": "hillu", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/173211?v=4", "type": "User" }, { "login": "mrxinu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6706?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/red-team-scripts", "name": "red-team-scripts", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/red-team-scripts", "stars": 326, "language": "Python", "description": "A collection of red teaming and adversary emulation related tools, scripts, techniques, notes, etc", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6fc6e828ed85", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-08T06:11:06Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2023-21752", "name": "cve-2023-21752", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2023-21752", "stars": 325, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ded3f6c962e1", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-01-13T09:01:20Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" }, { "login": "bopin2020", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49940777?v=4", "type": "User" } ] }, { "repo": "xdavidhu/portspider", "name": "portspider", "owner": "xdavidhu", "url": "https://github.com/xdavidhu/portSpider", "stars": 321, "language": "Python", "description": "🕷 A lightning fast multithreaded network scanner framework with modules.", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Hu (xdavidhu)", "cardId": "bb28101bb746b293", "avatar": "https://avatars.githubusercontent.com/u/18151245?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "47373d240f71", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2019-11-03T11:32:47Z", "archived": true, "topContributors": [ { "login": "xdavidhu", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/18151245?v=4", "type": "User" }, { "login": "letsgo00", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/7746853?v=4", "type": "User" }, { "login": "christarazi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3885308?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/sharpdoor", "name": "sharpdoor", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/SharpDoor", "stars": 318, "language": "C#", "description": "SharpDoor is alternative RDPWrap written in C# to allowed multiple RDP (Remote Desktop) sessions by patching termsrv.dll file.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30e0f86cdb98", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-30T16:11:24Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" } ] }, { "repo": "hasherezade/thread_namecalling", "name": "thread_namecalling", "owner": "hasherezade", "url": "https://github.com/hasherezade/thread_namecalling", "stars": 310, "language": "C", "description": "Process Injection using Thread Name", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "83f69e3949a0", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-18T12:40:20Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "mrd0x/pwa-phishing", "name": "PWA-Phishing", "owner": "mrd0x", "url": "https://github.com/mrd0x/PWA-Phishing", "id": "e10632fee0d5", "stars": 305, "language": "HTML", "description": "", "type": "tool", "pushedAt": "2024-06-16T17:47:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "edoverflow/megplus", "name": "megplus", "owner": "EdOverflow", "url": "https://github.com/EdOverflow/megplus", "id": "e5e7f0efd95e", "stars": 304, "language": "Shell", "description": "Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]", "type": "tool", "pushedAt": "2018-10-14T09:37:49Z", "archived": true, "lanes": [ "2" ], "author": { "name": "EdOverflow", "cardId": "5ea61790652f7a1c", "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "EdOverflow", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "type": "User" }, { "login": "eur0pa", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4948454?v=4", "type": "User" }, { "login": "yasinS", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4115778?v=4", "type": "User" }, { "login": "random-robbie", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2022-21971", "name": "cve-2022-21971", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2022-21971", "stars": 302, "language": "Rich Text Format", "description": "PoC for CVE-2022-21971 \"Windows Runtime Remote Code Execution Vulnerability\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3df497e5c4e4", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-26T20:45:19Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "botherder/androidqf", "name": "androidqf", "owner": "botherder", "url": "https://github.com/botherder/androidqf", "stars": 302, "language": "Go", "description": "androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.", "type": "tool", "lanes": [ "2" ], "author": { "name": "nex", "cardId": "ebbd5cd763363431", "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1303799064b2", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-02-04T12:24:26Z", "archived": false, "topContributors": [ { "login": "botherder", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4", "type": "User" }, { "login": "sriegler", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14330130?v=4", "type": "User" } ] }, { "repo": "boku7/injectetwbypass", "name": "injectetwbypass", "owner": "boku7", "url": "https://github.com/boku7/injectEtwBypass", "stars": 300, "language": "C", "description": "CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "438c5efc4f23", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-09-28T19:09:38Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "Sh0ckFR", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10033649?v=4", "type": "User" } ] }, { "repo": "cracked5pider/coffeeldr", "name": "coffeeldr", "owner": "cracked5pider", "url": "https://github.com/Cracked5pider/CoffeeLdr", "stars": 295, "language": "C", "description": "Beacon Object File Loader", "type": "tool", "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e20887dbd4a", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Yoann Dequeker", "cardId": "611896755a737879", "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4", "login": "OtterHacker" } ], "pushedAt": "2023-12-03T18:09:34Z", "archived": true, "topContributors": [ { "login": "Cracked5pider", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" }, { "login": "OtterHacker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112589691?v=4", "type": "User" } ] }, { "repo": "0xpugal/subdomz", "name": "SubDomz", "owner": "0xPugal", "url": "https://github.com/0xPugal/SubDomz", "id": "ada1b69849d0", "stars": 294, "language": "Shell", "description": "An Automated Subdomain Enumeration Tool", "type": "tool", "pushedAt": "2024-10-16T13:01:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Pugalarasan", "cardId": "697fe36354f625da", "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "0xPugal", "c": 167, "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "type": "User" }, { "login": "samogod", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/81412659?v=4", "type": "User" }, { "login": "rajshekaryasani", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/182445334?v=4", "type": "User" } ] }, { "repo": "maldev-academy/remotetlscallbackinjection", "name": "remotetlscallbackinjection", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/RemoteTLSCallbackInjection", "stars": 291, "language": "C", "description": "Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1493ab1dc3f", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-01-21T20:48:26Z", "archived": false, "topContributors": [] }, { "repo": "boku7/hollow", "name": "hollow", "owner": "boku7", "url": "https://github.com/boku7/HOLLOW", "stars": 290, "language": "C", "description": "EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "515b806b119c", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:51:19Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "octoberfest7/dropspawn_bof", "name": "dropspawn_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/DropSpawn_BOF", "stars": 289, "language": "C", "description": "CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fca3abeaac55", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-08T03:50:02Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-action", "name": "nuclei-action", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-action", "stars": 288, "language": "JavaScript", "description": "Vulnerability Scan with Nuclei", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "536606638c61", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" } ], "pushedAt": "2026-06-25T10:13:25Z", "archived": false, "topContributors": [ { "login": "dwisiswant0", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "ghost", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10137?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "hacksysteam/cve-2023-21608", "name": "cve-2023-21608", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/CVE-2023-21608", "stars": 282, "language": "JavaScript", "description": "Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "10a1c07c0264", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-05T12:21:02Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "citizenlab/malware-indicators", "name": "malware-indicators", "owner": "citizenlab", "url": "https://github.com/citizenlab/malware-indicators", "stars": 282, "language": "YARA", "description": "Citizen Lab Malware Reports", "type": "tool", "lanes": [ "2" ], "author": { "name": "The Citizen Lab", "cardId": "6142637c21dfc0ad", "avatar": "https://avatars.githubusercontent.com/u/5658700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "23a44e16686a", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Alexandre Dulaunoy", "cardId": "ce61bec31cf8c835", "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "login": "adulau" } ], "pushedAt": "2020-10-04T15:16:09Z", "archived": false, "topContributors": [ { "login": "Te-k", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/15989628?v=4", "type": "User" }, { "login": "jakubd", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/6005010?v=4", "type": "User" }, { "login": "kkleemola", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1847263?v=4", "type": "User" }, { "login": "adulau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "type": "User" } ] }, { "repo": "aniqfakhrul/sharperner", "name": "sharperner", "owner": "aniqfakhrul", "url": "https://github.com/aniqfakhrul/Sharperner", "stars": 280, "language": "C#", "description": "Simple executable generator with encrypted shellcode.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aniq Fakhrul", "cardId": "4a22913fe2902dfe", "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ae66859bd791", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-03T03:37:50Z", "archived": false, "topContributors": [ { "login": "aniqfakhrul", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4", "type": "User" } ] }, { "repo": "trustedsec/obsidian-vault-structure", "name": "Obsidian-Vault-Structure", "owner": "trustedsec", "url": "https://github.com/trustedsec/Obsidian-Vault-Structure", "id": "2a638cd72304", "stars": 276, "language": null, "description": "", "type": "tool", "pushedAt": "2023-03-08T04:57:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dave Kennedy", "cardId": "0e6eb1847ba677c5", "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "login": "HackingDave" } ], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HackingDave", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60713916?v=4", "type": "User" } ] }, { "repo": "octoberfest7/zip_smuggling", "name": "zip_smuggling", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/zip_smuggling", "id": "86423875ea73", "stars": 274, "language": "Python", "description": "Python3 utility for creating zip files that smuggle additional data for later extraction", "type": "tool", "pushedAt": "2025-05-15T13:53:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Octoberfest7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "carnal0wnage/recon", "name": "recon", "owner": "carnal0wnage", "url": "https://github.com/carnal0wnage/Recon", "stars": 7, "language": "Python", "description": "Bug Hunting Recon Script", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Gates", "cardId": "2c54f9f640a5a08f", "avatar": "https://avatars.githubusercontent.com/u/735360?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f5a205328eeb", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-06-14T15:44:10Z", "archived": false, "topContributors": [] }, { "repo": "galoget/responsivefilemanager-cve-2022-46604", "name": "responsivefilemanager-cve-2022-46604", "owner": "galoget", "url": "https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604", "stars": 7, "language": "Python", "description": "Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Galoget Latorre", "cardId": "38fb4b9abe4642f1", "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e44047b53296", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-09T23:34:28Z", "archived": false, "topContributors": [ { "login": "galoget", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "type": "User" } ] }, { "repo": "ohjeongwook/windowstestingenvironment", "name": "windowstestingenvironment", "owner": "ohjeongwook", "url": "https://github.com/ohjeongwook/WindowsTestingEnvironment", "stars": 7, "language": "PowerShell", "description": "Instructions And Scripts To Setup Windows Malware, Exploit Testing Environment", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeong Wook Oh", "cardId": "3a00d6b9e64d2327", "avatar": "https://avatars.githubusercontent.com/u/356743?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "48346ef51a07", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-30T04:11:26Z", "archived": false, "topContributors": [ { "login": "ohjeongwook", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/356743?v=4", "type": "User" } ] }, { "repo": "xorrior/powerjax", "name": "powerjax", "owner": "xorrior", "url": "https://github.com/xorrior/PowerJax", "stars": 7, "language": "PowerShell", "description": "Shellcode Injection with Powershell", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cafdceec9201", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-08-11T03:18:56Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "yossisassi/zerologon-exploitation-check", "name": "zerologon-exploitation-check", "owner": "yossisassi", "url": "https://github.com/YossiSassi/ZeroLogon-Exploitation-Check", "stars": 7, "language": "PowerShell", "description": "quick'n'dirty automated checks for potential exploitation of CVE-2020-1472 (aka ZeroLogon), using leading artifects in determining an actual exploitation of CVE-2020-1472. requires admin access to the", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e0cad3721f6", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-01-08T12:14:27Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/capybara", "name": "capybara", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/capybara", "stars": 7, "language": "Ruby", "description": "Repository for my talk \"Everything is a C2 if you're brave enough\" featured at Adversary Village DEFCON 29.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da33aa8c4d86", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-04T15:25:55Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "tijme/blackout-reloaded", "name": "blackout-reloaded", "owner": "tijme", "url": "https://github.com/tijme/blackout-reloaded", "stars": 7, "language": "C", "description": "Cobalt Strike BOF to kill any anti-malware protected process using a new signed vulnerable driver.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "020752c5f6e1", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-17T09:13:44Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "niklasb/ub-to-rce", "name": "ub-to-rce", "owner": "niklasb", "url": "https://github.com/niklasb/ub-to-rce", "stars": 7, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Niklas Baumstark", "cardId": "e7e56ae52dd8ba57", "avatar": "https://avatars.githubusercontent.com/u/94819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e60008f0ec00", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-06-14T14:23:11Z", "archived": false, "topContributors": [ { "login": "niklasb", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/94819?v=4", "type": "User" } ] }, { "repo": "todb/offensive-ruby", "name": "offensive-ruby", "owner": "todb", "url": "https://github.com/todb/offensive-ruby", "stars": 7, "language": "Ruby", "description": "The Ruby herein is both practically and aesthetically offensive", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tod Beardsley", "cardId": "f6a300e6bf1ced9d", "avatar": "https://avatars.githubusercontent.com/u/24144?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b183b2eb83b0", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-05-09T05:52:54Z", "archived": false, "topContributors": [ { "login": "todb", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/24144?v=4", "type": "User" } ] }, { "repo": "qtc-de/kutil", "name": "kutil", "owner": "qtc-de", "url": "https://github.com/qtc-de/kutil", "stars": 7, "language": "Python", "description": "A command line utility to work with Kerberos ticket caches (MIT format)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c40ae22d478e", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-08T16:18:10Z", "archived": false, "topContributors": [ { "login": "qtc-de", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" } ] }, { "repo": "wietze/mitre-eu-2020", "name": "mitre-eu-2020", "owner": "wietze", "url": "https://github.com/wietze/mitre-eu-2020", "stars": 6, "language": "HTML", "description": "Slides of my EU MITRE ATT&CK® Community presentation about DLL Hijacking", "type": "tool", "lanes": [ "2" ], "author": { "name": "Wietze Beukema", "cardId": "0fdaafaab7a1ec6b", "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b404fc395d3d", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-10-23T17:27:36Z", "archived": false, "topContributors": [ { "login": "wietze", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2811785?v=4", "type": "User" } ] }, { "repo": "jofpin/filsany", "name": "filsany", "owner": "jofpin", "url": "https://github.com/jofpin/Filsany", "stars": 6, "language": "PHP", "description": "Sanitize Filter Prevention. Cross-site Scriping (XSS)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jose Pino", "cardId": "153075db7f5e0c0e", "avatar": "https://avatars.githubusercontent.com/u/5523369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "23fece210264", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-10-31T18:06:20Z", "archived": false, "topContributors": [ { "login": "Dedal0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5331187?v=4", "type": "User" } ] }, { "repo": "ayantaker/cve-2023-2986", "name": "cve-2023-2986", "owner": "ayantaker", "url": "https://github.com/Ayantaker/CVE-2023-2986", "stars": 6, "language": "PHP", "description": "Proof of Concept for vulnerability CVE-2023-2986 in 'Abandoned Cart Lite for WooCommerce' Plugin in WordPress", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ayan Saha", "cardId": "2865fe2460286a7a", "avatar": "https://avatars.githubusercontent.com/u/38920001?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a2233a0e45d0", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-15T05:37:54Z", "archived": false, "topContributors": [ { "login": "Ayantaker", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/38920001?v=4", "type": "User" } ] }, { "repo": "bitdefender/agent-skill-scanner", "name": "agent-skill-scanner", "owner": "bitdefender", "url": "https://github.com/bitdefender/Agent-Skill-Scanner", "stars": 6, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrei Lutas", "cardId": "3c1817470ea792aa", "avatar": "https://avatars.githubusercontent.com/u/32452258?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0e5450ba790b", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-23T12:03:27Z", "archived": false, "topContributors": [ { "login": "ovardelean", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/204189483?v=4", "type": "User" } ] }, { "repo": "leo4j/invoke-shadowhunter", "name": "invoke-shadowhunter", "owner": "leo4j", "url": "https://github.com/Leo4j/Invoke-ShadowHunter", "stars": 6, "language": "PowerShell", "description": "Automate accounts takeover by abusing GenericWrite/GenericAll rights to add Shadow Credentials", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob", "cardId": "7897768fd3964ede", "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9a3d83af320a", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-20T12:21:59Z", "archived": false, "topContributors": [ { "login": "Leo4j", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/61951374?v=4", "type": "User" } ] }, { "repo": "carlospolop/monitor-backdoor-cloud-functions", "name": "monitor-backdoor-cloud-functions", "owner": "carlospolop", "url": "https://github.com/carlospolop/Monitor-Backdoor-Cloud-Functions", "stars": 6, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1b2442e5b63", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-22T21:26:57Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" } ] }, { "repo": "0sm0s1z/wordpress-comment-overflow", "name": "wordpress-comment-overflow", "owner": "0sm0s1z", "url": "https://github.com/0sm0s1z/WordPress-Comment-Overflow", "stars": 6, "language": "Ruby", "description": "This Metasploit module exploits a XSS vulnerability found in WordPress 4.2, 4.1.2, 4.1.1, and 3.9.3 it leverages the WP Plugin Editor to gain remote code execution.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Toussain", "cardId": "9174f5db04dc7b94", "avatar": "https://avatars.githubusercontent.com/u/11495216?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1a09c6d65627", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-02-16T13:20:26Z", "archived": false, "topContributors": [ { "login": "0sm0s1z", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11495216?v=4", "type": "User" } ] }, { "repo": "ddworken/mitmxss", "name": "mitmxss", "owner": "ddworken", "url": "https://github.com/ddworken/mitmXSS", "stars": 6, "language": "Python", "description": "A XSS scanning script for mitmproxy", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Dworken", "cardId": "c09dd6fa1b9718a6", "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2da6e409b506", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-30T17:33:13Z", "archived": false, "topContributors": [ { "login": "ddworken", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/5304541?v=4", "type": "User" } ] }, { "repo": "jstrosch/malware-signatures", "name": "malware-signatures", "owner": "jstrosch", "url": "https://github.com/jstrosch/malware-signatures", "stars": 6, "language": "YARA", "description": "A collection of various signatures that I have either found or created, useful for malware analysis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Stroschein", "cardId": "ca3f07d87861323c", "avatar": "https://avatars.githubusercontent.com/u/1920756?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b5b79824c61d", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-03-27T01:46:01Z", "archived": false, "topContributors": [] }, { "repo": "saaramar/32c3-tree-pwn500", "name": "32c3-tree-pwn500", "owner": "saaramar", "url": "https://github.com/saaramar/32c3-tree-pwn500", "stars": 6, "language": "Python", "description": "Exploit challenge from 32c3 ctf", "type": "tool", "lanes": [ "2" ], "author": { "name": "Saar Amar", "cardId": "d86b50a17ef7263b", "avatar": "https://avatars.githubusercontent.com/u/22716990?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc578a14f692", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-05T21:38:13Z", "archived": false, "topContributors": [ { "login": "saaramar", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22716990?v=4", "type": "User" } ] }, { "repo": "danmcinerney/basic-xss-spider", "name": "basic-xss-spider", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/basic-xss-spider", "stars": 6, "language": "Python", "description": "sort of functional - abandoned", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "94802d058839", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-06-25T12:33:44Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "jduck/socks_scan", "name": "socks_scan", "owner": "jduck", "url": "https://github.com/jduck/socks_scan", "stars": 5, "language": "C", "description": "Unoriginally named SOCKS proxy scanner from the days of old (2002)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua J. Drake", "cardId": "982fe0a429e328d7", "avatar": "https://avatars.githubusercontent.com/u/479840?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bfd4d868e0cb", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-09-22T22:40:20Z", "archived": false, "topContributors": [ { "login": "jduck", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/479840?v=4", "type": "User" } ] }, { "repo": "actuator/shmoocon-2024", "name": "shmoocon-2024", "owner": "actuator", "url": "https://github.com/actuator/Shmoocon-2024", "stars": 5, "language": null, "description": "Inter-App Collusion: Exploiting the Improper Export of Android Application Components for Privilege Elevation & Credential Theft", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8edd6d9863ed", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-23T23:33:40Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "0xcaretaker/monkey", "name": "monkey", "owner": "0xcaretaker", "url": "https://github.com/0xCaretaker/monkey", "stars": 5, "language": "Shell", "description": "Quick and simple reverse shell payload generator to save time.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Deepak Dhasmana", "cardId": "a4f03925152021cf", "avatar": "https://avatars.githubusercontent.com/u/63348904?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "66dc8e821838", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-19T14:51:11Z", "archived": false, "topContributors": [ { "login": "0xCaretaker", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/63348904?v=4", "type": "User" } ] }, { "repo": "albertzsigovits/malware-exports", "name": "malware-exports", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-exports", "stars": 5, "language": null, "description": "Unique DLL Exports seen in malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3277244a349d", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-11T14:56:23Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "abhisek/container-image-scanner-api", "name": "container-image-scanner-api", "owner": "abhisek", "url": "https://github.com/abhisek/container-image-scanner-api", "stars": 5, "language": "Go", "description": "A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhisek Datta", "cardId": "3979c11d62a6b28f", "avatar": "https://avatars.githubusercontent.com/u/31844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "85e35989fef9", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-05T11:32:19Z", "archived": false, "topContributors": [ { "login": "abhisek", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/31844?v=4", "type": "User" } ] }, { "repo": "yossisassi/protectedfile", "name": "protectedfile", "owner": "yossisassi", "url": "https://github.com/YossiSassi/ProtectedFile", "stars": 5, "language": "PowerShell", "description": "Protect/Unprotect any file (PE files, .ps1, etc.) by compressing & Encrypting content using AES 256 & gzip, and a cipher base64. uses random salt, KDF -> key+IV, and prepends salt to ciphertext. Can b", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6ed2e0c0ec4b", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-15T21:40:39Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-adprincipalkerberostokengroup", "name": "get-adprincipalkerberostokengroup", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-ADPrincipalKerberosTokenGroup", "stars": 5, "language": "PowerShell", "description": "a powershell implementation of PAC enum (similar to getpac.py). does not require privileges. can enum Effective Token (Kerberos group SIDs) for any user", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b45be42464d9", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-01T19:39:05Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/ifoughtthelaw", "name": "ifoughtthelaw", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/ifoughtthelaw", "stars": 5, "language": "Shell", "description": "Repository for \"I Fought The Law and The Law Lost\" talk. Featured on Recon Village @ DEFCON 26, Las Vegas (And many other conferences!)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "332134c8de74", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-08T08:06:05Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "brompwnie/cve-2020-9283", "name": "cve-2020-9283", "owner": "brompwnie", "url": "https://github.com/brompwnie/CVE-2020-9283", "stars": 5, "language": "Go", "description": "Exploit for CVE-2020-9283 based on Go ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e1fdcd098261", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-08T13:16:06Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "brompwnie/cve-2019-1002101-helpers", "name": "cve-2019-1002101-helpers", "owner": "brompwnie", "url": "https://github.com/brompwnie/CVE-2019-1002101-Helpers", "stars": 5, "language": "Shell", "description": "PoC helper scripts and Dockerfile for CVE-2019-1002101", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f37135ddc09d", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-03T17:35:03Z", "archived": false, "topContributors": [ { "login": "brompwnie", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" } ] }, { "repo": "gergelykalman/cve-2023-32422-a-macos-tcc-bypass-in-sqlite", "name": "cve-2023-32422-a-macos-tcc-bypass-in-sqlite", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite", "stars": 5, "language": "Shell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1d8517b9a849", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-15T18:23:41Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "gergelykalman/macos-fifo-kernel-dos", "name": "macos-fifo-kernel-dos", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/macos-fifo-kernel-dos", "stars": 5, "language": "Python", "description": "PoC of a macOS DoS that locks up the kernel", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3449d9b45ef1", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-21T19:17:36Z", "archived": false, "topContributors": [ { "login": "gergelykalman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4", "type": "User" } ] }, { "repo": "rocky/python-filecache", "name": "python-filecache", "owner": "rocky", "url": "https://github.com/rocky/python-filecache", "stars": 5, "language": "Python", "description": "module for Python module for reading and caching lines. This may be useful for example in a debugger where the same lines are shown many times.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cdffef0e9526", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-07-16T20:32:44Z", "archived": false, "topContributors": [ { "login": "rocky", "c": 332, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" }, { "login": "jayvdb", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15092?v=4", "type": "User" }, { "login": "x746e", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108139?v=4", "type": "User" }, { "login": "movermeyer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1459385?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/digispark-attiny85-physical-red-teaming-usb-implant", "name": "digispark-attiny85-physical-red-teaming-usb-implant", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/Digispark-Attiny85-Physical-Red-Teaming-USB-Implant", "stars": 5, "language": null, "description": "Learn how to create Rubber Ducky-style USB implants with the Digispark Attiny85. Step-by-step setup, payload development and troubleshooting.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e20ef4dc7353", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-07T11:05:58Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "myrtus0x0/pastebin-scraping-results", "name": "pastebin-scraping-results", "owner": "myrtus0x0", "url": "https://github.com/myrtus0x0/Pastebin-Scraping-Results", "stars": 5, "language": "Shell", "description": "Collection of pastes that contain artifacts commonly seen in malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pim Trouerbach", "cardId": "9dfd42770310939f", "avatar": "https://avatars.githubusercontent.com/u/48422337?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a1873b64b968", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": null, "topContributors": [] }, { "repo": "ch0pin/cve20210485", "name": "cve20210485", "owner": "ch0pin", "url": "https://github.com/Ch0pin/CVE20210485", "stars": 5, "language": "Java", "description": "CVE-20210-485", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dimitrios Valsamaras", "cardId": "cc8cff1f4fc0f423", "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a1a3c048980b", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-07T18:30:05Z", "archived": false, "topContributors": [ { "login": "Ch0pin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4659186?v=4", "type": "User" } ] }, { "repo": "yoda66/powerbleed", "name": "powerbleed", "owner": "yoda66", "url": "https://github.com/yoda66/PowerBleed", "stars": 5, "language": "PowerShell", "description": "Powerbleed is a powershell module that allows you to check for the OpenSSL heartbeat vulnerability, exploit it and write data to a file if desired. Powerbleed defaults to checking web based SSL/TLS on", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joff Thyer", "cardId": "e0210fdf4f18cb82", "avatar": "https://avatars.githubusercontent.com/u/1332275?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30579b4a177d", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Carlos Perez", "cardId": "04ffb9fbce17a2d6", "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "login": "darkoperator" } ], "pushedAt": "2018-10-03T14:43:37Z", "archived": false, "topContributors": [ { "login": "darkoperator", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/521246?v=4", "type": "User" }, { "login": "yoda66", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1332275?v=4", "type": "User" } ] }, { "repo": "gentilkiwi/kesp32-pn532", "name": "kesp32-pn532", "owner": "gentilkiwi", "url": "https://github.com/gentilkiwi/kesp32-pn532", "stars": 5, "language": "C++", "description": "ESP32-S2 / ESP32-S3 PN532 relay on ESP-NOW", "type": "tool", "lanes": [ "2" ], "author": { "name": "🥝🏳️‍🌈 Benjamin Delpy", "cardId": "f3e89338be6de6f6", "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b7f6692ab0b2", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-13T20:00:04Z", "archived": false, "topContributors": [ { "login": "gentilkiwi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2307945?v=4", "type": "User" } ] }, { "repo": "parzel/xss-test-cases", "name": "xss-test-cases", "owner": "parzel", "url": "https://github.com/parzel/xss-test-cases", "stars": 5, "language": "Hack", "description": "Some special XSS test cases for developing purposes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ab4da6c90b2b", "score": 21, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-08T15:27:10Z", "archived": false, "topContributors": [ { "login": "parzel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "rootm0s/winpwnage", "name": "WinPwnage", "owner": "rootm0s", "url": "https://github.com/rootm0s/WinPwnage", "id": "7f5dc757d5a3", "stars": 2749, "language": "Python", "description": "UAC bypass, Elevate, Persistence methods", "type": "tool", "pushedAt": "2023-02-13T09:43:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "rootm0s", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "rootm0s", "c": 615, "avatar": "https://avatars.githubusercontent.com/u/7784475?v=4", "type": "User" }, { "login": "cclauss", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "AlessandroZ", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/10668373?v=4", "type": "User" }, { "login": "coreb1t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17534023?v=4", "type": "User" }, { "login": "byehack", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26390254?v=4", "type": "User" } ] }, { "repo": "alessandroz/beroot", "name": "BeRoot", "owner": "AlessandroZ", "url": "https://github.com/AlessandroZ/BeRoot", "id": "a0657f02a6cd", "stars": 2611, "language": "Python", "description": "Privilege Escalation Project - Windows / Linux / Mac", "type": "tool", "pushedAt": "2024-10-04T11:54:01Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "AlessandroZ", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "AlessandroZ", "c": 122, "avatar": "https://avatars.githubusercontent.com/u/10668373?v=4", "type": "User" }, { "login": "D3vil0p3r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/83867734?v=4", "type": "User" }, { "login": "jamesgol", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6788517?v=4", "type": "User" }, { "login": "alxchk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/329535?v=4", "type": "User" }, { "login": "brightio", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/65655412?v=4", "type": "User" }, { "login": "eranzim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33493384?v=4", "type": "User" }, { "login": "moshekaplan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/810279?v=4", "type": "User" }, { "login": "RoninNakomoto", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76064954?v=4", "type": "User" }, { "login": "SolomonSklash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43149956?v=4", "type": "User" } ] }, { "repo": "gloxec/crossc2", "name": "CrossC2", "owner": "gloxec", "url": "https://github.com/gloxec/CrossC2", "id": "6ff72c29c0bb", "stars": 2562, "language": "C", "description": "generate CobaltStrike's cross-platform payload", "type": "tool", "pushedAt": "2023-11-20T10:54:46Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "gloxec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "gloxec", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/5158011?v=4", "type": "User" }, { "login": "ScriptIdiot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21979646?v=4", "type": "User" } ] }, { "repo": "bishopfox/cloudfox", "name": "cloudfox", "owner": "BishopFox", "url": "https://github.com/BishopFox/cloudfox", "id": "840c1892415f", "stars": 2527, "language": "Go", "description": "Automating situational awareness for cloud penetration tests.", "type": "tool", "pushedAt": "2026-05-26T14:47:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" }, { "name": "Bastien Faure", "cardId": "c529e3fc123f0f24", "avatar": "https://avatars.githubusercontent.com/u/44814578?v=4", "login": "bishopfaure" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 24, "topContributors": [ { "login": "sethsec-bf", "c": 377, "avatar": "https://avatars.githubusercontent.com/u/46326948?v=4", "type": "User" }, { "login": "carlosvendramini-bf", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/82826147?v=4", "type": "User" }, { "login": "jbarciabf", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/46936335?v=4", "type": "User" }, { "login": "sethsec", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" }, { "login": "edops973", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/120266240?v=4", "type": "User" }, { "login": "fuzzydunlop5", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/5666957?v=4", "type": "User" }, { "login": "TreeGeek32", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/274910923?v=4", "type": "User" }, { "login": "wdahlenburg", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/4451504?v=4", "type": "User" }, { "login": "bishopfaure", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/44814578?v=4", "type": "User" }, { "login": "enzowritescode", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1328683?v=4", "type": "User" }, { "login": "DominicBreuker", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5805095?v=4", "type": "User" }, { "login": "dbravo-bishopfox", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/77294493?v=4", "type": "User" }, { "login": "cclauss", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" }, { "login": "prdngr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35099504?v=4", "type": "User" }, { "login": "motikan2010", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3177297?v=4", "type": "User" }, { "login": "rpunnett-bf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64154490?v=4", "type": "User" }, { "login": "moloch--", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/875022?v=4", "type": "User" }, { "login": "tragulum", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/90983337?v=4", "type": "User" }, { "login": "xntrik", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/678260?v=4", "type": "User" }, { "login": "crahan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/172588?v=4", "type": "User" }, { "login": "JonZeolla", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1385510?v=4", "type": "User" }, { "login": "nishantpurohit04", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116972523?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "testwill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8717479?v=4", "type": "User" } ] }, { "repo": "lgandx/pcredz", "name": "PCredz", "owner": "lgandx", "url": "https://github.com/lgandx/PCredz", "id": "06aa2ddbe947", "stars": 2524, "language": "Python", "description": "This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.", "type": "tool", "pushedAt": "2026-03-02T17:42:24Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "lgandx", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 18, "topContributors": [ { "login": "lgandx", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/383080?v=4", "type": "User" }, { "login": "gwolf", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/27006?v=4", "type": "User" }, { "login": "aN0mad", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/36172640?v=4", "type": "User" }, { "login": "m0nad", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/772792?v=4", "type": "User" }, { "login": "Raizo62", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7449584?v=4", "type": "User" }, { "login": "brannondorsey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3193533?v=4", "type": "User" }, { "login": "PasaEdoardo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/111753639?v=4", "type": "User" }, { "login": "chiehmin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1941281?v=4", "type": "User" }, { "login": "picchioni", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2239079?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "OneLogicalMyth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12527543?v=4", "type": "User" }, { "login": "n0obit4", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41012866?v=4", "type": "User" }, { "login": "qlemaire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29045289?v=4", "type": "User" }, { "login": "SAERXCIT", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78735647?v=4", "type": "User" }, { "login": "Signum21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "nidem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4877511?v=4", "type": "User" }, { "login": "emizzz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26712389?v=4", "type": "User" }, { "login": "yellow-starburst", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39839623?v=4", "type": "User" } ] }, { "repo": "cujanovic/ssrf-testing", "name": "SSRF-Testing", "owner": "cujanovic", "url": "https://github.com/cujanovic/SSRF-Testing", "id": "0036a839e404", "stars": 2509, "language": "Python", "description": "SSRF (Server Side Request Forgery) testing resources", "type": "tool", "pushedAt": "2024-10-12T12:43:21Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "cujanovic", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "cujanovic", "c": 109, "avatar": "https://avatars.githubusercontent.com/u/7038277?v=4", "type": "User" }, { "login": "tarunkant", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20815966?v=4", "type": "User" }, { "login": "cokeBeer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70683161?v=4", "type": "User" } ] }, { "repo": "kpcyrd/sn0int", "name": "sn0int", "owner": "kpcyrd", "url": "https://github.com/kpcyrd/sn0int", "id": "e06b9f9be5f0", "stars": 2486, "language": "Rust", "description": "Semi-automatic OSINT framework and package manager", "type": "tool", "pushedAt": "2026-05-15T15:41:27Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "kpcyrd", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "kpcyrd", "c": 875, "avatar": "https://avatars.githubusercontent.com/u/7763184?v=4", "type": "User" }, { "login": "stoeckmann", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8529893?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "weiznich", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1674512?v=4", "type": "User" }, { "login": "setsuw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/96669655?v=4", "type": "User" }, { "login": "SpriteOvO", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33660554?v=4", "type": "User" }, { "login": "0x011011110", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70764021?v=4", "type": "User" }, { "login": "sebdufourcq", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5192441?v=4", "type": "User" }, { "login": "definitepotato", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55149073?v=4", "type": "User" }, { "login": "hovman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14185113?v=4", "type": "User" }, { "login": "yunginnanet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49010538?v=4", "type": "User" }, { "login": "ysf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34326?v=4", "type": "User" } ] }, { "repo": "datadog/stratus-red-team", "name": "stratus-red-team", "owner": "DataDog", "url": "https://github.com/DataDog/stratus-red-team", "id": "bf4711e5686c", "stars": 2358, "language": "Go", "description": ":cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud", "type": "tool", "pushedAt": "2026-07-10T14:35:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "DataDog", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christophe Tafani-Dereeper", "cardId": "c0dd76f626c45e51", "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "login": "christophetd" }, { "name": "Katie Knowles", "cardId": "17c3904b902c71c0", "avatar": "https://avatars.githubusercontent.com/u/21978811?v=4", "login": "siigil" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 48, "topContributors": [ { "login": "christophetd", "c": 449, "avatar": "https://avatars.githubusercontent.com/u/136675?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 216, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Minosity-VR", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/66471981?v=4", "type": "User" }, { "login": "goreleaserbot", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/29843943?v=4", "type": "User" }, { "login": "gh-worker-campaigns-3e9aa4[bot]", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/244837012?v=4", "type": "Bot" }, { "login": "dd-prapprover[bot]", "c": 13, "avatar": "https://avatars.githubusercontent.com/in/1493831?v=4", "type": "Bot" }, { "login": "dd-octo-sts[bot]", "c": 11, "avatar": "https://avatars.githubusercontent.com/in/1157446?v=4", "type": "Bot" }, { "login": "github-actions[bot]", "c": 11, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "siigil", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/21978811?v=4", "type": "User" }, { "login": "tetrillard-datadog", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/83589789?v=4", "type": "User" }, { "login": "adanalvarez", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6905200?v=4", "type": "User" }, { "login": "jbfeldman-dd", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/215699886?v=4", "type": "User" }, { "login": "mccormickt", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16668493?v=4", "type": "User" }, { "login": "rollwagen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7364201?v=4", "type": "User" }, { "login": "jeremy-lq", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/348434?v=4", "type": "User" }, { "login": "rcobb-scwx", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/39737036?v=4", "type": "User" }, { "login": "vthiery", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/23509436?v=4", "type": "User" }, { "login": "moezein0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/169095174?v=4", "type": "User" }, { "login": "za", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/409455?v=4", "type": "User" }, { "login": "rileydakota", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/73837129?v=4", "type": "User" }, { "login": "mario-areias", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1810284?v=4", "type": "User" }, { "login": "KrisKennawayDD", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/95245117?v=4", "type": "User" }, { "login": "tmendonca28", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17821357?v=4", "type": "User" }, { "login": "xen0ldog", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/97621068?v=4", "type": "User" }, { "login": "ryan-detect-dot-dev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/106877876?v=4", "type": "User" }, { "login": "nix-xin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9593989?v=4", "type": "User" }, { "login": "lsass-exe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/166224067?v=4", "type": "User" }, { "login": "gdraperi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33750242?v=4", "type": "User" }, { "login": "dd-prapprover-prod-77c48c[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/244837012?v=4", "type": "Bot" }, { "login": "dd-octo-sts-26fcfa[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/263762675?v=4", "type": "Bot" } ] }, { "repo": "evilsocket/xray", "name": "xray", "owner": "evilsocket", "url": "https://github.com/evilsocket/xray", "id": "844d71fb0d97", "stars": 2319, "language": "Go", "description": "XRay is a tool for recon, mapping and OSINT gathering from public networks.", "type": "tool", "pushedAt": "2024-07-10T09:43:56Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "evilsocket", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "evilsocket", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/86922?v=4", "type": "User" }, { "login": "radoen", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1493320?v=4", "type": "User" }, { "login": "empijei", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1256049?v=4", "type": "User" }, { "login": "t94j0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5448134?v=4", "type": "User" }, { "login": "ohpe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704560?v=4", "type": "User" }, { "login": "santoru", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32750504?v=4", "type": "User" } ] }, { "repo": "sensepost/ruler", "name": "ruler", "owner": "sensepost", "url": "https://github.com/sensepost/ruler", "id": "625ff4f616bb", "stars": 2312, "language": "Go", "description": "A tool to abuse Exchange services", "type": "tool", "pushedAt": "2024-06-10T11:03:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "login": "staaldraad" }, { "name": "Tom Porter", "cardId": "fec0a09412335bcf", "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "login": "porterhau5" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "staaldraad", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" }, { "login": "rmaksimov", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "porterhau5", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1685907?v=4", "type": "User" }, { "login": "D00Movenok", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44810088?v=4", "type": "User" }, { "login": "singe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "sevagas/macro_pack", "name": "macro_pack", "owner": "sevagas", "url": "https://github.com/sevagas/macro_pack", "id": "0e70c0edb581", "stars": 2306, "language": "Python", "description": "macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. T", "type": "tool", "pushedAt": "2024-08-15T14:21:39Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "sevagas", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "sevagas", "c": 183, "avatar": "https://avatars.githubusercontent.com/u/20759174?v=4", "type": "User" }, { "login": "wh1tenoise", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/41084105?v=4", "type": "User" }, { "login": "Rob2n", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/33053469?v=4", "type": "User" }, { "login": "0ca", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5008707?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" } ] }, { "repo": "samugit83/redamon", "name": "redamon", "owner": "samugit83", "url": "https://github.com/samugit83/redamon", "id": "83df054f5634", "stars": 2195, "language": "Python", "description": "An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.", "type": "tool", "pushedAt": "2026-07-15T18:06:01Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "samugit83", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "samugit83", "c": 214, "avatar": "https://avatars.githubusercontent.com/u/122938099?v=4", "type": "User" }, { "login": "walidfaour", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/35645684?v=4", "type": "User" }, { "login": "L4stPL4Y3R", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/26342194?v=4", "type": "User" }, { "login": "Shafranpackeer", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/73962494?v=4", "type": "User" }, { "login": "Diekgbbtt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90334633?v=4", "type": "User" }, { "login": "ajmeese7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17814535?v=4", "type": "User" }, { "login": "Rukumango", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80437360?v=4", "type": "User" }, { "login": "defektive", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/438084?v=4", "type": "User" }, { "login": "kroryan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69607760?v=4", "type": "User" }, { "login": "vishalsingh-arch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/231242319?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/gokart", "name": "gokart", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/gokart", "id": "bf5c27bd3579", "stars": 2161, "language": "Go", "description": "A static analysis tool for securing Go code", "type": "tool", "pushedAt": "2024-01-23T01:14:55Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "praetorian-thendrickson", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/69640071?v=4", "type": "User" }, { "login": "isp1r0", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/12450030?v=4", "type": "User" }, { "login": "praetorian-harry", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/58926491?v=4", "type": "User" }, { "login": "michaelweber", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "jessesomerville", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/41651270?v=4", "type": "User" }, { "login": "adadkins", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13097640?v=4", "type": "User" }, { "login": "bradlarsen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1483920?v=4", "type": "User" }, { "login": "bpsizemore", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11645898?v=4", "type": "User" }, { "login": "gssbzn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/461027?v=4", "type": "User" }, { "login": "LuckyC4t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40694340?v=4", "type": "User" }, { "login": "trumankain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42022383?v=4", "type": "User" } ] }, { "repo": "initstring/cloud_enum", "name": "cloud_enum", "owner": "initstring", "url": "https://github.com/initstring/cloud_enum", "id": "4b2c0ccf0e4b", "stars": 2117, "language": "Python", "description": "Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.", "type": "tool", "pushedAt": "2026-07-09T03:20:37Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "initstring", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" }, { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "login": "codingo" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "initstring", "c": 92, "avatar": "https://avatars.githubusercontent.com/u/26131150?v=4", "type": "User" }, { "login": "sg3-141-592", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5122866?v=4", "type": "User" }, { "login": "t1826749", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/82606995?v=4", "type": "User" }, { "login": "six2dez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "bryanmcnulty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/99415703?v=4", "type": "User" }, { "login": "davidmcduffie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/103285734?v=4", "type": "User" }, { "login": "gpxlnx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4480415?v=4", "type": "User" }, { "login": "JamesConlan96", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10931523?v=4", "type": "User" }, { "login": "Luesewr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78808564?v=4", "type": "User" }, { "login": "codingo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "N7WEra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59871507?v=4", "type": "User" }, { "login": "nalauder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18389407?v=4", "type": "User" }, { "login": "OrDuan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5006049?v=4", "type": "User" }, { "login": "ShiftLefter", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91866613?v=4", "type": "User" }, { "login": "Signum21", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22285224?v=4", "type": "User" }, { "login": "octaviovg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33030546?v=4", "type": "User" } ] }, { "repo": "phra/pezor", "name": "PEzor", "owner": "phra", "url": "https://github.com/phra/PEzor", "id": "fc0f3566b850", "stars": 2115, "language": "C", "description": "Open-Source Shellcode & PE Packer", "type": "tool", "pushedAt": "2024-02-03T19:11:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "phra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "phra", "c": 131, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" }, { "login": "A32AN", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64775903?v=4", "type": "User" }, { "login": "t0-n1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52384994?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/sharpshooter", "name": "SharpShooter", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/SharpShooter", "id": "77c8e37622e5", "stars": 1986, "language": "VBA", "description": "Payload Generation Framework", "type": "tool", "pushedAt": "2024-08-21T12:09:54Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "mdsecactivebreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mdsec", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2891056?v=4", "type": "User" }, { "login": "dmchell", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9010884?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "dumb-questions", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12750475?v=4", "type": "User" } ] }, { "repo": "jondonas/linux-exploit-suggester-2", "name": "linux-exploit-suggester-2", "owner": "jondonas", "url": "https://github.com/jondonas/linux-exploit-suggester-2", "id": "9f213a7db18a", "stars": 1976, "language": "Perl", "description": "Next-Generation Linux Kernel Exploit Suggester", "type": "tool", "pushedAt": "2023-01-28T05:01:23Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "jondonas", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jondonas", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/11153553?v=4", "type": "User" } ] }, { "repo": "d35m0nd142/lfisuite", "name": "LFISuite", "owner": "D35m0nd142", "url": "https://github.com/D35m0nd142/LFISuite", "id": "a53d644a12d0", "stars": 1956, "language": "Python", "description": "Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner ", "type": "tool", "pushedAt": "2022-04-13T04:04:36Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "D35m0nd142", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "D35m0nd142", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/11485412?v=4", "type": "User" } ] }, { "repo": "cytopia/pwncat", "name": "pwncat", "owner": "cytopia", "url": "https://github.com/cytopia/pwncat", "id": "57e1c9cd040b", "stars": 1950, "language": "Shell", "description": "pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)", "type": "tool", "pushedAt": "2022-09-23T17:14:02Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "cytopia", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "cytopia", "c": 529, "avatar": "https://avatars.githubusercontent.com/u/12533999?v=4", "type": "User" }, { "login": "dyrtool", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/65508583?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "StanlsSlav", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65411828?v=4", "type": "User" } ] }, { "repo": "sense-of-security/adrecon", "name": "ADRecon", "owner": "sense-of-security", "url": "https://github.com/sense-of-security/ADRecon", "id": "bc661909604b", "stars": 1923, "language": "HTML", "description": "ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment. ", "type": "tool", "pushedAt": "2020-06-15T05:23:14Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sense-of-security", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "prashant3535", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/6894611?v=4", "type": "User" }, { "login": "arcayr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11192354?v=4", "type": "User" }, { "login": "merati", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1893127?v=4", "type": "User" } ] }, { "repo": "netspi/powerhuntshares", "name": "PowerHuntShares", "owner": "NetSPI", "url": "https://github.com/NetSPI/PowerHuntShares", "id": "14e9681a56cf", "stars": 1035, "language": "PowerShell", "description": "PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.", "type": "tool", "pushedAt": "2025-10-15T11:53:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Spencer Alessi", "cardId": "eae812c5a3f7c337", "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4", "login": "techspence" } ], "adoptionOperators": 1, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "nullbind", "c": 353, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" }, { "login": "A3-N", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80641430?v=4", "type": "User" }, { "login": "rkuhn-drivebyte", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135691446?v=4", "type": "User" }, { "login": "Shr1mpOG", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62353639?v=4", "type": "User" }, { "login": "Maple-Gray-NS", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/115023838?v=4", "type": "User" }, { "login": "j4w", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12706559?v=4", "type": "User" }, { "login": "techspence", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7014376?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/cactustorch", "name": "CACTUSTORCH", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/CACTUSTORCH", "id": "6bee06599154", "stars": 1019, "language": "Visual Basic", "description": "CACTUSTORCH: Payload Generation for Adversary Simulations", "type": "tool", "pushedAt": "2018-07-03T06:47:36Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" } ], "adoptionOperators": 1, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "vysec", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" }, { "login": "Meatballs1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" } ] }, { "repo": "redcursorsecurityconsulting/pplkiller", "name": "PPLKiller", "owner": "RedCursorSecurityConsulting", "url": "https://github.com/RedCursorSecurityConsulting/PPLKiller", "id": "7f0adcad345e", "stars": 1000, "language": "C++", "description": "Tool to bypass LSA Protection (aka Protected Process Light)", "type": "tool", "pushedAt": "2022-12-04T23:38:31Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "RedCursorSecurityConsulting", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "RedCursorSecurityConsulting", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/61265565?v=4", "type": "User" }, { "login": "Acebond", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6915160?v=4", "type": "User" }, { "login": "Iorpim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22481687?v=4", "type": "User" }, { "login": "wizzard-lizzard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45213416?v=4", "type": "User" }, { "login": "kauppine", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24810630?v=4", "type": "User" } ] }, { "repo": "nccgroup/fuzzowski", "name": "fuzzowski", "owner": "nccgroup", "url": "https://github.com/nccgroup/fuzzowski", "id": "3843be05a08b", "stars": 793, "language": "Python", "description": " the Network Protocol Fuzzer that we will want to use.", "type": "tool", "pushedAt": "2024-01-29T05:48:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "gry", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/3475654?v=4", "type": "User" }, { "login": "1modm", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4355335?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/portbender", "name": "PortBender", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/PortBender", "id": "dc74c898a533", "stars": 785, "language": "C", "description": "TCP Port Redirection Utility", "type": "tool", "pushedAt": "2023-01-31T09:44:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 1, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "edoverflow/contact.sh", "name": "contact.sh", "owner": "edoverflow", "url": "https://github.com/EdOverflow/contact.sh", "stars": 268, "language": "Shell", "description": "An OSINT tool to find contacts in order to report security vulnerabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "EdOverflow", "cardId": "5ea61790652f7a1c", "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "20c68beadcc4", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2020-01-27T13:38:08Z", "archived": false, "topContributors": [ { "login": "EdOverflow", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "type": "User" }, { "login": "jakewarren", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6472686?v=4", "type": "User" }, { "login": "0xmilan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9085465?v=4", "type": "User" }, { "login": "BeanBagKing", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5495515?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2025-48799", "name": "cve-2025-48799", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2025-48799", "stars": 268, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e7e2849d280", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-08T19:35:55Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "specterops/tierzerotable", "name": "TierZeroTable", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/TierZeroTable", "id": "bd744a6fdc02", "stars": 268, "language": "HTML", "description": "Table of AD and Azure assets and whether they belong to Tier Zero", "type": "tool", "pushedAt": "2026-03-02T18:38:46Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "JonasBK", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "sludgework", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/80924384?v=4", "type": "User" }, { "login": "koolhand", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3262046?v=4", "type": "User" }, { "login": "themightyshiv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2651222?v=4", "type": "User" }, { "login": "chryzsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" } ] }, { "repo": "mordavid/donpwner", "name": "donpwner", "owner": "mordavid", "url": "https://github.com/MorDavid/DonPwner", "stars": 267, "language": "Python", "description": "Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "95a720f84961", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-03T06:04:23Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "hasherezade/waiting_thread_hijacking", "name": "waiting_thread_hijacking", "owner": "hasherezade", "url": "https://github.com/hasherezade/waiting_thread_hijacking", "stars": 265, "language": "C", "description": "Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1130c0e35267", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-31T13:32:55Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "bohops/wsman-winrm", "name": "wsman-winrm", "owner": "bohops", "url": "https://github.com/bohops/WSMan-WinRM", "stars": 262, "language": "C++", "description": "A collection of proof-of-concept source code and scripts for executing remote commands over WinRM using the WSMan.Automation COM object", "type": "tool", "lanes": [ "2" ], "author": { "name": "bohops", "cardId": "e2182aefda331dc9", "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb5b9347d0c2", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-12T16:49:01Z", "archived": false, "topContributors": [ { "login": "bohops", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/21028609?v=4", "type": "User" } ] }, { "repo": "maldev-academy/christmas", "name": "christmas", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/Christmas", "stars": 259, "language": "C", "description": "PoC demonstrating a multi process injection chain aimed at remotely executing shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f52ba2d0f50", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [ { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "login": "mrd0x" } ], "pushedAt": "2024-01-21T09:54:15Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/payload-download-cradles", "name": "payload-download-cradles", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Payload-Download-Cradles", "stars": 258, "language": "PowerShell", "description": "This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d02bee5607e5", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-07T07:20:36Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/create-thread-shellcode-fetcher", "name": "create-thread-shellcode-fetcher", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Create-Thread-Shellcode-Fetcher", "stars": 257, "language": "C++", "description": "This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and download and execute your C2-shellcode which is hosted on your (C2)", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dec6f95cd770", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-25T02:48:55Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "nul0x4c/hellshell", "name": "hellshell", "owner": "nul0x4c", "url": "https://github.com/NUL0x4C/HellShell", "stars": 256, "language": "C", "description": "transform your payload into ipv4/ipv6/mac arrays ", "type": "tool", "lanes": [ "2" ], "author": { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88dc691c2d05", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2022-08-18T05:34:38Z", "archived": false, "topContributors": [] }, { "repo": "alanvivona/pwnshop", "name": "pwnshop", "owner": "alanvivona", "url": "https://github.com/alanvivona/pwnshop", "stars": 256, "language": "Python", "description": "Exploit Development, Reverse Engineering & Cryptography", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alan Vivona", "cardId": "e3e70d5f69d63658", "avatar": "https://avatars.githubusercontent.com/u/5595636?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f07782f33bfb", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-29T18:46:31Z", "archived": false, "topContributors": [ { "login": "alanvivona", "c": 235, "avatar": "https://avatars.githubusercontent.com/u/5595636?v=4", "type": "User" } ] }, { "repo": "joasasantos/offensive-ai-agent-prompts", "name": "offensive-ai-agent-prompts", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Offensive-AI-Agent-Prompts", "stars": 253, "language": null, "description": "Prompts for performing tests on your Kali Linux using Gemini-cli, ChatGPT, DeepSeek, CursorAI, Claude Code, and Copilot.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d396326f115b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-20T20:03:28Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "1n3/massbleed", "name": "massbleed", "owner": "1n3", "url": "https://github.com/1N3/MassBleed", "stars": 248, "language": "Shell", "description": "MassBleed SSL Vulnerability Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8b95519d8d8", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2020-04-18T22:40:21Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "alanyee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1873994?v=4", "type": "User" }, { "login": "AlekKras", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21290310?v=4", "type": "User" } ] }, { "repo": "trustedsec/the_shelf", "name": "The_Shelf", "owner": "trustedsec", "url": "https://github.com/trustedsec/The_Shelf", "id": "5139a22e720e", "stars": 248, "language": "Python", "description": "Retired TrustedSec Capabilities", "type": "tool", "pushedAt": "2026-01-05T21:01:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" }, { "name": "Justin Elze", "cardId": "bc6b89856af87139", "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "login": "HackingLZ" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "freefirex", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "bandrel", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "HackingLZ", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3459847?v=4", "type": "User" } ] }, { "repo": "codingo/dorky", "name": "dorky", "owner": "codingo", "url": "https://github.com/codingo/dorky", "stars": 247, "language": "Go", "description": "A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0e8688f2fe82", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 5, "contributors": [], "pushedAt": "2023-10-20T05:39:19Z", "archived": false, "topContributors": [ { "login": "codingo", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "prodigysml", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16996819?v=4", "type": "User" }, { "login": "ndejong", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/210474?v=4", "type": "User" }, { "login": "6mile", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7798480?v=4", "type": "User" }, { "login": "f3rn0s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1351279?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2023-36874", "name": "cve-2023-36874", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2023-36874", "stars": 243, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec842fbf014b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-23T16:46:53Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "joasasantos/shadowphish", "name": "shadowphish", "owner": "joasasantos", "url": "https://github.com/JoasASantos/ShadowPhish", "stars": 243, "language": "Python", "description": "ShadowPhish is an advanced APT awareness toolkit designed to simulate real-world phishing, malware delivery, deepfakes, smishing/vishing, and command & control attacks through an intuitive graphical i", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5db8b9eb2aa9", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-18T20:08:34Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "cracked5pider/earlycascade-injection", "name": "earlycascade-injection", "owner": "cracked5pider", "url": "https://github.com/Cracked5pider/earlycascade-injection", "stars": 241, "language": "C++", "description": "early cascade injection PoC based on Outflanks blog post", "type": "tool", "lanes": [ "2" ], "author": { "name": "5pider", "cardId": "d5386f5364c3f692", "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9ca0caea195", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-07T21:09:25Z", "archived": true, "topContributors": [ { "login": "Cracked5pider", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51360176?v=4", "type": "User" } ] }, { "repo": "avlidienbrunn/archivealchemist", "name": "archivealchemist", "owner": "avlidienbrunn", "url": "https://github.com/avlidienbrunn/archivealchemist", "id": "1f05b436e2e2", "stars": 237, "language": "Python", "description": "Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.", "type": "tool", "pushedAt": "2025-07-24T17:31:52Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mathias Karlsson", "cardId": "64fc8c15019d3c91", "avatar": "https://avatars.githubusercontent.com/u/1272648?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "avlidienbrunn", "c": 64, "avatar": "https://avatars.githubusercontent.com/u/1272648?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2021-24086", "name": "cve-2021-24086", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2021-24086", "stars": 236, "language": "Python", "description": "Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4820673ee59c", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-04-15T12:46:54Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "trustedsec/specula", "name": "specula", "owner": "trustedsec", "url": "https://github.com/trustedsec/specula", "id": "019cf808b6ef", "stars": 236, "language": "Python", "description": "", "type": "tool", "pushedAt": "2025-06-10T09:57:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "login": "api0cradle" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "freefirex", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" }, { "login": "api0cradle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" } ] }, { "repo": "octoberfest7/dns_tunneling", "name": "dns_tunneling", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/DNS_Tunneling", "stars": 233, "language": "Python", "description": "DNS Tunneling using powershell to download and execute a payload. Works in CLM.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09c0a412bee8", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-24T17:27:15Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "forrest-orr/artifacts-kit", "name": "artifacts-kit", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/artifacts-kit", "stars": 232, "language": "C++", "description": "Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "53b47d25dfbf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-18T03:24:14Z", "archived": false, "topContributors": [ { "login": "forrest-orr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4", "type": "User" } ] }, { "repo": "hasherezade/chimera_pe", "name": "chimera_pe", "owner": "hasherezade", "url": "https://github.com/hasherezade/chimera_pe", "stars": 230, "language": "C", "description": "ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports payload-side", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "35da833aba78", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-22T15:23:36Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "zseano/js-scan", "name": "js-scan", "owner": "zseano", "url": "https://github.com/zseano/JS-Scan", "stars": 229, "language": "CSS", "description": "a .js scanner, built in php. designed to scrape urls and other info", "type": "tool", "lanes": [ "2" ], "author": { "name": "zseano", "cardId": "c6be6c642ae6633a", "avatar": "https://avatars.githubusercontent.com/u/13306829?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ce7a69024f0", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Tom Hudson", "cardId": "e382ac94be72cb05", "avatar": "https://avatars.githubusercontent.com/u/58276?v=4", "login": "tomnomnom" } ], "pushedAt": "2017-08-22T16:07:06Z", "archived": false, "topContributors": [ { "login": "zseano", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/13306829?v=4", "type": "User" }, { "login": "tomnomnom", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58276?v=4", "type": "User" } ] }, { "repo": "hasherezade/persistence_demos", "name": "persistence_demos", "owner": "hasherezade", "url": "https://github.com/hasherezade/persistence_demos", "stars": 228, "language": "C++", "description": "Demos of various (also non standard) persistence methods used by malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "14ef9b04be27", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-05T17:01:14Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "raskolnikov90/beatrice.py", "name": "beatrice.py", "owner": "raskolnikov90", "url": "https://github.com/raskolnikov90/Beatrice.py", "stars": 228, "language": "Python", "description": "Modify machine code in binaries with alternative x64 assembly opcodes for AV evasion", "type": "tool", "lanes": [ "2" ], "author": { "name": "LainKusanagi", "cardId": "0b8f90ebec1aef9e", "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "96414211b722", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-07T17:27:29Z", "archived": false, "topContributors": [ { "login": "raskolnikov90", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2019-9810", "name": "cve-2019-9810", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2019-9810", "stars": 228, "language": "JavaScript", "description": "Exploit for CVE-2019-9810 Firefox on Windows 64-bit.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "34081cb22883", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-28T18:25:10Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "ropnop/go-clr", "name": "go-clr", "owner": "ropnop", "url": "https://github.com/ropnop/go-clr", "stars": 228, "language": "Go", "description": "A PoC package for hosting the CLR and executing .NET from Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e0240e992bbe", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-11-10T23:24:38Z", "archived": false, "topContributors": [ { "login": "ropnop", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" }, { "login": "ayoul3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1757711?v=4", "type": "User" } ] }, { "repo": "koutto/web-brutator", "name": "web-brutator", "owner": "koutto", "url": "https://github.com/koutto/web-brutator", "id": "d4d142a930e8", "stars": 228, "language": "Python", "description": "Fast Modular Web Interfaces Bruteforcer", "type": "tool", "pushedAt": "2021-11-16T14:31:37Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Koutto", "cardId": "a2c1c50a17fda9a6", "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "koutto", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4", "type": "User" }, { "login": "jok3r-framework", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/59515989?v=4", "type": "User" } ] }, { "repo": "t3l3machus/pentest-pivoting", "name": "pentest-pivoting", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/pentest-pivoting", "stars": 227, "language": null, "description": "A compact guide to network pivoting for penetration testings / CTF challenges.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "294b01eebf3a", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-19T04:04:35Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2021-28476", "name": "cve-2021-28476", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2021-28476", "stars": 226, "language": "C", "description": "PoC for CVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch.sys.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d9cc89e09653", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-01T15:08:23Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "liveoverflow/pwnedit", "name": "pwnedit", "owner": "liveoverflow", "url": "https://github.com/LiveOverflow/pwnedit", "stars": 225, "language": "C", "description": "CVE-2021-3156 - Sudo Baron Samedit", "type": "tool", "lanes": [ "2" ], "author": { "name": "LiveOverflow 🔴", "cardId": "b61c535e38df6b14", "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "abd96d717e77", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-12T19:33:07Z", "archived": false, "topContributors": [ { "login": "LiveOverflow", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4", "type": "User" } ] }, { "repo": "ralphte/build_a_phish", "name": "build_a_phish", "owner": "ralphte", "url": "https://github.com/ralphte/build_a_phish", "id": "021ab366ea37", "stars": 223, "language": "Jinja", "description": "Ansible playbook to deploy a phishing engagement in the cloud.", "type": "tool", "pushedAt": "2022-05-19T00:40:05Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Ralph May", "cardId": "37d8b2c06040cdb8", "avatar": "https://avatars.githubusercontent.com/u/2996680?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ralphte", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2996680?v=4", "type": "User" }, { "login": "wikijm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10724809?v=4", "type": "User" } ] }, { "repo": "davidbombal/ssh_bruteforcing", "name": "ssh_bruteforcing", "owner": "davidbombal", "url": "https://github.com/davidbombal/ssh_bruteforcing", "stars": 222, "language": "Python", "description": "Simple Python SSH Brute Forcing (Credential Stuffing)", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Bombal", "cardId": "3000040a5bc9e9ef", "avatar": "https://avatars.githubusercontent.com/u/22679022?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4221bb7b0195", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-12-09T11:03:26Z", "archived": false, "topContributors": [ { "login": "davidbombal", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/22679022?v=4", "type": "User" } ] }, { "repo": "epi052/feroxfuzz", "name": "feroxfuzz", "owner": "epi052", "url": "https://github.com/epi052/feroxfuzz", "id": "ae2f9b44ed59", "stars": 222, "language": "Rust", "description": "A structure-aware HTTP fuzzing library", "type": "tool", "pushedAt": "2026-01-12T23:42:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "epi052", "c": 215, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" }, { "login": "allcontributors[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/23186?v=4", "type": "Bot" }, { "login": "andreademurtas", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56048157?v=4", "type": "User" }, { "login": "mgr0dzicki", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29335183?v=4", "type": "User" } ] }, { "repo": "boku7/patchwerk", "name": "patchwerk", "owner": "boku7", "url": "https://github.com/boku7/patchwerk", "stars": 219, "language": "C", "description": "BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "db8b4eeb949b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-06T23:02:34Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "wh1t3rh1n0/pentest-scripts", "name": "pentest-scripts", "owner": "wh1t3rh1n0", "url": "https://github.com/Wh1t3Rh1n0/pentest-scripts", "stars": 219, "language": "Shell", "description": "Miscellaneous scripts for pentesting", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8ff435b4e31b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-22T15:55:50Z", "archived": false, "topContributors": [ { "login": "Wh1t3Rh1n0", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4", "type": "User" } ] }, { "repo": "tenebrae93/offensivesecurity", "name": "offensivesecurity", "owner": "tenebrae93", "url": "https://github.com/TeneBrae93/offensivesecurity", "stars": 216, "language": "Python", "description": "Scripts for offensive security", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tyler Ramsbey", "cardId": "5ccc8a85d47160b1", "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6bc6e8d55674", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-13T16:23:09Z", "archived": false, "topContributors": [ { "login": "TeneBrae93", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4", "type": "User" } ] }, { "repo": "3lp4tr0n/remotemonologue", "name": "remotemonologue", "owner": "3lp4tr0n", "url": "https://github.com/3lp4tr0n/RemoteMonologue", "stars": 215, "language": "Python", "description": "Weaponizing DCOM for NTLM Authentication Coercions", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Oliveau", "cardId": "20c11d79521effac", "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4b57fff3c48d", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-04T22:55:48Z", "archived": false, "topContributors": [ { "login": "3lp4tr0n", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4", "type": "User" } ] }, { "repo": "rootkovska/codehash.db", "name": "codehash.db", "owner": "rootkovska", "url": "https://github.com/rootkovska/codehash.db", "stars": 215, "language": "Standard ML", "description": "A public database for software and firmware hashes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joanna Rutkowska", "cardId": "5ed8e3fc337c433b", "avatar": "https://avatars.githubusercontent.com/u/10212863?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6ed3dd0b69cf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2016-11-12T17:21:33Z", "archived": false, "topContributors": [ { "login": "rootkovska", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/10212863?v=4", "type": "User" }, { "login": "ypid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1301158?v=4", "type": "User" } ] }, { "repo": "4osp3l/phone", "name": "phone", "owner": "4osp3l", "url": "https://github.com/4osp3l/Phone", "stars": 214, "language": "Python", "description": "Phone: A Mobile Phone Forensic Framework ( Android )", "type": "tool", "lanes": [ "2" ], "author": { "name": "4osp3l", "cardId": "6612479a39124d6e", "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9265ed430570", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-22T10:34:28Z", "archived": false, "topContributors": [ { "login": "4osp3l", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4", "type": "User" } ] }, { "repo": "taksec/prompt-injection-everywhere", "name": "prompt-injection-everywhere", "owner": "taksec", "url": "https://github.com/TakSec/Prompt-Injection-Everywhere", "stars": 214, "language": null, "description": "Prompt Injections Everywhere", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mike Takahashi", "cardId": "6b4cebd7323e9607", "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3eae3317f8eb", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-02T16:42:08Z", "archived": false, "topContributors": [ { "login": "TakSec", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4", "type": "User" } ] }, { "repo": "codingo/crithit", "name": "crithit", "owner": "codingo", "url": "https://github.com/codingo/crithit", "id": "b228163f4402", "stars": 213, "language": "Makefile", "description": "Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.", "type": "tool", "pushedAt": "2020-03-31T01:32:00Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "codingo", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" }, { "login": "0xatul", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/52250292?v=4", "type": "User" }, { "login": "vortexau", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/859420?v=4", "type": "User" } ] }, { "repo": "repnz/autochk-rootkit", "name": "autochk-rootkit", "owner": "repnz", "url": "https://github.com/repnz/autochk-rootkit", "stars": 212, "language": "C", "description": "Reverse engineered source code of the autochk rootkit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "76a11c9b5be0", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-11-01T14:02:27Z", "archived": false, "topContributors": [ { "login": "repnz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "liveoverflow/lo_nintendoswitch", "name": "lo_nintendoswitch", "owner": "liveoverflow", "url": "https://github.com/LiveOverflow/lo_nintendoswitch", "stars": 212, "language": "HTML", "description": "Some of my PoC stuff for the Nintendo Switch", "type": "tool", "lanes": [ "2" ], "author": { "name": "LiveOverflow 🔴", "cardId": "b61c535e38df6b14", "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3e0a6a5044cf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-04-06T23:55:28Z", "archived": false, "topContributors": [ { "login": "LiveOverflow", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4", "type": "User" } ] }, { "repo": "taviso/cefdebug", "name": "cefdebug", "owner": "taviso", "url": "https://github.com/taviso/cefdebug", "stars": 209, "language": "C", "description": "Minimal code to connect to a CEF debugger.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tavis Ormandy", "cardId": "f8252c7b6035a712", "avatar": "https://avatars.githubusercontent.com/u/123814?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3dbbf0eac899", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-10T23:32:48Z", "archived": false, "topContributors": [ { "login": "taviso", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/123814?v=4", "type": "User" } ] }, { "repo": "octoberfest7/cve-2023-36874_bof", "name": "cve-2023-36874_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/CVE-2023-36874_BOF", "stars": 207, "language": "C++", "description": "Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1a33a31cb709", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-25T00:30:01Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "trustedsec/seeyoucm-thief", "name": "SeeYouCM-Thief", "owner": "trustedsec", "url": "https://github.com/trustedsec/SeeYouCM-Thief", "id": "ac45a60c49f5", "stars": 205, "language": "Python", "description": "", "type": "tool", "pushedAt": "2026-06-12T17:28:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Justin Bollinger", "cardId": "328d351b3b8e6f21", "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "login": "bandrel" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "bandrel", "c": 127, "avatar": "https://avatars.githubusercontent.com/u/3598052?v=4", "type": "User" }, { "login": "JaredStemper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31346981?v=4", "type": "User" } ] }, { "repo": "trustedsec/ditexplorer", "name": "DitExplorer", "owner": "trustedsec", "url": "https://github.com/trustedsec/DitExplorer", "id": "979e03e395ef", "stars": 205, "language": "C#", "description": "Tool for viewing NTDS.dit", "type": "tool", "pushedAt": "2025-03-14T13:02:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "codewhisperer84", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12244296?v=4", "type": "User" } ] }, { "repo": "shuvonsec/public-skills-builder", "name": "public-skills-builder", "owner": "shuvonsec", "url": "https://github.com/shuvonsec/public-skills-builder", "stars": 202, "language": "Python", "description": "Generate Claude Code bug bounty skills from public HackerOne reports and GitHub writeups — 18 vuln classes, no private reports needed", "type": "tool", "lanes": [ "2" ], "author": { "name": "Md Shariar Shanaz Shuvon", "cardId": "6cf9e09eb4b1508c", "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88fdcec46595", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-12T19:46:19Z", "archived": false, "topContributors": [ { "login": "shuvonsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4", "type": "User" } ] }, { "repo": "specterops/bloodhoundquerylibrary", "name": "BloodHoundQueryLibrary", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/BloodHoundQueryLibrary", "id": "3d23a5066bdb", "stars": 200, "language": "Python", "description": "A community-driven collection of BloodHound queries ", "type": "tool", "pushedAt": "2026-06-09T08:36:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Martin Sohn Christensen", "cardId": "7cbe972d129e8346", "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "login": "martinsohn" }, { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "martinsohn", "c": 143, "avatar": "https://avatars.githubusercontent.com/u/2473497?v=4", "type": "User" }, { "login": "d3vzer0", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/34250156?v=4", "type": "User" }, { "login": "5tuk0v", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90915844?v=4", "type": "User" }, { "login": "auk0x01", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75381620?v=4", "type": "User" }, { "login": "JonasBK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "LuemmelSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58529760?v=4", "type": "User" }, { "login": "chryzsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" } ] }, { "repo": "octoberfest7/secure_stager", "name": "secure_stager", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/Secure_Stager", "stars": 195, "language": "C", "description": "An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f8edb319d1c", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-11-27T14:49:42Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "realalexandergeorgiev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14885291?v=4", "type": "User" }, { "login": "GeneralBison", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2755919?v=4", "type": "User" } ] }, { "repo": "shmilylty/cve-2021-22005-exp", "name": "cve-2021-22005-exp", "owner": "shmilylty", "url": "https://github.com/shmilylty/cve-2021-22005-exp", "stars": 194, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jing Ling", "cardId": "45b922d85b226ff4", "avatar": "https://avatars.githubusercontent.com/u/24275308?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54c27ab1bfa2", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-22T10:32:37Z", "archived": false, "topContributors": [ { "login": "shmilylty", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/24275308?v=4", "type": "User" } ] }, { "repo": "0xhjk/totalpass", "name": "totalpass", "owner": "0xhjk", "url": "https://github.com/0xHJK/TotalPass", "stars": 194, "language": "Python", "description": "Default password scanner. 默认密码扫描器", "type": "tool", "lanes": [ "2" ], "author": { "name": "HJK", "cardId": "52bdd50185c3c95f", "avatar": "https://avatars.githubusercontent.com/u/8033563?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7a747c563d87", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-04-27T03:44:27Z", "archived": false, "topContributors": [ { "login": "0xHJK", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/8033563?v=4", "type": "User" } ] }, { "repo": "hasherezade/masm_shc", "name": "masm_shc", "owner": "hasherezade", "url": "https://github.com/hasherezade/masm_shc", "id": "36e4be2a9f49", "stars": 190, "language": "C++", "description": "A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.", "type": "tool", "pushedAt": "2025-04-22T12:32:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "hasherezade", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "Frago9876543210", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/13465245?v=4", "type": "User" }, { "login": "dismantl", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2007008?v=4", "type": "User" }, { "login": "b1tg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33436708?v=4", "type": "User" } ] }, { "repo": "wirepair/gcd", "name": "gcd", "owner": "wirepair", "url": "https://github.com/wirepair/gcd", "stars": 187, "language": "Go", "description": "Unofficial implementation of the Google Chrome Remote Debugger in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "isaac 🌻", "cardId": "d299a8e9dd44ee18", "avatar": "https://avatars.githubusercontent.com/u/1073742?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4b0995e41187", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [], "pushedAt": "2024-10-16T04:05:44Z", "archived": false, "topContributors": [ { "login": "wirepair", "c": 212, "avatar": "https://avatars.githubusercontent.com/u/1073742?v=4", "type": "User" }, { "login": "camswords", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/413405?v=4", "type": "User" }, { "login": "MrSaints", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/68859?v=4", "type": "User" }, { "login": "nightlyone", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1767118?v=4", "type": "User" }, { "login": "luisjakon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6248573?v=4", "type": "User" }, { "login": "Paessler-Stefan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32643330?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "kaxap", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2851970?v=4", "type": "User" } ] }, { "repo": "boku7/whereami", "name": "whereami", "owner": "boku7", "url": "https://github.com/boku7/whereami", "stars": 186, "language": "C", "description": "Cobalt Strike Beacon Object File (BOF) that uses handwritten shellcode to return the process Environment strings without touching any DLL's.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ba7deae38ebe", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-13T15:56:38Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "johnwoodman/remoteinjector", "name": "remoteinjector", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/remoteInjector", "stars": 186, "language": "Python", "description": "Inject remote template link into word document for remote template injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "abfc2cfb7d39", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-02-13T16:57:59Z", "archived": false, "topContributors": [ { "login": "John-woodman", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32111296?v=4", "type": "User" }, { "login": "JohnWoodman", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" } ] }, { "repo": "gynvael/dll-shared-sections", "name": "dll-shared-sections", "owner": "gynvael", "url": "https://github.com/gynvael/dll-shared-sections", "stars": 4, "language": "C++", "description": "Automatically exported from code.google.com/p/dll-shared-sections", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gynvael Coldwind", "cardId": "070706d3a8e26c1d", "avatar": "https://avatars.githubusercontent.com/u/1008844?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "97ecec7e9f49", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-08-05T22:29:23Z", "archived": false, "topContributors": [ { "login": "gynvael", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1008844?v=4", "type": "User" } ] }, { "repo": "carnal0wnage/j-pwn", "name": "j-pwn", "owner": "carnal0wnage", "url": "https://github.com/carnal0wnage/J-PWN", "stars": 4, "language": "Python", "description": "Jira Vulnerability Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Gates", "cardId": "2c54f9f640a5a08f", "avatar": "https://avatars.githubusercontent.com/u/735360?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "349d1155d0bf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-17T19:24:25Z", "archived": false, "topContributors": [ { "login": "carnal0wnage", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/735360?v=4", "type": "User" } ] }, { "repo": "yossisassi/adgroupmembertimebased", "name": "adgroupmembertimebased", "owner": "yossisassi", "url": "https://github.com/YossiSassi/ADGroupMemberTimeBased", "stars": 4, "language": "PowerShell", "description": "PowerShell module for managing Time-Based Group Membership - temporarily add/get group members using the TTL optional feature of AD. Includes functions to test the pre-requisites, add a TTL member to ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "85f3bf9aa76e", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-11T15:31:11Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/search-stringinad", "name": "search-stringinad", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Search-StringInAD", "stars": 4, "language": "PowerShell", "description": "Looks recursively for 'interesting' strings (as well as IP addresses & hidden Unicode characters) in all AD objects", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fc8f8c0229ae", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-04T18:34:10Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/invoke-postkrbtgtresetmonitor", "name": "invoke-postkrbtgtresetmonitor", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Invoke-PostKrbtgtResetMonitor", "stars": 4, "language": "PowerShell", "description": "Centralized detection of Golden Tickets via anomalous kerberos tickets detection AFTER resetting the krbtgt password TWICE. No Dependencies/modules. Requires Event Log Readers or equivalent", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "baa33e384962", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-18T17:31:25Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-changesinaduser", "name": "get-changesinaduser", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-ChangesInADUser", "stars": 4, "language": "PowerShell", "description": "Checks for changes in AD users. Useful in finding who|when changed what property of an AD user. Requires 'Event Log Readers' or equivalent. No additional modules required.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ee56f6f9e1c", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-22T13:50:56Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "yossisassi/timelinegenerator", "name": "timelinegenerator", "owner": "yossisassi", "url": "https://github.com/YossiSassi/TimeLineGenerator", "stars": 4, "language": "PowerShell", "description": "AD account timeline generator - parse DC security logs for activity timeline", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "435e673819bf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-08T22:13:42Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "gabtremblay/bearmock", "name": "bearmock", "owner": "gabtremblay", "url": "https://github.com/gabtremblay/Bearmock", "stars": 4, "language": "Python", "description": "Uniden Bearcat Mock Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gabriel Tremblay", "cardId": "64bdc4dcb493283e", "avatar": "https://avatars.githubusercontent.com/u/755871?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ab94d7735cda", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-06-20T17:52:45Z", "archived": false, "topContributors": [ { "login": "gabtremblay", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/755871?v=4", "type": "User" } ] }, { "repo": "johndmcmaster/trf7960evm", "name": "trf7960evm", "owner": "johndmcmaster", "url": "https://github.com/JohnDMcMaster/TRF7960EVM", "stars": 4, "language": "C", "description": "TRF7960 evaluation board firmware. Original code copyright TI and can be freely redistributed as long as credit is given.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John McMaster", "cardId": "868ce8f4bdce1ea6", "avatar": "https://avatars.githubusercontent.com/u/222171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "608b3ae8eeb0", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2011-06-19T22:09:55Z", "archived": false, "topContributors": [ { "login": "JohnDMcMaster", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/222171?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/sans-sec556-iot-penetration-testing", "name": "sans-sec556-iot-penetration-testing", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/SANS-SEC556-IoT-Penetration-Testing", "stars": 4, "language": "Shell", "description": "Review, resources, and pre-lab exercises for the SANS SEC556 IoT Penetration Testing course, covering hardware hacking, firmware analysis, wireless protocols and SDR.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "196cdd302d9d", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-25T14:03:11Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "actuator/imou", "name": "imou", "owner": "actuator", "url": "https://github.com/actuator/imou", "stars": 4, "language": null, "description": "CVE-2023-42470 | CVE-2023-47353", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "65a95ded6014", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-20T13:24:56Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "niklasb/33c3ctf-coercive", "name": "33c3ctf-coercive", "owner": "niklasb", "url": "https://github.com/niklasb/33c3ctf-coercive", "stars": 4, "language": "Haskell", "description": "code and exploit for 33C3 CTF task 'coercive'", "type": "tool", "lanes": [ "2" ], "author": { "name": "Niklas Baumstark", "cardId": "e7e56ae52dd8ba57", "avatar": "https://avatars.githubusercontent.com/u/94819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fb2e09b9fec6", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-12-31T03:12:25Z", "archived": false, "topContributors": [ { "login": "niklasb", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/94819?v=4", "type": "User" } ] }, { "repo": "clevernyyyy/zip-slip-poc", "name": "zip-slip-poc", "owner": "clevernyyyy", "url": "https://github.com/clevernyyyy/zip-slip-poc", "stars": 4, "language": "JavaScript", "description": "Quick and Dirty POC for Zip Slip", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Schaal", "cardId": "f545eaaa75072b6d", "avatar": "https://avatars.githubusercontent.com/u/2798509?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c4702e1daf83", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-11-14T06:41:18Z", "archived": false, "topContributors": [] }, { "repo": "abhaybhargav/bucketeer", "name": "bucketeer", "owner": "abhaybhargav", "url": "https://github.com/abhaybhargav/bucketeer", "stars": 3, "language": "Python", "description": "Bucketeer is a small script that builds off the useful Sublist3r tool. The Tool tries to identify S3 Buckets and other useful subdomain information, that is used to perform subdomain takeover attacks.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhay Bhargav", "cardId": "10eabff78c05af64", "avatar": "https://avatars.githubusercontent.com/u/4427607?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a563b9057a59", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 58, "contributorCount": 1, "contributors": [], "pushedAt": "2018-02-19T12:24:55Z", "archived": false, "topContributors": [ { "login": "abhaybhargav", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4427607?v=4", "type": "User" } ] }, { "repo": "jgamblin/cve-publishing-time-infograph", "name": "cve-publishing-time-infograph", "owner": "jgamblin", "url": "https://github.com/jgamblin/CVE-Publishing-Time-InfoGraph", "stars": 3, "language": "Python", "description": "CVE-Publishing-Time-Infograph", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jerry Gamblin", "cardId": "0eae75bb01ff28f8", "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bf33882395ed", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-18T03:58:50Z", "archived": false, "topContributors": [ { "login": "github-actions[bot]", "c": 217, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "jgamblin", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4", "type": "User" } ] }, { "repo": "daddycocoaman/riskmap", "name": "riskmap", "owner": "daddycocoaman", "url": "https://github.com/daddycocoaman/riskmap", "stars": 3, "language": "Python", "description": "Proof-of-concept for correlating CLI commands to MITRE techniques", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60cded662e2a", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-11-24T23:20:30Z", "archived": false, "topContributors": [ { "login": "daddycocoaman", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-logoncount", "name": "get-logoncount", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-LogonCount", "stars": 3, "language": "PowerShell", "description": "Count AD account(s) logons - Queries the logonCount attribute from all domain controllers (RWDC + RODC) for all or specific user accounts (and optionally computer accounts), with additional statistics", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e5d92201f7cc", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-13T09:52:23Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "mauroeldritch/vancleef", "name": "vancleef", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/VanCleef", "stars": 3, "language": "Ruby", "description": "Exploit for CVE-2019-11881 (Rancher 2.1.4 Web Parameter Tampering)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fc68471216a4", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2019-06-10T22:10:10Z", "archived": false, "topContributors": [] }, { "repo": "mauroeldritch/pazuzu", "name": "pazuzu", "owner": "mauroeldritch", "url": "https://github.com/MauroEldritch/PAZUZU", "stars": 3, "language": "Ruby", "description": "PAZUZU (Portainer Authentication Zap Using Zero Utilities) is a ruby exploit for vulnerable Portainer instances (--no-auth). Featured @ DevFest Siberia 2018.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauro Eldritch", "cardId": "41edd5dd0d0de71e", "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "085122fc62aa", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-12-09T21:32:49Z", "archived": false, "topContributors": [ { "login": "MauroEldritch", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1292978?v=4", "type": "User" } ] }, { "repo": "ccelikanil/pwncheck", "name": "pwncheck", "owner": "ccelikanil", "url": "https://github.com/ccelikanil/pwnCheck", "stars": 3, "language": "Python", "description": "Rev up your recon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Anil Celik", "cardId": "6cb62d472a3bbb85", "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a94584d0b2c5", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-06T08:51:55Z", "archived": false, "topContributors": [ { "login": "ccelikanil", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4", "type": "User" } ] }, { "repo": "travisgoodspeed/gbstrings", "name": "gbstrings", "owner": "travisgoodspeed", "url": "https://github.com/travisgoodspeed/gbstrings", "stars": 3, "language": "Go", "description": "Quick GB2312 strings tool in Go for Chinese firmware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Travis Goodspeed", "cardId": "7ab378662ba76077", "avatar": "https://avatars.githubusercontent.com/u/770671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e06db554cae", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-05-28T17:09:19Z", "archived": false, "topContributors": [ { "login": "travisgoodspeed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/770671?v=4", "type": "User" } ] }, { "repo": "zjorz/public-eid-ad-gapandfix", "name": "public-eid-ad-gapandfix", "owner": "zjorz", "url": "https://github.com/zjorz/Public-EID-AD-GAPAndFix", "stars": 3, "language": null, "description": "Contains Sample Scripts To Perform GAP Analysis Between Entra ID and AD, And Fix As Needed", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jorge de Almeida Pinto", "cardId": "ac5edee20ca75971", "avatar": "https://avatars.githubusercontent.com/u/16709877?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "44a931a23a41", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-12T10:57:13Z", "archived": false, "topContributors": [ { "login": "zjorz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16709877?v=4", "type": "User" } ] }, { "repo": "mvelazc0/simplant", "name": "simplant", "owner": "mvelazc0", "url": "https://github.com/mvelazc0/Simplant", "stars": 3, "language": "C#", "description": "Command & Control Implant Simulator", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mauricio Velazco", "cardId": "aef4319d82bcb778", "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4d6ad924d1cf", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-18T01:22:33Z", "archived": false, "topContributors": [ { "login": "mvelazc0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4950700?v=4", "type": "User" } ] }, { "repo": "jlleitschuh/local-network-access-vulnerability-poc", "name": "local-network-access-vulnerability-poc", "owner": "jlleitschuh", "url": "https://github.com/JLLeitschuh/local-network-access-vulnerability-poc", "stars": 3, "language": "HTML", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonathan Leitschuh", "cardId": "dc3c42eee9426138", "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b8735734656b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-16T19:11:22Z", "archived": false, "topContributors": [ { "login": "JLLeitschuh", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "type": "User" } ] }, { "repo": "ndrix/lilith", "name": "lilith", "owner": "ndrix", "url": "https://github.com/ndrix/Lilith", "stars": 3, "language": "Perl", "description": "Lilith Web Security Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Hendrickx", "cardId": "e0fcf494618057a9", "avatar": "https://avatars.githubusercontent.com/u/355050?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9ab9ee4ea24b", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2012-06-05T12:33:54Z", "archived": false, "topContributors": [ { "login": "ndrix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/355050?v=4", "type": "User" } ] }, { "repo": "caryhooper/vulndemoserver", "name": "vulndemoserver", "owner": "caryhooper", "url": "https://github.com/caryhooper/vulndemoserver", "stars": 3, "language": "Python", "description": "Portable HTTP server to demonstrate risk of web vulnerabilities such as XSS and SQL Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cary Hooper", "cardId": "e7f04a32e0d73331", "avatar": "https://avatars.githubusercontent.com/u/19616873?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25600b413b15", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-20T16:31:14Z", "archived": false, "topContributors": [ { "login": "caryhooper", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19616873?v=4", "type": "User" } ] }, { "repo": "todb/cve-archive", "name": "cve-archive", "owner": "todb", "url": "https://github.com/todb/cve-archive", "stars": 3, "language": null, "description": "Tackle the issue of CVE reference linkrot", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tod Beardsley", "cardId": "f6a300e6bf1ced9d", "avatar": "https://avatars.githubusercontent.com/u/24144?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "13a86ef3ce1a", "score": 20, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-13T18:00:29Z", "archived": false, "topContributors": [ { "login": "todb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24144?v=4", "type": "User" } ] }, { "repo": "kozmer/log4j-shell-poc", "name": "log4j-shell-poc", "owner": "kozmer", "url": "https://github.com/kozmer/log4j-shell-poc", "stars": 1848, "language": "Python", "description": "A Proof-Of-Concept for the CVE-2021-44228 vulnerability. ", "type": "tool", "lanes": [ "1" ], "author": { "name": "kozmer", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2024/06/15/htb-crafty.html", "title": "HTB: Crafty", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/hackvent2023/hard", "title": "Hackvent 2023 - Hard", "person": "0xdf" } ], "referencedCount": 2, "id": "3c9e75a15931", "score": 19, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-12T22:37:25Z", "archived": true, "topContributors": [ { "login": "kozmer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/87979263?v=4", "type": "User" } ] }, { "repo": "bishopfox/jsluice", "name": "jsluice", "owner": "BishopFox", "url": "https://github.com/BishopFox/jsluice", "id": "06be2866c1ac", "stars": 1865, "language": "Go", "description": "Extract URLs, paths, secrets, and other interesting bits from JavaScript", "type": "tool", "pushedAt": "2024-05-22T02:26:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Tony West", "cardId": "a203774ff1208644", "avatar": "https://avatars.githubusercontent.com/u/125916820?v=4", "login": "twest-bf" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "bf-tomnomnom", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/102173607?v=4", "type": "User" }, { "login": "SecGus", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/61525295?v=4", "type": "User" }, { "login": "c3l3si4n", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39219175?v=4", "type": "User" }, { "login": "bf-arhodes", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/72098380?v=4", "type": "User" }, { "login": "twest-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/125916820?v=4", "type": "User" }, { "login": "dptsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57497656?v=4", "type": "User" }, { "login": "testwill", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8717479?v=4", "type": "User" }, { "login": "osxtest", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38131934?v=4", "type": "User" } ] }, { "repo": "intelisecurelabs/linux_exploit_suggester", "name": "Linux_Exploit_Suggester", "owner": "InteliSecureLabs", "url": "https://github.com/InteliSecureLabs/Linux_Exploit_Suggester", "id": "7c334c7b1fed", "stars": 1817, "language": "Perl", "description": "Linux Exploit Suggester; based on operating system release number ", "type": "tool", "pushedAt": "2014-05-19T06:23:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "InteliSecureLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "garu", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/52187?v=4", "type": "User" } ] }, { "repo": "nccgroup/sobelow", "name": "sobelow", "owner": "nccgroup", "url": "https://github.com/nccgroup/sobelow", "id": "e5e245a1ab33", "stars": 1789, "language": "Elixir", "description": "Security-focused static analysis for the Phoenix Framework", "type": "tool", "pushedAt": "2024-08-20T20:05:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 32, "topContributors": [ { "login": "GriffinMB", "c": 454, "avatar": "https://avatars.githubusercontent.com/u/6545494?v=4", "type": "User" }, { "login": "GriffinMBNCC", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/20914418?v=4", "type": "User" }, { "login": "houllette", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/6202965?v=4", "type": "User" }, { "login": "techgaun", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1886670?v=4", "type": "User" }, { "login": "fastjames", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/260739?v=4", "type": "User" }, { "login": "adrianomitre", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/456804?v=4", "type": "User" }, { "login": "squaresurf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/863076?v=4", "type": "User" }, { "login": "iarekk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16271112?v=4", "type": "User" }, { "login": "kianmeng", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/134518?v=4", "type": "User" }, { "login": "marpo60", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/952074?v=4", "type": "User" }, { "login": "veverkap", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/22348?v=4", "type": "User" }, { "login": "OldhamMade", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/111193?v=4", "type": "User" }, { "login": "prehnRA", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3952444?v=4", "type": "User" }, { "login": "rahiparikh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1883189?v=4", "type": "User" }, { "login": "angelikatyborska", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7852553?v=4", "type": "User" }, { "login": "bwireman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15880700?v=4", "type": "User" }, { "login": "danschultzer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1254724?v=4", "type": "User" }, { "login": "dmarcoux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1102934?v=4", "type": "User" }, { "login": "gabrielgiordan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5347035?v=4", "type": "User" }, { "login": "jherdman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3300?v=4", "type": "User" }, { "login": "jcowgar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/251686?v=4", "type": "User" }, { "login": "mmmries", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80008?v=4", "type": "User" }, { "login": "MikaAK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4650931?v=4", "type": "User" }, { "login": "pdgonzalez872", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8906358?v=4", "type": "User" }, { "login": "Nitrino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1032291?v=4", "type": "User" }, { "login": "Cantido", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1505603?v=4", "type": "User" }, { "login": "samhstn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15983736?v=4", "type": "User" }, { "login": "tomciopp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/544875?v=4", "type": "User" }, { "login": "tmecklem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/966985?v=4", "type": "User" }, { "login": "btmo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4795467?v=4", "type": "User" } ] }, { "repo": "initstring/linkedin2username", "name": "linkedin2username", "owner": "initstring", "url": "https://github.com/initstring/linkedin2username", "id": "34e7b72716c5", "stars": 1773, "language": "Python", "description": "OSINT Tool: Generate username lists for companies on LinkedIn", "type": "tool", "pushedAt": "2026-05-20T23:16:42Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "initstring", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "initstring", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/26131150?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "0xbc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7539194?v=4", "type": "User" }, { "login": "C0axx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35150945?v=4", "type": "User" }, { "login": "coj337", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9269226?v=4", "type": "User" }, { "login": "knavesec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28929566?v=4", "type": "User" }, { "login": "ihack4falafel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17316888?v=4", "type": "User" }, { "login": "nimmicus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1018492?v=4", "type": "User" }, { "login": "id3s3c", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51968606?v=4", "type": "User" }, { "login": "vtasio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61179409?v=4", "type": "User" } ] }, { "repo": "threatexpress/malleable-c2", "name": "malleable-c2", "owner": "threatexpress", "url": "https://github.com/threatexpress/malleable-c2", "id": "844610ed790c", "stars": 1764, "language": null, "description": "Cobalt Strike Malleable C2 Design and Reference Guide", "type": "tool", "pushedAt": "2023-12-13T17:14:22Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "threatexpress", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "vestjoe", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/21366480?v=4", "type": "User" }, { "login": "andrewchiles", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/12104886?v=4", "type": "User" }, { "login": "ZephrFish", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "Charles-Foster-Kane", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10243215?v=4", "type": "User" }, { "login": "ifoundthetao", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/181581?v=4", "type": "User" } ] }, { "repo": "govolution/avet", "name": "avet", "owner": "govolution", "url": "https://github.com/govolution/avet", "id": "b584ba8e0420", "stars": 1753, "language": "Shell", "description": "AntiVirus Evasion Tool", "type": "tool", "pushedAt": "2025-04-23T21:31:39Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "govolution", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "govolution", "c": 150, "avatar": "https://avatars.githubusercontent.com/u/6421894?v=4", "type": "User" }, { "login": "Thund3rPat", "c": 111, "avatar": "https://avatars.githubusercontent.com/u/58174580?v=4", "type": "User" }, { "login": "tacticaljmp", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/31922031?v=4", "type": "User" } ] }, { "repo": "mandatoryprogrammer/cursedchrome", "name": "CursedChrome", "owner": "mandatoryprogrammer", "url": "https://github.com/mandatoryprogrammer/CursedChrome", "id": "2dd9202df90f", "stars": 1720, "language": "JavaScript", "description": "Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.", "type": "tool", "pushedAt": "2024-10-26T19:06:54Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "mandatoryprogrammer", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "David Tomaschik", "cardId": "5709420abaa7a297", "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "login": "Matir" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mandatoryprogrammer", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/5349141?v=4", "type": "User" }, { "login": "telwell", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/736897?v=4", "type": "User" }, { "login": "Matir", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/808960?v=4", "type": "User" }, { "login": "psie-corp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/77445077?v=4", "type": "User" } ] }, { "repo": "azure/stormspotter", "name": "Stormspotter", "owner": "Azure", "url": "https://github.com/Azure/Stormspotter", "id": "69d1c4f63295", "stars": 1711, "language": "Python", "description": "Azure Red Team tool for graphing Azure and Azure Active Directory objects", "type": "tool", "pushedAt": "2024-01-08T17:20:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Azure", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" }, { "name": "Jay Beale", "cardId": "60e1738e0952ff61", "avatar": "https://avatars.githubusercontent.com/u/1235374?v=4", "login": "JayBeale" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "legra-ms", "c": 164, "avatar": "https://avatars.githubusercontent.com/u/56611012?v=4", "type": "User" }, { "login": "microsoftopensource", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/22527892?v=4", "type": "User" }, { "login": "jemrobinson", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3502751?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "jaguasch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6979744?v=4", "type": "User" }, { "login": "daddycocoaman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" }, { "login": "microsoft-github-operations[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/41902?v=4", "type": "Bot" }, { "login": "JayBeale", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1235374?v=4", "type": "User" }, { "login": "microsoft-github-policy-service[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/95686?v=4", "type": "Bot" } ] }, { "repo": "sting8k/burpsuite_403bypasser", "name": "BurpSuite_403Bypasser", "owner": "sting8k", "url": "https://github.com/sting8k/BurpSuite_403Bypasser", "id": "d79ab26c15f9", "stars": 1696, "language": "Python", "description": "Burpsuite Extension to bypass 403 restricted directory", "type": "tool", "pushedAt": "2023-06-29T06:13:03Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sting8k", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "sting8k", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/11132081?v=4", "type": "User" }, { "login": "AshkanRafiee", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35492414?v=4", "type": "User" }, { "login": "lobuhi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37011545?v=4", "type": "User" }, { "login": "Xib3rR4dAr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24238512?v=4", "type": "User" } ] }, { "repo": "irsdl/iis-shortname-scanner", "name": "IIS-ShortName-Scanner", "owner": "irsdl", "url": "https://github.com/irsdl/IIS-ShortName-Scanner", "id": "12ce979cedc8", "stars": 1683, "language": "Java", "description": "latest version of scanners for IIS short filename (8.3) disclosure vulnerability", "type": "tool", "pushedAt": "2023-09-03T17:49:43Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "irsdl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "irsdl", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/1798313?v=4", "type": "User" }, { "login": "shafouz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/38974831?v=4", "type": "User" }, { "login": "alexlauerman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5740946?v=4", "type": "User" }, { "login": "TheNaterz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2198138?v=4", "type": "User" }, { "login": "alxjsn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3642823?v=4", "type": "User" } ] }, { "repo": "eladshamir/internal-monologue", "name": "Internal-Monologue", "owner": "eladshamir", "url": "https://github.com/eladshamir/Internal-Monologue", "id": "a5c08f66ff9d", "stars": 1674, "language": "C#", "description": "Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS", "type": "tool", "pushedAt": "2018-10-11T12:13:08Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "eladshamir", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Russel Van Tuyl", "cardId": "bb7b1cce2da69737", "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "login": "Ne0nd0g" }, { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "eladshamir", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/8843083?v=4", "type": "User" }, { "login": "Ne0nd0g", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5638474?v=4", "type": "User" }, { "login": "byt3bl33d3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" } ] }, { "repo": "threatexpress/domainhunter", "name": "domainhunter", "owner": "threatexpress", "url": "https://github.com/threatexpress/domainhunter", "id": "3f1f26f5eb0c", "stars": 1673, "language": "Python", "description": "Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names", "type": "tool", "pushedAt": "2024-06-06T21:01:21Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "threatexpress", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "andrewchiles", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/12104886?v=4", "type": "User" }, { "login": "vestjoe", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/21366480?v=4", "type": "User" }, { "login": "acole76", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1920278?v=4", "type": "User" }, { "login": "EdgeSync", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15020931?v=4", "type": "User" }, { "login": "yogisec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11297343?v=4", "type": "User" }, { "login": "UA3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30340692?v=4", "type": "User" }, { "login": "davidlebr1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/838845?v=4", "type": "User" } ] }, { "repo": "mr-un1k0d3r/scshell", "name": "SCShell", "owner": "Mr-Un1k0d3r", "url": "https://github.com/Mr-Un1k0d3r/SCShell", "id": "3009656257ea", "stars": 1646, "language": "C", "description": "Fileless lateral movement tool that relies on ChangeServiceConfigA to run command", "type": "tool", "pushedAt": "2023-07-10T01:31:54Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Mr-Un1k0d3r", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "Mr-Un1k0d3r", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/4238766?v=4", "type": "User" }, { "login": "tothi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6377720?v=4", "type": "User" }, { "login": "omriman067", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11334916?v=4", "type": "User" }, { "login": "BradyBromley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51128276?v=4", "type": "User" }, { "login": "funnybananas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83034180?v=4", "type": "User" }, { "login": "sauvignon-chardonnay", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58727162?v=4", "type": "User" } ] }, { "repo": "ekultek/whatbreach", "name": "WhatBreach", "owner": "Ekultek", "url": "https://github.com/Ekultek/WhatBreach", "id": "d7e055b60d80", "stars": 1620, "language": "Python", "description": "OSINT tool to find breached emails, databases, pastes, and relevant information", "type": "tool", "pushedAt": "2025-08-14T14:29:48Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Ekultek", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Ekultek", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/14183473?v=4", "type": "User" }, { "login": "cam-barts", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13058567?v=4", "type": "User" }, { "login": "Dayhta", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/92410413?v=4", "type": "User" } ] }, { "repo": "rsmudge/malleable-c2-profiles", "name": "Malleable-C2-Profiles", "owner": "rsmudge", "url": "https://github.com/rsmudge/Malleable-C2-Profiles", "id": "829915e3aa61", "stars": 1591, "language": null, "description": "Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt ", "type": "tool", "pushedAt": "2021-05-18T14:45:39Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "rsmudge", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christopher Truncer", "cardId": "b422714966d948cf", "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "login": "ChrisTruncer" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "rsmudge", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/1174994?v=4", "type": "User" }, { "login": "ChrisTruncer", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "OJ", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28896?v=4", "type": "User" } ] }, { "repo": "pentestpad/subzy", "name": "subzy", "owner": "PentestPad", "url": "https://github.com/PentestPad/subzy", "id": "893cf19f9da1", "stars": 1578, "language": "Go", "description": "Subdomain takeover vulnerability checker", "type": "tool", "pushedAt": "2024-09-10T13:59:44Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "PentestPad", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "NSEcho", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/50464613?v=4", "type": "User" }, { "login": "LukaSikic", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/15249077?v=4", "type": "User" }, { "login": "acuciureanu", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12533821?v=4", "type": "User" }, { "login": "joanbono", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7288621?v=4", "type": "User" }, { "login": "touhidshaikh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/26184236?v=4", "type": "User" }, { "login": "MegaManSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2505339?v=4", "type": "User" }, { "login": "GopherGhaznix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68427058?v=4", "type": "User" }, { "login": "M507", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38591075?v=4", "type": "User" }, { "login": "rverton", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1506585?v=4", "type": "User" }, { "login": "SalemNabeelSalem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50844007?v=4", "type": "User" }, { "login": "varmakollu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82416847?v=4", "type": "User" }, { "login": "x0xman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28544695?v=4", "type": "User" } ] }, { "repo": "bishopfox/gitgot", "name": "GitGot", "owner": "BishopFox", "url": "https://github.com/BishopFox/GitGot", "id": "8dbe11a2490b", "stars": 1567, "language": "Python", "description": "Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.", "type": "tool", "pushedAt": "2024-03-07T13:48:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "mox-folder", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/115006759?v=4", "type": "User" }, { "login": "jhalon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19541892?v=4", "type": "User" }, { "login": "mjang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3287976?v=4", "type": "User" } ] }, { "repo": "nccgroup/pmapper", "name": "PMapper", "owner": "nccgroup", "url": "https://github.com/nccgroup/PMapper", "id": "01cc77bc280d", "stars": 1567, "language": "Python", "description": "A tool for quickly evaluating IAM permissions in AWS.", "type": "tool", "pushedAt": "2024-08-02T15:38:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "ncc-erik-steringer", "c": 71, "avatar": "https://avatars.githubusercontent.com/u/18535406?v=4", "type": "User" }, { "login": "buzzdeee", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8383396?v=4", "type": "User" }, { "login": "yehudacohen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37450100?v=4", "type": "User" } ] }, { "repo": "wikiz/redguard", "name": "RedGuard", "owner": "wikiZ", "url": "https://github.com/wikiZ/RedGuard", "id": "1f9e9ad93441", "stars": 1566, "language": "Go", "description": "RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.", "type": "tool", "pushedAt": "2024-08-20T17:43:35Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "wikiZ", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wikiZ", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/37897216?v=4", "type": "User" } ] }, { "repo": "mikesiko/practicalmalwareanalysis-labs", "name": "PracticalMalwareAnalysis-Labs", "owner": "mikesiko", "url": "https://github.com/mikesiko/PracticalMalwareAnalysis-Labs", "id": "fb77cb864e30", "stars": 1531, "language": null, "description": "Binaries for the book Practical Malware Analysis", "type": "tool", "pushedAt": "2022-06-14T16:37:01Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "mikesiko", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mikesiko", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2262419?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/hob0rules", "name": "Hob0Rules", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/Hob0Rules", "id": "e0737c548270", "stars": 1530, "language": null, "description": "Password cracking rules for Hashcat based on statistics and industry patterns", "type": "tool", "pushedAt": "2019-07-15T04:44:07Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hob0", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/16478996?v=4", "type": "User" }, { "login": "amlweems", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117625?v=4", "type": "User" } ] }, { "repo": "0xsp-srd/mortar", "name": "mortar", "owner": "0xsp-SRD", "url": "https://github.com/0xsp-SRD/mortar", "id": "9c5ac57a706c", "stars": 1504, "language": "Pascal", "description": "evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)", "type": "tool", "pushedAt": "2023-12-21T22:00:38Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "0xsp-SRD", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "zux0x3a", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/10256911?v=4", "type": "User" }, { "login": "goofsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12970366?v=4", "type": "User" } ] }, { "repo": "optiv/freeze", "name": "Freeze", "owner": "optiv", "url": "https://github.com/optiv/Freeze", "id": "2866405e943b", "stars": 1475, "language": "Go", "description": "Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods", "type": "tool", "pushedAt": "2023-08-18T17:25:07Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "optiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Tylous", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "ilektrojohn/creepy", "name": "creepy", "owner": "ilektrojohn", "url": "https://github.com/ilektrojohn/creepy", "id": "b8d4e464ac5e", "stars": 1463, "language": "Python", "description": "A geolocation OSINT tool. Offers geolocation information gathering through social networking platforms.", "type": "tool", "pushedAt": "2016-01-07T12:51:33Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ilektrojohn", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jkakavas", "c": 118, "avatar": "https://avatars.githubusercontent.com/u/10281256?v=4", "type": "User" } ] }, { "repo": "roadwy/rip", "name": "rip", "owner": "roadwy", "url": "https://github.com/roadwy/RIP", "stars": 1448, "language": null, "description": "", "type": "tool", "lanes": [ "1" ], "author": { "name": "roadwy", "cardId": null }, "referencedBy": [], "referencedCount": 0, "id": "c5f7cb604faf", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-23T01:47:57Z", "archived": true, "topContributors": [ { "login": "roadwy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7391178?v=4", "type": "User" } ] }, { "repo": "samjoan/droopescan", "name": "droopescan", "owner": "SamJoan", "url": "https://github.com/SamJoan/droopescan", "id": "5db0279f5e07", "stars": 1437, "language": "HTML", "description": "A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.", "type": "tool", "pushedAt": "2024-01-19T19:58:03Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "SamJoan", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "SamJoan", "c": 623, "avatar": "https://avatars.githubusercontent.com/u/152786?v=4", "type": "User" }, { "login": "kieran-github", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/32347545?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "NicolasCARPi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3043706?v=4", "type": "User" }, { "login": "pierce403", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/76767?v=4", "type": "User" }, { "login": "jfalken", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5685291?v=4", "type": "User" }, { "login": "tophertimzen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5971396?v=4", "type": "User" }, { "login": "ageekymonk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/271647?v=4", "type": "User" }, { "login": "mbomb007", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22807401?v=4", "type": "User" }, { "login": "oniichaNj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3495385?v=4", "type": "User" }, { "login": "ss23", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/191510?v=4", "type": "User" } ] }, { "repo": "egebalci/amber", "name": "amber", "owner": "EgeBalci", "url": "https://github.com/EgeBalci/amber", "id": "89a0c9bd5198", "stars": 1430, "language": "Go", "description": "Reflective PE packer.", "type": "tool", "pushedAt": "2024-02-22T17:44:19Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "EgeBalci", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "EgeBalci", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/17179401?v=4", "type": "User" } ] }, { "repo": "outflanknl/c2-tool-collection", "name": "C2-Tool-Collection", "owner": "outflanknl", "url": "https://github.com/outflanknl/C2-Tool-Collection", "id": "f1fa676b9987", "stars": 1401, "language": "C", "description": "A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.", "type": "tool", "pushedAt": "2023-10-27T14:16:17Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cn33liz", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" }, { "login": "c3c", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2326945?v=4", "type": "User" } ] }, { "repo": "649/memcrashed-ddos-exploit", "name": "Memcrashed-DDoS-Exploit", "owner": "649", "url": "https://github.com/649/Memcrashed-DDoS-Exploit", "id": "23374147eeb9", "stars": 1394, "language": "Python", "description": "DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API", "type": "tool", "pushedAt": "2022-12-02T07:14:59Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "649", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "649", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/23534047?v=4", "type": "User" }, { "login": "delirious-lettuce", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24502053?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "khast3x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1370650?v=4", "type": "User" } ] }, { "repo": "wkl-sec/hiddendesktop", "name": "HiddenDesktop", "owner": "WKL-Sec", "url": "https://github.com/WKL-Sec/HiddenDesktop", "id": "745d9d118ae9", "stars": 1336, "language": "C", "description": "HVNC for Cobalt Strike", "type": "tool", "pushedAt": "2023-12-07T17:15:48Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "WKL-Sec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "omerya/invisi-shell", "name": "Invisi-Shell", "owner": "OmerYa", "url": "https://github.com/OmerYa/Invisi-Shell", "id": "2de8894032c6", "stars": 1332, "language": "C++", "description": "Hide your Powershell script in plain sight. Bypass all Powershell security features", "type": "tool", "pushedAt": "2019-08-19T19:55:19Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "OmerYa", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "OmerYa", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/22572520?v=4", "type": "User" } ] }, { "repo": "nccgroup/singularity", "name": "singularity", "owner": "nccgroup", "url": "https://github.com/nccgroup/singularity", "id": "1a1c139e7858", "stars": 1306, "language": "JavaScript", "description": "A DNS rebinding attack framework.", "type": "tool", "pushedAt": "2026-07-03T01:42:32Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jonathan Leitschuh", "cardId": "dc3c42eee9426138", "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "login": "JLLeitschuh" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "gdncc", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/25679104?v=4", "type": "User" }, { "login": "sanktjodel", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/38028036?v=4", "type": "User" }, { "login": "JLLeitschuh", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "occalis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11787589?v=4", "type": "User" }, { "login": "0ca", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5008707?v=4", "type": "User" }, { "login": "akiym", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/76525?v=4", "type": "User" }, { "login": "objectified", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1171716?v=4", "type": "User" } ] }, { "repo": "vincentcox/bypass-firewalls-by-dns-history", "name": "bypass-firewalls-by-DNS-history", "owner": "vincentcox", "url": "https://github.com/vincentcox/bypass-firewalls-by-DNS-history", "id": "9226f23a5850", "stars": 1296, "language": "Shell", "description": "Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.", "type": "tool", "pushedAt": "2022-09-05T20:10:30Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "vincentcox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "vincentcox", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/9286611?v=4", "type": "User" }, { "login": "naltun", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7507990?v=4", "type": "User" } ] }, { "repo": "redteampentesting/pretender", "name": "pretender", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/pretender", "id": "2c3796b70778", "stars": 1296, "language": "Go", "description": "Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.", "type": "tool", "pushedAt": "2026-07-03T11:16:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "rtpt-erikgeiser", "c": 195, "avatar": "https://avatars.githubusercontent.com/u/70747329?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "rtpt-alexanderneumann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62751754?v=4", "type": "User" } ] }, { "repo": "med0x2e/sigflip", "name": "SigFlip", "owner": "med0x2e", "url": "https://github.com/med0x2e/SigFlip", "id": "28cbbf270f10", "stars": 1287, "language": "C#", "description": "SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.", "type": "tool", "pushedAt": "2023-08-27T18:27:50Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "med0x2e", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "med0x2e", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/3585128?v=4", "type": "User" }, { "login": "timwhitez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/36320909?v=4", "type": "User" } ] }, { "repo": "icyguider/shhhloader", "name": "Shhhloader", "owner": "icyguider", "url": "https://github.com/icyguider/Shhhloader", "id": "62f046ce694e", "stars": 1277, "language": "Python", "description": "Syscall Shellcode Loader (Work in Progress)", "type": "tool", "pushedAt": "2024-05-08T20:24:35Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "icyguider", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "icyguider", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/79864975?v=4", "type": "User" }, { "login": "jakobfriedl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/71284620?v=4", "type": "User" }, { "login": "tomkallo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30881232?v=4", "type": "User" }, { "login": "snovvcrash", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23141800?v=4", "type": "User" } ] }, { "repo": "secforce/tunna", "name": "Tunna", "owner": "SECFORCE", "url": "https://github.com/SECFORCE/Tunna", "id": "6b73914500da", "stars": 1275, "language": "Python", "description": "Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. ", "type": "tool", "pushedAt": "2022-09-04T14:21:37Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "SECFORCE", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "nvssks", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/9861741?v=4", "type": "User" }, { "login": "evict", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7238650?v=4", "type": "User" }, { "login": "gorgiaxx", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9295584?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "RadekHvizdos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10856567?v=4", "type": "User" }, { "login": "xCh12i5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40517505?v=4", "type": "User" }, { "login": "zt2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7644862?v=4", "type": "User" } ] }, { "repo": "ghostpack/sharpwmi", "name": "SharpWMI", "owner": "GhostPack", "url": "https://github.com/GhostPack/SharpWMI", "id": "0d21b810686f", "stars": 767, "language": "C#", "description": "SharpWMI is a C# implementation of various WMI functionality.", "type": "tool", "pushedAt": "2021-01-15T06:31:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "mgeeky | Mariusz Banach", "cardId": "e62b1b5f7b6b0edc", "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "login": "mgeeky" }, { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 1, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mgeeky", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/654344?v=4", "type": "User" }, { "login": "HarmJ0y", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "Ridter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6007471?v=4", "type": "User" }, { "login": "cnotin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" } ] }, { "repo": "fox-it/aclpwn.py", "name": "aclpwn.py", "owner": "fox-it", "url": "https://github.com/fox-it/aclpwn.py", "id": "517aefb18689", "stars": 764, "language": "Python", "description": "Active Directory ACL exploitation with BloodHound", "type": "tool", "pushedAt": "2021-11-18T03:47:24Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 1, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dirkjanm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "PaulSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4060683?v=4", "type": "User" } ] }, { "repo": "ghostpack/sharpdump", "name": "SharpDump", "owner": "GhostPack", "url": "https://github.com/GhostPack/SharpDump", "id": "d428fe873e4a", "stars": 666, "language": "C#", "description": "SharpDump is a C# port of PowerSploit's Out-Minidump.ps1 functionality.", "type": "tool", "pushedAt": "2019-02-07T02:52:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 1, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "HarmJ0y", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "cnotin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" } ] }, { "repo": "l0ss/grouper2", "name": "Grouper2", "owner": "l0ss", "url": "https://github.com/l0ss/Grouper2", "id": "a6f4c686e642", "stars": 640, "language": null, "description": "Find vulnerabilities in AD Group Policy", "type": "tool", "pushedAt": "2022-03-25T11:30:26Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "l0ss", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "l0ss", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/24580473?v=4", "type": "User" }, { "login": "cnotin", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "liamosaur", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2960928?v=4", "type": "User" } ] }, { "repo": "bishopfox/gadgetprobe", "name": "GadgetProbe", "owner": "BishopFox", "url": "https://github.com/BishopFox/GadgetProbe", "id": "fee8689c97df", "stars": 620, "language": "Java", "description": "Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.", "type": "tool", "pushedAt": "2021-03-04T21:32:45Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "the-bumble", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1927215?v=4", "type": "User" } ] }, { "repo": "ghostpack/sharproast", "name": "SharpRoast", "owner": "GhostPack", "url": "https://github.com/GhostPack/SharpRoast", "id": "1c0dfb876536", "stars": 251, "language": "C#", "description": "DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.", "type": "tool", "pushedAt": "2018-09-25T03:24:46Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 2, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "HarmJ0y", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "cnotin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" } ] }, { "repo": "mordavid/vcenterhound", "name": "vcenterhound", "owner": "mordavid", "url": "https://github.com/MorDavid/vCenterHound", "stars": 183, "language": "Python", "description": "Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1cfd6a78f8b4", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-13T20:38:58Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "octoberfest7/silentharvest_bof", "name": "silentharvest_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/SilentHarvest_BOF", "stars": 182, "language": "C", "description": "A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f8a80670c731", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-14T20:48:05Z", "archived": false, "topContributors": [ { "login": "jakobfriedl", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/71284620?v=4", "type": "User" }, { "login": "Octoberfest7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "t3l3machus/wwwtree", "name": "wwwtree", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/wwwtree", "stars": 182, "language": "Python", "description": "A utility for quickly and easily locating, web hosting and transferring resources (e.g., exploits/enumeration scripts) from your filesystem to a victim machine during privilege escalation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da2af1ed3d51", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-19T05:11:30Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/ludus_adaptix_c2", "name": "ludus_adaptix_c2", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/ludus_adaptix_c2", "stars": 180, "language": "Jinja", "description": "An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df562a27fb04", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-28T23:14:53Z", "archived": false, "topContributors": [ { "login": "kernel-sanders", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/openrisk", "name": "openrisk", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/openrisk", "stars": 180, "language": "Go", "description": "openrisk is a tool that generates a risk score based on the results of a Nuclei scan.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ba7aaaf517a7", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2025-12-22T16:05:03Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 14, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "dogancanbakir", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "Mzack9999", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "ehsandeep", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "adaros92", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55367120?v=4", "type": "User" }, { "login": "kchason", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1111099?v=4", "type": "User" }, { "login": "s-cu-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112623443?v=4", "type": "User" } ] }, { "repo": "frkngksl/nicoff", "name": "nicoff", "owner": "frkngksl", "url": "https://github.com/frkngksl/NiCOFF", "stars": 177, "language": "Nim", "description": "COFF and BOF Loader written in Nim", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "532b58e85d80", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-04T11:59:43Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" }, { "login": "JoernHe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15031843?v=4", "type": "User" } ] }, { "repo": "ropnop/windows_sshagent_extract", "name": "windows_sshagent_extract", "owner": "ropnop", "url": "https://github.com/ropnop/windows_sshagent_extract", "stars": 177, "language": "Python", "description": "PoC code to extract private keys from Windows 10's built in ssh-agent service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "872a5974fb8c", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-05-22T12:27:02Z", "archived": false, "topContributors": [ { "login": "ropnop", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" } ] }, { "repo": "megadose/facebook_totem", "name": "facebook_totem", "owner": "megadose", "url": "https://github.com/megadose/facebook_totem", "stars": 173, "language": "Python", "description": "Totem allows you to retrieve information about ads of a facebook page , we can retrieve the number of people targeted, how much the ad cost and a lot of other information. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Palenath", "cardId": "d13945ec3d7614c2", "avatar": "https://avatars.githubusercontent.com/u/51822495?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b04e5b8fb03f", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-29T16:44:07Z", "archived": false, "topContributors": [ { "login": "megadose", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/51822495?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/glpwnme", "name": "glpwnme", "owner": "Orange-Cyberdefense", "url": "https://github.com/Orange-Cyberdefense/glpwnme", "id": "e55e78a5d1f2", "stars": 173, "language": "Python", "description": " GLPI vulnerabilities checking tool ", "type": "tool", "pushedAt": "2026-06-30T18:03:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "Guilhem7", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/48909214?v=4", "type": "User" }, { "login": "AlxFrst", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/69115925?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" }, { "login": "Ne0re0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/120590235?v=4", "type": "User" }, { "login": "v1k1ngfr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32877266?v=4", "type": "User" }, { "login": "baggers27", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37847826?v=4", "type": "User" }, { "login": "chapochapo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/235581074?v=4", "type": "User" } ] }, { "repo": "specterops/cred1py", "name": "cred1py", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/cred1py", "id": "9416b23be5e2", "stars": 172, "language": "Python", "description": "A Python POC for CRED1 over SOCKS5", "type": "tool", "pushedAt": "2024-10-05T17:23:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Chester 🏴‍☠️", "cardId": "ada4c4cd1c6ae765", "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "login": "xpn" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xpn", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/173764?v=4", "type": "User" } ] }, { "repo": "trustedsec/user-behavior-mapping-tool", "name": "User-Behavior-Mapping-Tool", "owner": "trustedsec", "url": "https://github.com/trustedsec/User-Behavior-Mapping-Tool", "id": "8d5c72abc718", "stars": 172, "language": "Python", "description": "", "type": "tool", "pushedAt": "2023-08-22T14:22:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Oddvar Moe", "cardId": "643c874a34e1280c", "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "login": "api0cradle" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "api0cradle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12997471?v=4", "type": "User" }, { "login": "S4ntiagoP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" } ] }, { "repo": "win3zz/cve-2023-25157", "name": "cve-2023-25157", "owner": "win3zz", "url": "https://github.com/win3zz/CVE-2023-25157", "stars": 170, "language": "Python", "description": "CVE-2023-25157 - GeoServer SQL Injection - PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cb2d5e050e7a", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-14T10:40:17Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "epi052/fuzzing-101-solutions", "name": "fuzzing-101-solutions", "owner": "epi052", "url": "https://github.com/epi052/fuzzing-101-solutions", "id": "1a53a059a125", "stars": 170, "language": "C", "description": "Companion repository to the Fuzzing101 with LibAFL series of blog posts.", "type": "tool", "pushedAt": "2025-02-14T11:29:21Z", "archived": false, "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "epi052", "c": 65, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" } ] }, { "repo": "michenriksen/searchpass", "name": "searchpass", "owner": "michenriksen", "url": "https://github.com/michenriksen/searchpass", "id": "6a70542fcad3", "stars": 169, "language": "Ruby", "description": "A simple tool for offline searching of default credentials for network devices, web applications and more.", "type": "tool", "pushedAt": "2017-10-01T08:59:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Henriksen", "cardId": "9a2720188c485b00", "avatar": "https://avatars.githubusercontent.com/u/304361?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "trustedsec/sliverkeylogger", "name": "SliverKeylogger", "owner": "trustedsec", "url": "https://github.com/trustedsec/SliverKeylogger", "id": "a360df02d9b2", "stars": 169, "language": "C++", "description": "", "type": "tool", "pushedAt": "2023-09-22T19:39:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "freefirex", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/3172440?v=4", "type": "User" } ] }, { "repo": "colmmacc/cve-2022-3602", "name": "cve-2022-3602", "owner": "colmmacc", "url": "https://github.com/colmmacc/CVE-2022-3602", "stars": 168, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Colm MacCárthaigh", "cardId": "53488310768c5279", "avatar": "https://avatars.githubusercontent.com/u/172568?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0518744f319b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-01T19:56:40Z", "archived": false, "topContributors": [ { "login": "colmmacc", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/172568?v=4", "type": "User" } ] }, { "repo": "timmisiak/dbgrs", "name": "dbgrs", "owner": "timmisiak", "url": "https://github.com/TimMisiak/dbgrs", "stars": 167, "language": "Rust", "description": "A windows debugger written in Rust, for educational purposes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Misiak", "cardId": "65b09d2324bf2680", "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4310bdb75e80", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-05-28T05:57:52Z", "archived": false, "topContributors": [ { "login": "TimMisiak", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4", "type": "User" }, { "login": "ChayimFriedman2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24700207?v=4", "type": "User" }, { "login": "dwattttt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/912122?v=4", "type": "User" } ] }, { "repo": "octoberfest7/kdstab", "name": "kdstab", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/KDStab", "stars": 167, "language": "C", "description": "BOF combination of KillDefender and Backstab", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bda2e9f1ee3a", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-23T02:22:50Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "edoverflow/proof-of-concepts", "name": "proof-of-concepts", "owner": "EdOverflow", "url": "https://github.com/EdOverflow/proof-of-concepts", "id": "1184b5079edb", "stars": 166, "language": "HTML", "description": "A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.", "type": "tool", "pushedAt": "2019-11-06T11:45:49Z", "archived": true, "lanes": [ "2" ], "author": { "name": "EdOverflow", "cardId": "5ea61790652f7a1c", "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "EdOverflow", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "type": "User" } ] }, { "repo": "daffainfo/bypass-403", "name": "bypass-403", "owner": "daffainfo", "url": "https://github.com/daffainfo/bypass-403", "stars": 164, "language": "Go", "description": "Go script for bypassing 403 forbidden", "type": "tool", "lanes": [ "2" ], "author": { "name": "Muhammad Daffa", "cardId": "6e6b6c585fcb159b", "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8cd1fd9a6cf4", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-08-06T09:20:07Z", "archived": false, "topContributors": [ { "login": "daffainfo", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4", "type": "User" }, { "login": "clavinjune", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24659468?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/p3-loader", "name": "p3-loader", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/p3-loader", "stars": 164, "language": "C", "description": "P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and staging location for shellcode injection into remote pro", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c1b726a6977d", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-08T07:40:12Z", "archived": false, "topContributors": [ { "login": "zero2504", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/84348823?v=4", "type": "User" }, { "login": "v1k1ngfr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32877266?v=4", "type": "User" }, { "login": "einser82", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/276938652?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2023-29343", "name": "cve-2023-29343", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2023-29343", "stars": 162, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "94362675c02e", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-18T11:51:54Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "maldev-academy/electronvulnscanner", "name": "ElectronVulnScanner", "owner": "Maldev-Academy", "url": "https://github.com/Maldev-Academy/ElectronVulnScanner", "id": "4cd8a4845b70", "stars": 162, "language": "C", "description": "Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.", "type": "tool", "pushedAt": "2025-11-28T08:50:19Z", "archived": false, "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "login": "NUL0x4C" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "NUL0x4C", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "type": "User" } ] }, { "repo": "hasherezade/dll_injector", "name": "dll_injector", "owner": "hasherezade", "url": "https://github.com/hasherezade/dll_injector", "stars": 159, "language": "C++", "description": "A simple commandline injector using classic DLL injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f8bde90b02d3", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-21T15:50:52Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "pcworld", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1506734?v=4", "type": "User" } ] }, { "repo": "th3xace/edr-test", "name": "edr-test", "owner": "th3xace", "url": "https://github.com/TH3xACE/EDR-Test", "stars": 158, "language": null, "description": "Automating EDR Testing with reference to MITRE ATTACK via Cobalt Strike [Purple Team]. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "David B.", "cardId": "03d8b7e3e9fc8e79", "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "312825b607c5", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-27T11:39:32Z", "archived": false, "topContributors": [ { "login": "TH3xACE", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4", "type": "User" } ] }, { "repo": "maldev-academy/lsasshijackingviareg", "name": "lsasshijackingviareg", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/LsassHijackingViaReg", "stars": 158, "language": "C", "description": "Injecting DLL into LSASS at boot", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b86ee477052", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-04-29T16:04:54Z", "archived": false, "topContributors": [] }, { "repo": "octoberfest7/beatrev", "name": "beatrev", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/BeatRev", "stars": 154, "language": "C", "description": "POC for frustrating/defeating Malware Analysts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "91c9292f4d04", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-06-12T00:17:50Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "dsfgfdg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5831365?v=4", "type": "User" } ] }, { "repo": "swiftonsecurity/phishingregex", "name": "PhishingRegex", "owner": "SwiftOnSecurity", "url": "https://github.com/SwiftOnSecurity/PhishingRegex", "id": "e84914c64be0", "stars": 152, "language": null, "description": "Backup of my phishing regular expression testing bench", "type": "tool", "pushedAt": "2017-03-20T22:52:30Z", "archived": false, "lanes": [ "2" ], "author": { "name": "SwiftOnSecurity", "cardId": "21eb4a885bf6539b", "avatar": "https://avatars.githubusercontent.com/u/25470060?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "SwiftOnSecurity", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/25470060?v=4", "type": "User" } ] }, { "repo": "reecdeep/segugio", "name": "segugio", "owner": "reecdeep", "url": "https://github.com/reecdeep/segugio", "stars": 151, "language": "C#", "description": "Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extracting the malware's final stage configuration.", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReecDeep", "cardId": "bbeadf8a1da4ea51", "avatar": "https://avatars.githubusercontent.com/u/72123074?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "56a0659fad2e", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-21T09:47:23Z", "archived": false, "topContributors": [ { "login": "reecdeep", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/72123074?v=4", "type": "User" } ] }, { "repo": "0vercl0k/blazefox", "name": "blazefox", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/blazefox", "id": "862376be0bea", "stars": 150, "language": "C++", "description": "Blazefox exploits for Windows 10 RS5 64-bit.", "type": "tool", "pushedAt": "2019-12-09T11:20:20Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0vercl0k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "hasherezade/shellconv", "name": "shellconv", "owner": "hasherezade", "url": "https://github.com/hasherezade/shellconv", "stars": 149, "language": "Python", "description": "Small tool for disassembling shellcode (using objdump)", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f61d70df1940", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-06-19T17:03:49Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "malwarezone", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/30694372?v=4", "type": "User" } ] }, { "repo": "forrest-orr/doublestar", "name": "doublestar", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/DoubleStar", "stars": 147, "language": "JavaScript", "description": "A personalized/enhanced re-creation of the Darkhotel \"Double Star\" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques", "type": "tool", "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3bac79545f69", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-23T19:03:07Z", "archived": false, "topContributors": [ { "login": "forrest-orr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/direct-syscalls-a-journey-from-high-to-low", "name": "direct-syscalls-a-journey-from-high-to-low", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Direct-Syscalls-A-journey-from-high-to-low", "stars": 147, "language": "C", "description": "Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e810c715976", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-06T11:47:38Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "struppigel/portexanalyzergui", "name": "portexanalyzergui", "owner": "struppigel", "url": "https://github.com/struppigel/PortexAnalyzerGUI", "stars": 146, "language": "Java", "description": "Graphical interface for PortEx, a Portable Executable and Malware Analysis Library", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karsten Hahn", "cardId": "2c4963b333ad77b5", "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5704153d71f5", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-22T23:37:35Z", "archived": false, "topContributors": [ { "login": "struppigel", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4", "type": "User" } ] }, { "repo": "repnz/reversingminesweeper", "name": "ReversingMinesweeper", "owner": "repnz", "url": "https://github.com/repnz/ReversingMinesweeper", "id": "55b4499749cf", "stars": 146, "language": "C", "description": "Reverse Engineering Minesweeper: Reconstruct Minesweeper Source Code", "type": "tool", "pushedAt": "2019-06-25T19:27:06Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "repnz", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "cwolff411/powerob", "name": "powerob", "owner": "cwolff411", "url": "https://github.com/cwolff411/powerob", "stars": 145, "language": "Python", "description": "An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Wolff (cwolff411)", "cardId": "3f7b76a8e8031ed9", "avatar": "https://avatars.githubusercontent.com/u/8293038?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "245924245bed", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-28T18:22:36Z", "archived": false, "topContributors": [ { "login": "cwolff411", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/8293038?v=4", "type": "User" } ] }, { "repo": "citizenlab/malware-signatures", "name": "malware-signatures", "owner": "citizenlab", "url": "https://github.com/citizenlab/malware-signatures", "stars": 145, "language": "VimL", "description": "Yara rules for malware families seen as part of targeted threats project", "type": "tool", "lanes": [ "2" ], "author": { "name": "The Citizen Lab", "cardId": "6142637c21dfc0ad", "avatar": "https://avatars.githubusercontent.com/u/5658700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "69d9100ab0c7", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2016-11-17T19:27:09Z", "archived": false, "topContributors": [ { "login": "asymptotic", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/347076?v=4", "type": "User" }, { "login": "kkleemola", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1847263?v=4", "type": "User" }, { "login": "jakubd", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/6005010?v=4", "type": "User" }, { "login": "Te-k", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/15989628?v=4", "type": "User" }, { "login": "solidite", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16766192?v=4", "type": "User" } ] }, { "repo": "trustedsec/pivoter", "name": "pivoter", "owner": "trustedsec", "url": "https://github.com/trustedsec/pivoter", "id": "992c15348dad", "stars": 145, "language": "C", "description": "Pivoter is a proxy tool for pentesters to have easier lateral movement. ", "type": "tool", "pushedAt": "2015-08-09T08:08:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "maldev-academy/alphabeticalpolyshellgen", "name": "alphabeticalpolyshellgen", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/AlphabeticalPolyShellGen", "stars": 144, "language": "C", "description": "Generate an Alphabetical Polymorphic Shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0e4b002045bb", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [ { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "login": "mrd0x" } ], "pushedAt": "2025-08-19T00:03:55Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "t3l3machus/synergy-httpx", "name": "Synergy-httpx", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/Synergy-httpx", "id": "b3bafb87678d", "stars": 141, "language": "Python", "description": "A Python http(s) server designed to assist in red teaming activities such as receiving intercepted data via POST requests and serving content dynamically (e.g. payloads).", "type": "tool", "pushedAt": "2024-07-19T06:40:59Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "t3l3machus", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" }, { "login": "TrustArgon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45789420?v=4", "type": "User" } ] }, { "repo": "maldev-academy/trapflagforsyscalling", "name": "trapflagforsyscalling", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/TrapFlagForSyscalling", "stars": 140, "language": "C", "description": "Bypass user-land hooks by syscall tampering via the Trap Flag", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e2adadf5984", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [ { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "login": "mrd0x" } ], "pushedAt": "2025-08-25T15:14:16Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "mrd0x/dll_inject_vs_binaries", "name": "dll_inject_vs_binaries", "owner": "mrd0x", "url": "https://github.com/mrd0x/dll_inject_vs_binaries", "stars": 139, "language": null, "description": "LOLBINs that inject a DLL into a given process ID.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b6c6bc463152", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-21T22:26:20Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "marco-lancini/docker_offensive_elk", "name": "docker_offensive_elk", "owner": "marco-lancini", "url": "https://github.com/marco-lancini/docker_offensive_elk", "stars": 139, "language": "Python", "description": "Elasticsearch for Offensive Security", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Lancini", "cardId": "f546fb7b871cb152", "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9a58ae18366b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-08-21T17:08:48Z", "archived": false, "topContributors": [ { "login": "marco-lancini", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4", "type": "User" }, { "login": "lprat", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1132448?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2024-20656", "name": "cve-2024-20656", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2024-20656", "stars": 136, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cfa0ccdbf940", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-14T07:14:33Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "volexity/donut-decryptor", "name": "donut-decryptor", "owner": "volexity", "url": "https://github.com/volexity/donut-decryptor", "id": "e06c15396dfe", "stars": 136, "language": "Python", "description": "Retrieve inner payloads from Donut samples", "type": "tool", "pushedAt": "2026-03-12T14:59:40Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Volexity", "cardId": "287b5e6a3295a883", "avatar": "https://avatars.githubusercontent.com/u/61506761?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "alexkornitzer", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2750747?v=4", "type": "User" }, { "login": "tlansec", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5901749?v=4", "type": "User" }, { "login": "Oldetymer", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/29313221?v=4", "type": "User" } ] }, { "repo": "hacksysteam/exploitation", "name": "Exploitation", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/Exploitation", "id": "9cca2f7c98c4", "stars": 136, "language": "C", "description": "Windows Software Exploitation", "type": "tool", "pushedAt": "2017-02-14T13:10:35Z", "archived": false, "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hacksysteam", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "noperator/panos-scanner", "name": "panos-scanner", "owner": "noperator", "url": "https://github.com/noperator/panos-scanner", "stars": 134, "language": "Python", "description": "Determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface.", "type": "tool", "lanes": [ "2" ], "author": { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1dbcf0c66029", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2024-06-25T09:34:14Z", "archived": false, "topContributors": [ { "login": "noperator", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" }, { "login": "k4nfr3", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/45294916?v=4", "type": "User" }, { "login": "hcompleto", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35241059?v=4", "type": "User" }, { "login": "foxinSOCKS5", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/49213179?v=4", "type": "User" } ] }, { "repo": "botherder/pcqf", "name": "pcqf", "owner": "botherder", "url": "https://github.com/botherder/pcqf", "stars": 134, "language": "Go", "description": "pcqf (PC Quick Forensics) helps quickly gathering forensic evidence from Windows, Mac, and Linux systems, in order to identify potential traces of compromise.", "type": "tool", "lanes": [ "2" ], "author": { "name": "nex", "cardId": "ebbd5cd763363431", "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "99968d64d385", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-07T02:44:09Z", "archived": false, "topContributors": [ { "login": "botherder", "c": 116, "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4", "type": "User" } ] }, { "repo": "0vercl0k/sic", "name": "sic", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/sic", "id": "f05269f1899b", "stars": 134, "language": "C", "description": "Enumerate user mode shared memory mappings on Windows.", "type": "tool", "pushedAt": "2021-02-14T22:42:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0vercl0k", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "specterops/jamfhound", "name": "JamfHound", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/JamfHound", "id": "3fc8c9962563", "stars": 134, "language": "Python", "description": "JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by outputting data as JSON for ingestion into BloodHound.", "type": "tool", "pushedAt": "2026-04-23T17:05:31Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "so-lcain", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/139277715?v=4", "type": "User" }, { "login": "JonasBK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "Scoubi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7934465?v=4", "type": "User" } ] }, { "repo": "octoberfest7/eventvieweruac_bof", "name": "eventvieweruac_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/EventViewerUAC_BOF", "stars": 133, "language": "C", "description": "Beacon Object File implementation of Event Viewer deserialization UAC bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b4de62d29ef", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-06T17:43:05Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-templates-labs", "name": "nuclei-templates-labs", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-templates-labs", "stars": 133, "language": "Dockerfile", "description": "Vulnerable environments paired with ready-to-use Nuclei templates for security testing and learning! 🚀", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dd10addaa25c", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 10, "contributors": [ { "name": "Ritik Chaddha(pwn_box)", "cardId": "299fee9afcdc8350", "avatar": "https://avatars.githubusercontent.com/u/44563978?v=4", "login": "ritikchaddha" }, { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2025-07-30T09:38:33Z", "archived": false, "topContributors": [ { "login": "DhiyaneshGeek", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/24750220?v=4", "type": "User" }, { "login": "riteshs4hu", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/118372301?v=4", "type": "User" }, { "login": "princechaddha", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/16654365?v=4", "type": "User" }, { "login": "pussycat0x", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/65701233?v=4", "type": "User" }, { "login": "domwhewell-sage", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/122788350?v=4", "type": "User" }, { "login": "abdilahrf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6015012?v=4", "type": "User" }, { "login": "rxerium", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59293085?v=4", "type": "User" }, { "login": "ritikchaddha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44563978?v=4", "type": "User" }, { "login": "sammiee5311", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56215891?v=4", "type": "User" }, { "login": "ehsandeep", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" } ] }, { "repo": "hasherezade/antianalysis_demos", "name": "antianalysis_demos", "owner": "hasherezade", "url": "https://github.com/hasherezade/antianalysis_demos", "stars": 132, "language": "C++", "description": "Set of antianalysis techniques found in malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9dc08a731cfc", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-08-25T13:50:57Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" }, { "login": "rafael-santiago", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7308777?v=4", "type": "User" } ] }, { "repo": "4osp3l/bydef", "name": "ByDeF", "owner": "4osp3l", "url": "https://github.com/4osp3l/ByDeF", "id": "58b588503726", "stars": 132, "language": "Python", "description": "Generate an undetectable PE ( .exe ), which bypasses windows defender / AV", "type": "tool", "pushedAt": "2025-05-12T10:32:08Z", "archived": false, "lanes": [ "2" ], "author": { "name": "4osp3l", "cardId": "6612479a39124d6e", "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "4osp3l", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4", "type": "User" } ] }, { "repo": "boku7/winx64-injectallprocessesmeterpreter-shellcode", "name": "winx64-injectallprocessesmeterpreter-shellcode", "owner": "boku7", "url": "https://github.com/boku7/winx64-InjectAllProcessesMeterpreter-Shellcode", "stars": 131, "language": "Assembly", "description": "64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a253c892f046", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:54:29Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "0vercl0k/zenith", "name": "zenith", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/zenith", "id": "0b7975b74e41", "stars": 131, "language": "Python", "description": "Zenith exploits a memory corruption vulnerability in the NetUSB driver to get remote-code execution on the TP-Link Archer C7 V5 router for Pwn2Own Austin 2021.", "type": "tool", "pushedAt": "2022-04-25T00:57:56Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0vercl0k", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "trustedsec/ships", "name": "SHIPS", "owner": "trustedsec", "url": "https://github.com/trustedsec/SHIPS", "id": "574ab10cd3e9", "stars": 131, "language": "JavaScript", "description": "The Shared Host Integrated Password System (SHIPS) is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate ", "type": "tool", "pushedAt": "2018-01-28T03:27:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "s0md3v/shiva", "name": "shiva", "owner": "s0md3v", "url": "https://github.com/s0md3v/Shiva", "stars": 130, "language": "Python", "description": "Improved DOS exploit for wordpress websites (CVE-2018-6389)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0d9ec30e41c2", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2020-10-01T11:51:46Z", "archived": false, "topContributors": [ { "login": "s0md3v", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" } ] }, { "repo": "j3ssie/sdlookup", "name": "sdlookup", "owner": "j3ssie", "url": "https://github.com/j3ssie/sdlookup", "id": "a4381f17f430", "stars": 130, "language": "Go", "description": "IP Lookups for Open Ports and Vulnerabilities from internetdb.shodan.io", "type": "tool", "pushedAt": "2022-03-10T03:28:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jessie Ho (j3ssie)", "cardId": "65ab17084a41e33e", "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "j3ssie", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/23289085?v=4", "type": "User" } ] }, { "repo": "trustedsec/cors-poc", "name": "cors-poc", "owner": "trustedsec", "url": "https://github.com/trustedsec/cors-poc", "id": "99c5859b16e8", "stars": 130, "language": "HTML", "description": "", "type": "tool", "pushedAt": "2018-04-02T20:30:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ryman1", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8972914?v=4", "type": "User" } ] }, { "repo": "maldev-academy/alphabetfuscation", "name": "alphabetfuscation", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/Alphabetfuscation", "stars": 129, "language": "C", "description": "Convert your shellcode into an ASCII string", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54894e8619bb", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-06-27T03:28:10Z", "archived": false, "topContributors": [] }, { "repo": "leonov-av/vulristics", "name": "vulristics", "owner": "leonov-av", "url": "https://github.com/leonov-av/vulristics", "id": "25637427dd60", "stars": 129, "language": "Python", "description": "Extensible framework for analyzing publicly available information about vulnerabilities", "type": "tool", "pushedAt": "2026-03-14T07:51:45Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexander Leonov", "cardId": "83e22269cef8aabb", "avatar": "https://avatars.githubusercontent.com/u/6882372?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "leonov-av", "c": 258, "avatar": "https://avatars.githubusercontent.com/u/6882372?v=4", "type": "User" }, { "login": "InqWi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1362317?v=4", "type": "User" }, { "login": "dvppvd", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/119556950?v=4", "type": "User" } ] }, { "repo": "octoberfest7/mutants_sessions_self-deletion", "name": "mutants_sessions_self-deletion", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/Mutants_Sessions_Self-Deletion", "stars": 128, "language": "C", "description": "Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4a4fb89bd4a0", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-24T22:50:56Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "eversinc33/psxecute", "name": "PSXecute", "owner": "eversinc33", "url": "https://github.com/eversinc33/PSXecute", "id": "33585358bfc7", "stars": 128, "language": "C++", "description": "MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.", "type": "tool", "pushedAt": "2024-12-06T15:22:39Z", "archived": false, "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "eversinc33", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "octoberfest7/enumprotections_bof", "name": "enumprotections_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/Enumprotections_BOF", "stars": 126, "language": "C", "description": "A BOF to enumerate system process, their protection levels, and more.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "873d840a539f", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-27T14:27:09Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "eversinc33/gpudecryptshellcode", "name": "gpudecryptshellcode", "owner": "eversinc33", "url": "https://github.com/eversinc33/GpuDecryptShellcode", "stars": 126, "language": "C++", "description": "XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8dec9efb2d47", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-22T04:49:43Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "oliviagallucci/expensive", "name": "expensive", "owner": "oliviagallucci", "url": "https://github.com/oliviagallucci/expensive", "stars": 2, "language": null, "description": "An offensive ARM tool for small data collection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Olivia Gallucci", "cardId": "c6e54d215f52525b", "avatar": "https://avatars.githubusercontent.com/u/63474548?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9af2c57c5582", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-22T16:45:43Z", "archived": false, "topContributors": [ { "login": "oliviagallucci", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/63474548?v=4", "type": "User" } ] }, { "repo": "bugch3ck/imposter", "name": "imposter", "owner": "bugch3ck", "url": "https://github.com/bugch3ck/imposter", "stars": 2, "language": "Python", "description": "Proof of concept for CVE-2015-0006. Fixed in MS15-005 https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-005 .", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a05657a2286f", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2014-06-07T23:45:44Z", "archived": false, "topContributors": [ { "login": "bugch3ck", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" } ] }, { "repo": "0sm0s1z/cerberus", "name": "cerberus", "owner": "0sm0s1z", "url": "https://github.com/0sm0s1z/Cerberus", "stars": 2, "language": "Python", "description": "A framework for modular C2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Toussain", "cardId": "9174f5db04dc7b94", "avatar": "https://avatars.githubusercontent.com/u/11495216?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "208f9062794e", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-03-16T04:14:24Z", "archived": false, "topContributors": [ { "login": "0sm0s1z", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/11495216?v=4", "type": "User" } ] }, { "repo": "iagox86/snakeyaml-poc", "name": "snakeyaml-poc", "owner": "iagox86", "url": "https://github.com/iagox86/snakeyaml-poc", "stars": 2, "language": "Java", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ron Bowes", "cardId": "06b5b8536124c5dc", "avatar": "https://avatars.githubusercontent.com/u/526412?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d771b60e81b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-20T20:23:44Z", "archived": false, "topContributors": [ { "login": "iagox86", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/526412?v=4", "type": "User" } ] }, { "repo": "d4stiny/xss-vulnerabilities", "name": "xss-vulnerabilities", "owner": "d4stiny", "url": "https://github.com/D4stiny/XSS-Vulnerabilities", "stars": 2, "language": null, "description": "This is my repository where I publicly disclose vulnerabilities in different software. Before releasing anything, I always try to go for responsible disclosure.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bill Demirkapi", "cardId": "0aa65748a3db2aa0", "avatar": "https://avatars.githubusercontent.com/u/16182786?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "900f071d4a3a", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-02-22T22:09:32Z", "archived": false, "topContributors": [] }, { "repo": "olafhartong/disposable-windows", "name": "disposable-windows", "owner": "olafhartong", "url": "https://github.com/olafhartong/disposable-windows", "stars": 2, "language": null, "description": "A packer project to quickly have a test / dev / IR box", "type": "tool", "lanes": [ "2" ], "author": { "name": "Olaf Hartong", "cardId": "0f33b290f82b77b4", "avatar": "https://avatars.githubusercontent.com/u/8149899?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71780420498d", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-02T10:10:35Z", "archived": false, "topContributors": [ { "login": "olafhartong", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8149899?v=4", "type": "User" } ] }, { "repo": "felmoltor/freakvulnchecker", "name": "freakvulnchecker", "owner": "felmoltor", "url": "https://github.com/felmoltor/FreakVulnChecker", "stars": 2, "language": "Shell", "description": "This script check if your list of server is accepting Export cipher suites and could be vulnerable to CVE-2015-0204", "type": "tool", "lanes": [ "2" ], "author": { "name": "Felipe Molina", "cardId": "155ccad3192fd273", "avatar": "https://avatars.githubusercontent.com/u/846513?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9e568316ce3e", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-03-04T14:47:02Z", "archived": false, "topContributors": [ { "login": "felmoltor", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/846513?v=4", "type": "User" } ] }, { "repo": "msadministrator/tweet-phish", "name": "tweet-phish", "owner": "msadministrator", "url": "https://github.com/MSAdministrator/tweet-phish", "stars": 2, "language": "Python", "description": "tweet-phish is a Python package and CLI tool to tweet about identified phishing websites", "type": "tool", "lanes": [ "2" ], "author": { "name": "Josh Rickard", "cardId": "28115b6ac479863d", "avatar": "https://avatars.githubusercontent.com/u/10687261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b385b16ba477", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-22T20:59:35Z", "archived": false, "topContributors": [ { "login": "MSAdministrator", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/10687261?v=4", "type": "User" } ] }, { "repo": "albertzsigovits/malware-cfg", "name": "malware-cfg", "owner": "albertzsigovits", "url": "https://github.com/albertzsigovits/malware-cfg", "stars": 2, "language": null, "description": "Malware Configuration Extractors", "type": "tool", "lanes": [ "2" ], "author": { "name": "Albert Zsigovits", "cardId": "2a4da9aee5212d4b", "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cc96aaa906e1", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-01T11:38:23Z", "archived": false, "topContributors": [ { "login": "albertzsigovits", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/45513754?v=4", "type": "User" } ] }, { "repo": "xorrior/poseidonc2", "name": "poseidonc2", "owner": "xorrior", "url": "https://github.com/xorrior/poseidonC2", "stars": 2, "language": "Go", "description": "External C2 server for poseidon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Ross", "cardId": "3b1335bb84b1bb5a", "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc81953e529b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-12T13:55:35Z", "archived": false, "topContributors": [ { "login": "xorrior", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/9156069?v=4", "type": "User" } ] }, { "repo": "ericevenchick/canrelay", "name": "canrelay", "owner": "ericevenchick", "url": "https://github.com/ericevenchick/CANRelay", "stars": 2, "language": "C", "description": "A S08 based CAN controlled relay driver.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eric Evenchick", "cardId": "3d851b36a8962314", "avatar": "https://avatars.githubusercontent.com/u/195032?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9d631a886211", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-03-23T23:35:16Z", "archived": false, "topContributors": [ { "login": "ericevenchick", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/195032?v=4", "type": "User" } ] }, { "repo": "yossisassi/get-logonsessionfromdomaincontroller", "name": "get-logonsessionfromdomaincontroller", "owner": "yossisassi", "url": "https://github.com/YossiSassi/Get-LogonSessionFromDomainController", "stars": 2, "language": "PowerShell", "description": "Get Logon Sessions from Domain Controllers, providing a quick overview of which accounts recently communicated directly with any DC in an AD domain, via any Authentication protocol or service.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Yossi Sassi", "cardId": "3ebe28f11d191f85", "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6ad0b3c86f63", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-04T19:08:52Z", "archived": false, "topContributors": [ { "login": "YossiSassi", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/23126190?v=4", "type": "User" } ] }, { "repo": "int0x80/vulnerable-ssrf-flask-app", "name": "vulnerable-ssrf-flask-app", "owner": "int0x80", "url": "https://github.com/int0x80/vulnerable-ssrf-flask-app", "stars": 2, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "int eighty (of Dual Core)", "cardId": "42ee65b22947d16c", "avatar": "https://avatars.githubusercontent.com/u/1061032?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d1034bc0c684", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-03T15:59:37Z", "archived": false, "topContributors": [ { "login": "int0x80", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1061032?v=4", "type": "User" } ] }, { "repo": "rev10d/userenum", "name": "userenum", "owner": "rev10d", "url": "https://github.com/rev10d/UserEnum", "stars": 2, "language": "PowerShell", "description": "No access to AD Commandlets, so iterate a userlist using \"net user $user /domain\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jordan Drysdale", "cardId": "4a77f21a67d51faa", "avatar": "https://avatars.githubusercontent.com/u/31927659?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f63fafb755c8", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-12T18:04:12Z", "archived": false, "topContributors": [ { "login": "rev10d", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31927659?v=4", "type": "User" } ] }, { "repo": "shipcod3/cve-2025-48466", "name": "cve-2025-48466", "owner": "shipcod3", "url": "https://github.com/shipcod3/CVE-2025-48466", "stars": 2, "language": "Python", "description": "Modbus Packet Injection on Advantech WISE 4060LAN / IoT Gateway for door control", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "074c50569eac", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-19T05:35:54Z", "archived": false, "topContributors": [ { "login": "shipcod3", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" } ] }, { "repo": "wunderwuzzi23/shadowbunny", "name": "shadowbunny", "owner": "wunderwuzzi23", "url": "https://github.com/wunderwuzzi23/shadowbunny", "stars": 2, "language": null, "description": "Shadowbunny - Leveraging Virtual Machines for Lateral Movement", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johann Rehberger", "cardId": "549d2d53d4f9b03f", "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "75c14b9e2513", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-23T20:18:19Z", "archived": false, "topContributors": [ { "login": "wunderwuzzi23", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/35349594?v=4", "type": "User" } ] }, { "repo": "ald3ns/lightspy-emulation", "name": "lightspy-emulation", "owner": "ald3ns", "url": "https://github.com/ald3ns/lightspy-emulation", "stars": 2, "language": null, "description": "A reimplementation of the LightSpy malware targeting both macOS and iOS.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alden Schmidt", "cardId": "561e312abc707a44", "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "264b9fe23ecc", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-06T21:50:39Z", "archived": false, "topContributors": [ { "login": "ald3ns", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17280789?v=4", "type": "User" } ] }, { "repo": "joswr1ght/officeinfiltration", "name": "officeinfiltration", "owner": "joswr1ght", "url": "https://github.com/joswr1ght/officeinfiltration", "stars": 2, "language": "HTML", "description": "An AI prompt injection game to infiltrate an office building.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joshua Wright", "cardId": "6a36ba135603772e", "avatar": "https://avatars.githubusercontent.com/u/1318817?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d6595a76222b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-26T12:55:56Z", "archived": false, "topContributors": [ { "login": "joswr1ght", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/1318817?v=4", "type": "User" } ] }, { "repo": "antonio-morales/oss-fuzz-dumps", "name": "oss-fuzz-dumps", "owner": "antonio-morales", "url": "https://github.com/antonio-morales/OSS-FUZZ-dumps", "stars": 2, "language": null, "description": "Oss-Fuzz dumps", "type": "tool", "lanes": [ "2" ], "author": { "name": "Antonio Morales", "cardId": "82c53420e78c6b2b", "avatar": "https://avatars.githubusercontent.com/u/55253029?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "503f00b078a1", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2023-01-02T01:49:39Z", "archived": false, "topContributors": [] }, { "repo": "themalwareguardian/cve-2026-31431", "name": "cve-2026-31431", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/CVE-2026-31431", "stars": 2, "language": null, "description": "A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its exploitation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "53829d1748b7", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-05T10:07:55Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/cve-2026-33439", "name": "cve-2026-33439", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/CVE-2026-33439", "stars": 2, "language": "Python", "description": "First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0379dc549705", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-01T10:23:38Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/cve-2025-70330", "name": "cve-2025-70330", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/CVE-2025-70330", "stars": 2, "language": "Python", "description": "Easy Grade Pro 4.1 file parsing bug used as an educational example to show how beginners can start vulnerability research through reverse engineering.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "629c897d4f03", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-23T11:39:07Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/brokeclaudia", "name": "brokeclaudia", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/brokeCLAUDIA", "stars": 2, "language": "Python", "description": "CVE-2025-41090 (brokeCLAUDIA): Broken access control in microCLAUDIA, the anti-ransomware platform by CCN-CERT.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a96e5c3ce600", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-10T09:26:44Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "0sm0s1z/malleablec2-spoof", "name": "malleablec2-spoof", "owner": "0sm0s1z", "url": "https://github.com/0sm0s1z/MalleableC2-Spoof", "stars": 2, "language": "JavaScript", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Toussain", "cardId": "9174f5db04dc7b94", "avatar": "https://avatars.githubusercontent.com/u/11495216?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c8958362fa4b", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-17T21:26:35Z", "archived": false, "topContributors": [ { "login": "sec460-lab", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68244966?v=4", "type": "User" } ] }, { "repo": "myrtus0x0/shamoonpublicwork", "name": "shamoonpublicwork", "owner": "myrtus0x0", "url": "https://github.com/myrtus0x0/ShamoonPublicWork", "stars": 2, "language": "Python", "description": "All work pertaining to my research on the Shamoon malware family", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pim Trouerbach", "cardId": "9dfd42770310939f", "avatar": "https://avatars.githubusercontent.com/u/48422337?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "20d89e5fa445", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-21T20:25:54Z", "archived": false, "topContributors": [ { "login": "myrtus0x0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48422337?v=4", "type": "User" } ] }, { "repo": "standash/foss-vuln-tracker", "name": "foss-vuln-tracker", "owner": "standash", "url": "https://github.com/standash/foss-vuln-tracker", "stars": 2, "language": "Java", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stanislav Dashevskyi", "cardId": "a47504cb37f114c9", "avatar": "https://avatars.githubusercontent.com/u/8415231?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e2aee2bc59d", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-09-18T19:19:43Z", "archived": false, "topContributors": [ { "login": "standash", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/8415231?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "hetti/poc-exploitchain-gs-vbox-dirtycow-", "name": "poc-exploitchain-gs-vbox-dirtycow-", "owner": "hetti", "url": "https://github.com/Hetti/PoC-Exploitchain-GS-VBox-DirtyCow-", "stars": 2, "language": "Python", "description": "Exploitchain of my livedemo from my Security Expedition in b0rkenland talk", "type": "tool", "lanes": [ "2" ], "author": { "name": "Hetti", "cardId": "af38971fee9e36d3", "avatar": "https://avatars.githubusercontent.com/u/3261408?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "958ff6ef9487", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-01-12T23:07:17Z", "archived": false, "topContributors": [ { "login": "Hetti", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3261408?v=4", "type": "User" } ] }, { "repo": "securelyfitz/solderpeek", "name": "solderpeek", "owner": "securelyfitz", "url": "https://github.com/securelyfitz/solderpeek", "stars": 2, "language": null, "description": "SOLDERPEEK JTAG implant to work with SAVIORBURST malware persistence, part of the NSA Playser", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joe FitzPatrick", "cardId": "d663a330aa5b4baf", "avatar": "https://avatars.githubusercontent.com/u/5185686?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "960581146b8e", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-07-06T02:24:05Z", "archived": false, "topContributors": [ { "login": "securelyfitz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5185686?v=4", "type": "User" } ] }, { "repo": "tijme/ivanti-cve-2023-35080-privilege-escalation-bof", "name": "ivanti-cve-2023-35080-privilege-escalation-bof", "owner": "tijme", "url": "https://github.com/tijme/ivanti-cve-2023-35080-privilege-escalation-bof", "stars": 2, "language": "C", "description": "Ivanti Secure Access (previously Pulse Secure) privilege escalation Cobalt Strike BOF (CVE-2023-35080).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "520938452c6a", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-12-05T09:17:20Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" }, { "login": "DaWouw", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1709023?v=4", "type": "User" } ] }, { "repo": "qazbnm456/cve-reverser", "name": "cve-reverser", "owner": "qazbnm456", "url": "https://github.com/qazbnm456/cve-reverser", "stars": 2, "language": "Python", "description": "An autonomous RLM agent that reverses disclosed CVEs from their public patches into local-lab PoCs and Nuclei detection templates.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Syue Siang Su", "cardId": "dceb1ee2dff85d88", "avatar": "https://avatars.githubusercontent.com/u/6451933?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aac97b965515", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-15T14:57:53Z", "archived": false, "topContributors": [ { "login": "qazbnm456", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/6451933?v=4", "type": "User" } ] }, { "repo": "actuator/bsides-security-las-vegas-2024", "name": "bsides-security-las-vegas-2024", "owner": "actuator", "url": "https://github.com/actuator/BSIDES-Security-Las-Vegas-2024", "stars": 2, "language": null, "description": "CVE Hunting: Wi-Fi Routers, OSINT & ‘The Tyranny of the Default’", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1cf1f313262d", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-11T05:27:34Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.altamirano.fabricio.tvbrowser", "name": "com.altamirano.fabricio.tvbrowser", "owner": "actuator", "url": "https://github.com/actuator/com.altamirano.fabricio.tvbrowser", "stars": 2, "language": null, "description": "CVE-2023-47883", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bbfd47a0d613", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-17T02:34:41Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "danmcinerney/pickle-inject", "name": "pickle-inject", "owner": "danmcinerney", "url": "https://github.com/DanMcInerney/pickle-inject", "stars": 2, "language": "Python", "description": "Payload pickle models with custom commands", "type": "tool", "lanes": [ "2" ], "author": { "name": "Dan McInerney", "cardId": "f08c2b744447b89e", "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "526c9ab617d5", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-12T19:30:51Z", "archived": false, "topContributors": [ { "login": "DanMcInerney", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1813669?v=4", "type": "User" } ] }, { "repo": "bw3ll/shellcode-samples", "name": "shellcode-samples", "owner": "bw3ll", "url": "https://github.com/Bw3ll/shellcode-samples", "stars": 2, "language": null, "description": "Ongoing collection of shellcode samples to be added to. Password: shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "A. Babcock", "cardId": "f364e4e6e4d25194", "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bdfb3379ed50", "score": 19, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-12T00:54:12Z", "archived": false, "topContributors": [ { "login": "Bw3ll", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/49998815?v=4", "type": "User" } ] }, { "repo": "blasty/cve-2021-3156", "name": "cve-2021-3156", "owner": "blasty", "url": "https://github.com/blasty/CVE-2021-3156", "stars": 1016, "language": "C", "description": "", "type": "tool", "lanes": [ "1" ], "author": { "name": "blasty", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2022/06/18/htb-paper.html", "title": "HTB: Paper", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/07/09/htb-routerspace.html", "title": "HTB: RouterSpace", "person": "0xdf" } ], "referencedCount": 2, "id": "63c440b3b80f", "score": 18, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-02-02T17:07:09Z", "archived": false, "topContributors": [ { "login": "blasty", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/101374?v=4", "type": "User" }, { "login": "TheZ3ro", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/686894?v=4", "type": "User" } ] }, { "repo": "coreboot/seabios", "name": "seabios", "owner": "coreboot", "url": "https://github.com/coreboot/seabios", "stars": 515, "language": "C", "description": "Read-only mirror of https://git.seabios.org/seabios.git. We don't handle pull requests.", "type": "tool", "lanes": [ "1" ], "author": { "name": "coreboot", "cardId": null }, "referencedBy": [ { "url": "https://n0.lol/notes/uefi-apps-for-cute-elves-with-swords/", "title": "UEFI Applications for Cute Elves With Swords", "person": "netspooky" }, { "url": "https://n0.lol/uefi420/", "title": "BGGP4: A 420 Byte Self-Replicating UEFI App For x64", "person": "netspooky" } ], "referencedCount": 2, "id": "fda913f28849", "score": 18, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 75, "contributors": [], "pushedAt": "2026-07-08T21:03:03Z", "archived": false, "topContributors": [ { "login": "KevinOConnor", "c": 1952, "avatar": "https://avatars.githubusercontent.com/u/3004890?v=4", "type": "User" }, { "login": "kraxel", "c": 226, "avatar": "https://avatars.githubusercontent.com/u/2860401?v=4", "type": "User" }, { "login": "stefanberger", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/1873348?v=4", "type": "User" }, { "login": "bonzini", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/42082?v=4", "type": "User" }, { "login": "austriancoder", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/226420?v=4", "type": "User" }, { "login": "ehabkost", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/27336?v=4", "type": "User" }, { "login": "mstsirkin", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/1062804?v=4", "type": "User" }, { "login": "danielverkamp", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1274088?v=4", "type": "User" }, { "login": "rvka", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/10214432?v=4", "type": "User" }, { "login": "nickysn", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/22420132?v=4", "type": "User" }, { "login": "dwmw2", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/911239?v=4", "type": "User" }, { "login": "MrChromebox", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/948902?v=4", "type": "User" }, { "login": "paulmenzel", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9318792?v=4", "type": "User" }, { "login": "mcayland", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1729603?v=4", "type": "User" }, { "login": "ADIsdouthit", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9808026?v=4", "type": "User" }, { "login": "siro20", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2340747?v=4", "type": "User" }, { "login": "marcel-apf", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6134703?v=4", "type": "User" }, { "login": "elmarco", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9381?v=4", "type": "User" }, { "login": "FlyGoat", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5955297?v=4", "type": "User" }, { "login": "agraf", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/367209?v=4", "type": "User" }, { "login": "zuban32", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5961104?v=4", "type": "User" }, { "login": "Andy-Pei-666", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/84007646?v=4", "type": "User" }, { "login": "hreinecke", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/995545?v=4", "type": "User" }, { "login": "jan-kiszka", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1571330?v=4", "type": "User" }, { "login": "NilsJacobs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1663291?v=4", "type": "User" }, { "login": "ukleinek", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5037590?v=4", "type": "User" }, { "login": "phcoder", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/105672?v=4", "type": "User" }, { "login": "fengidri", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3820861?v=4", "type": "User" }, { "login": "stweil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6734573?v=4", "type": "User" }, { "login": "royger", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/219671?v=4", "type": "User" } ] }, { "repo": "octoberfest7/dscourier_bof", "name": "dscourier_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/DSCourier_BOF", "stars": 90, "language": "C++", "description": "BOF POC of the DSCourier project / invoking WinGet via COM", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [ { "url": "https://ipurple.team/2026/06/09/winget/", "title": "WinGet", "person": "Panos Gkatziroulis 🦄" } ], "referencedCount": 1, "id": "da5103faf328", "score": 18, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-23T20:37:46Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "andresriancho/enumerate-iam", "name": "enumerate-iam", "owner": "andresriancho", "url": "https://github.com/andresriancho/enumerate-iam", "id": "e3205c6e3026", "stars": 1248, "language": "Python", "description": "Enumerate the permissions associated with AWS credential set", "type": "tool", "pushedAt": "2024-02-05T20:53:34Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "andresriancho", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Yassine Aboukir", "cardId": "6ed6d4438b320670", "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "login": "yassineaboukir" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "andresriancho", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/865200?v=4", "type": "User" }, { "login": "yassineaboukir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9937267?v=4", "type": "User" }, { "login": "xiaozhu1337", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50901869?v=4", "type": "User" } ] }, { "repo": "optiv/mangle", "name": "Mangle", "owner": "optiv", "url": "https://github.com/optiv/Mangle", "id": "82b785d5e697", "stars": 1237, "language": "Go", "description": "Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs", "type": "tool", "pushedAt": "2023-08-18T17:36:36Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "optiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Tylous", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "vysecurity/linkedint", "name": "LinkedInt", "owner": "vysecurity", "url": "https://github.com/vysecurity/LinkedInt", "id": "2ca4ee939a53", "stars": 1208, "language": "Python", "description": "LinkedIn Recon Tool", "type": "tool", "pushedAt": "2023-03-06T13:05:38Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "vysecurity", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "vysecurity", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/3596242?v=4", "type": "User" }, { "login": "leesoh", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1276654?v=4", "type": "User" }, { "login": "SamSepiol0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/50595045?v=4", "type": "User" }, { "login": "thatonesecguy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34110198?v=4", "type": "User" }, { "login": "vysec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "lem0nsec/shellghost", "name": "ShellGhost", "owner": "lem0nSec", "url": "https://github.com/lem0nSec/ShellGhost", "id": "2b86376b4bc0", "stars": 1201, "language": "C", "description": "A memory-based evasion technique which makes shellcode invisible from process start to end.", "type": "tool", "pushedAt": "2023-10-16T06:40:24Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "lem0nSec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "lem0nSec", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/98479572?v=4", "type": "User" } ] }, { "repo": "owasp/joomscan", "name": "joomscan", "owner": "OWASP", "url": "https://github.com/OWASP/joomscan", "id": "7cae42f573ec", "stars": 1192, "language": "Raku", "description": "OWASP Joomla Vulnerability Scanner Project https://www.secologist.com/", "type": "tool", "pushedAt": "2024-09-11T09:08:50Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "OWASP", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "login": "random-robbie" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 15, "topContributors": [ { "login": "rezasp", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/12808790?v=4", "type": "User" }, { "login": "mostafahussein", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/4104127?v=4", "type": "User" }, { "login": "hack-tramp", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/53376845?v=4", "type": "User" }, { "login": "pes-soft", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13953259?v=4", "type": "User" }, { "login": "Yuya-Miyoshi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/55824087?v=4", "type": "User" }, { "login": "ajdumanhug", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9420289?v=4", "type": "User" }, { "login": "voidz0r", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1032286?v=4", "type": "User" }, { "login": "jcesarstef", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7440611?v=4", "type": "User" }, { "login": "DavidAngelos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26779653?v=4", "type": "User" }, { "login": "EnDe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/103866?v=4", "type": "User" }, { "login": "gdestuynder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/956866?v=4", "type": "User" }, { "login": "duraki", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5892610?v=4", "type": "User" }, { "login": "eXtrem0us", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7892702?v=4", "type": "User" }, { "login": "random-robbie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "multiflexi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11663844?v=4", "type": "User" } ] }, { "repo": "dionach/cmsmap", "name": "CMSmap", "owner": "dionach", "url": "https://github.com/dionach/CMSmap", "id": "c357dc55a87b", "stars": 1172, "language": "Python", "description": "CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs. ", "type": "tool", "pushedAt": "2021-12-01T05:48:48Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "dionach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "m7x", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5778033?v=4", "type": "User" } ] }, { "repo": "xillwillx/skiptracer", "name": "skiptracer", "owner": "xillwillx", "url": "https://github.com/xillwillx/skiptracer", "id": "c6648909b61c", "stars": 1145, "language": "Python", "description": "OSINT python webscaping framework", "type": "tool", "pushedAt": "2022-12-08T11:00:49Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "xillwillx", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "rpigu-i", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/8628078?v=4", "type": "User" }, { "login": "subinacls", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/2488906?v=4", "type": "User" }, { "login": "xillwillx", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/2845406?v=4", "type": "User" }, { "login": "xShuden", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3766764?v=4", "type": "User" }, { "login": "sietekk", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/11478589?v=4", "type": "User" }, { "login": "enki-1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30440711?v=4", "type": "User" } ] }, { "repo": "nccgroup/sniffle", "name": "Sniffle", "owner": "nccgroup", "url": "https://github.com/nccgroup/Sniffle", "id": "25ac6ea0da17", "stars": 1143, "language": "Python", "description": "A sniffer for Bluetooth 5 and 4.x LE", "type": "tool", "pushedAt": "2025-09-25T01:32:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Xeno Kovah", "cardId": "01c7d5b2bb1c2884", "avatar": "https://avatars.githubusercontent.com/u/92380610?v=4", "login": "XenoKovah" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "sultanqasim", "c": 548, "avatar": "https://avatars.githubusercontent.com/u/3085708?v=4", "type": "User" }, { "login": "jaylogue", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/636485?v=4", "type": "User" }, { "login": "mdxs", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1143642?v=4", "type": "User" }, { "login": "JahazielLem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13388115?v=4", "type": "User" }, { "login": "stevewillson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16231226?v=4", "type": "User" }, { "login": "XenoKovah", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/92380610?v=4", "type": "User" }, { "login": "froloffw7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69122526?v=4", "type": "User" } ] }, { "repo": "fox-it/dissect", "name": "dissect", "owner": "fox-it", "url": "https://github.com/fox-it/dissect", "id": "6b64d5f61aaf", "stars": 1130, "language": null, "description": "Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part ", "type": "tool", "pushedAt": "2026-02-25T14:09:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "pyrco", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/105293448?v=4", "type": "User" }, { "login": "Miauwkeru", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2276622?v=4", "type": "User" }, { "login": "Schamper", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/1254028?v=4", "type": "User" }, { "login": "Horofic", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9864602?v=4", "type": "User" }, { "login": "twiggler", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12800443?v=4", "type": "User" }, { "login": "bobkarreman", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/348347?v=4", "type": "User" }, { "login": "Ad-Blokker", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14195799?v=4", "type": "User" }, { "login": "DissectBot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116729393?v=4", "type": "User" }, { "login": "narimantos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4371732?v=4", "type": "User" } ] }, { "repo": "hausec/adape-script", "name": "ADAPE-Script", "owner": "hausec", "url": "https://github.com/hausec/ADAPE-Script", "id": "add60180431e", "stars": 1127, "language": "PowerShell", "description": "Active Directory Assessment and Privilege Escalation Script", "type": "tool", "pushedAt": "2022-12-07T16:29:57Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "hausec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hausec", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/33264718?v=4", "type": "User" }, { "login": "the-rileyj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19544973?v=4", "type": "User" } ] }, { "repo": "redsiege/c2concealer", "name": "C2concealer", "owner": "RedSiege", "url": "https://github.com/RedSiege/C2concealer", "id": "110e4729afb0", "stars": 1123, "language": "Python", "description": "C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.", "type": "tool", "pushedAt": "2026-04-13T19:51:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "RedSiege", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Mike Saunders", "cardId": "8690ce549fc2a84f", "avatar": "https://avatars.githubusercontent.com/u/8193110?v=4", "login": "hardwaterhacker" }, { "name": "Christopher Truncer", "cardId": "b422714966d948cf", "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "login": "ChrisTruncer" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "hardwaterhacker", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/8193110?v=4", "type": "User" }, { "login": "ChrisTruncer", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "type": "User" }, { "login": "sneakerhax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8846726?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/o365-attack-toolkit", "name": "o365-attack-toolkit", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/o365-attack-toolkit", "id": "3caddad16702", "stars": 1123, "language": "Go", "description": "A toolkit to attack Office365", "type": "tool", "pushedAt": "2020-11-06T12:09:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "login": "0x09AL" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x09AL", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "blackhillsinfosec/wififorge", "name": "WifiForge", "owner": "blackhillsinfosec", "url": "https://github.com/blackhillsinfosec/WifiForge", "id": "c6464d858245", "stars": 1113, "language": "Python", "description": "WifiForge is a tool developed by Black Hills InfoSec to help train Pentesters on different Wi-Fi attack vectors and Wireless capabilities.", "type": "tool", "pushedAt": "2026-07-16T16:35:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Black Hills Information Security", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "her3ticAVI", "c": 365, "avatar": "https://avatars.githubusercontent.com/u/97698397?v=4", "type": "User" }, { "login": "JsphByd", "c": 273, "avatar": "https://avatars.githubusercontent.com/u/95513994?v=4", "type": "User" }, { "login": "hundotio", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/96307763?v=4", "type": "User" }, { "login": "IcyLance", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/169390814?v=4", "type": "User" }, { "login": "KAISERaustin", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/24812218?v=4", "type": "User" }, { "login": "Cour1erNVs", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/109930160?v=4", "type": "User" } ] }, { "repo": "sensepost/mana", "name": "mana", "owner": "sensepost", "url": "https://github.com/sensepost/mana", "id": "cf71d2156681", "stars": 1100, "language": "HTML", "description": "*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM", "type": "tool", "pushedAt": "2018-08-21T07:13:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "singe", "c": 82, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "rhertzog", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1013915?v=4", "type": "User" }, { "login": "ianoxian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68153498?v=4", "type": "User" }, { "login": "eknoes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3641205?v=4", "type": "User" }, { "login": "Tripex48", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32293503?v=4", "type": "User" } ] }, { "repo": "pentestmonkey/unix-privesc-check", "name": "unix-privesc-check", "owner": "pentestmonkey", "url": "https://github.com/pentestmonkey/unix-privesc-check", "id": "47da8d72ebaf", "stars": 1081, "language": "Shell", "description": "Automatically exported from code.google.com/p/unix-privesc-check", "type": "tool", "pushedAt": "2021-02-07T21:47:46Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "pentestmonkey", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "joncave", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/621103?v=4", "type": "User" }, { "login": "pentestmonkey", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/738309?v=4", "type": "User" }, { "login": "cedriczirtacic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4183810?v=4", "type": "User" }, { "login": "timb-machine", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13330917?v=4", "type": "User" } ] }, { "repo": "sysdream/chashell", "name": "chashell", "owner": "sysdream", "url": "https://github.com/sysdream/chashell", "id": "032f4025018a", "stars": 1080, "language": "Go", "description": "Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.", "type": "tool", "pushedAt": "2022-04-05T17:22:14Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sysdream", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "0xbadjuju/tokenvator", "name": "Tokenvator", "owner": "0xbadjuju", "url": "https://github.com/0xbadjuju/Tokenvator", "id": "2785adec3345", "stars": 1068, "language": "C#", "description": "A tool to elevate privilege with Windows Tokens", "type": "tool", "pushedAt": "2023-10-06T13:17:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "0xbadjuju", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xbadjuju", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/1656007?v=4", "type": "User" } ] }, { "repo": "iphelix/dnschef", "name": "dnschef", "owner": "iphelix", "url": "https://github.com/iphelix/dnschef", "id": "4a46c838e2b9", "stars": 1067, "language": "Python", "description": "DNSChef - DNS proxy for Penetration Testers and Malware Analysts", "type": "tool", "pushedAt": "2024-08-16T17:28:15Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "iphelix", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Marcello Salvati", "cardId": "b0af4b4b84755b77", "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "login": "byt3bl33d3r" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "byt3bl33d3r", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5151193?v=4", "type": "User" }, { "login": "iphelix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/887841?v=4", "type": "User" } ] }, { "repo": "synacktiv/php_filter_chain_generator", "name": "php_filter_chain_generator", "owner": "synacktiv", "url": "https://github.com/synacktiv/php_filter_chain_generator", "id": "58b5423a0890", "stars": 1059, "language": "Python", "description": "", "type": "tool", "pushedAt": "2023-01-23T02:42:57Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "remsio-syn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/110113034?v=4", "type": "User" }, { "login": "cfreal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29797456?v=4", "type": "User" } ] }, { "repo": "rastating/wordpress-exploit-framework", "name": "wordpress-exploit-framework", "owner": "rastating", "url": "https://github.com/rastating/wordpress-exploit-framework", "id": "9de775a56026", "stars": 1048, "language": "Ruby", "description": "A Ruby framework designed to aid in the penetration testing of WordPress systems. ", "type": "tool", "pushedAt": "2019-11-24T19:04:44Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "rastating", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "rastating", "c": 890, "avatar": "https://avatars.githubusercontent.com/u/2500434?v=4", "type": "User" }, { "login": "phyushin", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2320232?v=4", "type": "User" }, { "login": "ipepe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10695953?v=4", "type": "User" }, { "login": "phpsystems", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6594322?v=4", "type": "User" }, { "login": "viniciusmarangoni2", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42209795?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/doublepulsar-detection-script", "name": "doublepulsar-detection-script", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/doublepulsar-detection-script", "id": "933eab85f67d", "stars": 1029, "language": "Python", "description": "A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.", "type": "tool", "pushedAt": "2020-02-03T19:33:44Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "WithSecureLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "login": "firefart" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "hajdbo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1834306?v=4", "type": "User" }, { "login": "firefart", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "wvu", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4551878?v=4", "type": "User" } ] }, { "repo": "ryhanson/phishery", "name": "phishery", "owner": "ryhanson", "url": "https://github.com/ryhanson/phishery", "id": "cafb2538f3fa", "stars": 1020, "language": "Go", "description": "An SSL Enabled Basic Auth Credential Harvester with a Word Document Template URL Injector", "type": "tool", "pushedAt": "2017-09-11T15:42:10Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ryhanson", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "ryhanson", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3486433?v=4", "type": "User" }, { "login": "alexlauerman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5740946?v=4", "type": "User" }, { "login": "tomsteele", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2497381?v=4", "type": "User" } ] }, { "repo": "b4rtik/sharpkatz", "name": "SharpKatz", "owner": "b4rtik", "url": "https://github.com/b4rtik/SharpKatz", "id": "e6f514ff4e39", "stars": 1019, "language": "C#", "description": "Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands", "type": "tool", "pushedAt": "2021-11-07T21:29:22Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "b4rtik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "login": "bugch3ck" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "b4rtik", "c": 53, "avatar": "https://avatars.githubusercontent.com/u/2039307?v=4", "type": "User" }, { "login": "Genbox", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/657616?v=4", "type": "User" }, { "login": "bugch3ck", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/python-exe-unpacker", "name": "python-exe-unpacker", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/python-exe-unpacker", "id": "ea066ccee4a0", "stars": 1010, "language": "Python", "description": "A helper script for unpacking and decompiling EXEs compiled from python code. ", "type": "tool", "pushedAt": "2024-08-15T14:36:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "splx-ai/agentic-radar", "name": "agentic-radar", "owner": "splx-ai", "url": "https://github.com/splx-ai/agentic-radar", "id": "50c46ffea2f3", "stars": 1002, "language": "Python", "description": "A security scanner for your LLM agentic workflows", "type": "tool", "pushedAt": "2025-11-27T15:28:44Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "splx-ai", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "jsrzic", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/65179822?v=4", "type": "User" }, { "login": "vkolobara", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/11212336?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 13, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "DJurincic", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/116250437?v=4", "type": "User" }, { "login": "dgranosa", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/10576958?v=4", "type": "User" }, { "login": "Lukasimac", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/37411423?v=4", "type": "User" }, { "login": "juricanekic", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/69904842?v=4", "type": "User" }, { "login": "SchultzikAI", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/179488394?v=4", "type": "User" } ] }, { "repo": "zeromemoryex/blackout", "name": "Blackout", "owner": "ZeroMemoryEx", "url": "https://github.com/ZeroMemoryEx/Blackout", "id": "a500185a7c58", "stars": 983, "language": "C++", "description": "kill anti-malware protected processes ( BYOVD ) ", "type": "tool", "pushedAt": "2023-07-21T17:35:09Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ZeroMemoryEx", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ZeroMemoryEx", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/60795188?v=4", "type": "User" } ] }, { "repo": "9emin1/charlotte", "name": "charlotte", "owner": "9emin1", "url": "https://github.com/9emin1/charlotte", "id": "717027623014", "stars": 976, "language": "Python", "description": "c++ fully undetected shellcode launcher ;)", "type": "tool", "pushedAt": "2021-06-11T04:44:18Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "9emin1", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "9emin1", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/30677210?v=4", "type": "User" } ] }, { "repo": "billy-ellis/exploit-challenges", "name": "Exploit-Challenges", "owner": "Billy-Ellis", "url": "https://github.com/Billy-Ellis/Exploit-Challenges", "id": "83d9b3f3641f", "stars": 953, "language": "C", "description": "A collection of vulnerable ARM binaries for practicing exploit development", "type": "tool", "pushedAt": "2021-11-15T20:10:07Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Billy-Ellis", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Billy-Ellis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14247272?v=4", "type": "User" } ] }, { "repo": "simplysecurity/simplyemail", "name": "SimplyEmail", "owner": "SimplySecurity", "url": "https://github.com/SimplySecurity/SimplyEmail", "id": "6fb19eb06141", "stars": 951, "language": "Python", "description": "Email recon made fast and easy, with a framework to build on", "type": "tool", "pushedAt": "2023-01-12T22:20:25Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "SimplySecurity", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christopher Truncer", "cardId": "b422714966d948cf", "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "login": "ChrisTruncer" }, { "name": "Hugo van den Toorn", "cardId": "733f259c62555251", "avatar": "https://avatars.githubusercontent.com/u/10958209?v=4", "login": "Pysint" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "killswitch-GUI", "c": 569, "avatar": "https://avatars.githubusercontent.com/u/8761706?v=4", "type": "User" }, { "login": "th3gundy", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6793697?v=4", "type": "User" }, { "login": "capnspacehook", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/23243104?v=4", "type": "User" }, { "login": "rvazarkar", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "DPeltier", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1497249?v=4", "type": "User" }, { "login": "bcoles", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "ChrisTruncer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1674822?v=4", "type": "User" }, { "login": "marios-zindilis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/412713?v=4", "type": "User" }, { "login": "Pysint", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10958209?v=4", "type": "User" } ] }, { "repo": "adrecon/adrecon", "name": "ADRecon", "owner": "adrecon", "url": "https://github.com/adrecon/ADRecon", "id": "f3f36cb6a887", "stars": 947, "language": "PowerShell", "description": "ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment. ", "type": "tool", "pushedAt": "2024-10-15T03:41:29Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "adrecon", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "prashant3535", "c": 108, "avatar": "https://avatars.githubusercontent.com/u/6894611?v=4", "type": "User" }, { "login": "smcgu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55897257?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "arcayr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11192354?v=4", "type": "User" }, { "login": "ausbails", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45581732?v=4", "type": "User" }, { "login": "semgrep-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/170460994?v=4", "type": "User" } ] }, { "repo": "rsmudge/elevatekit", "name": "ElevateKit", "owner": "rsmudge", "url": "https://github.com/rsmudge/ElevateKit", "id": "83fa38cc6418", "stars": 932, "language": "PowerShell", "description": "The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.", "type": "tool", "pushedAt": "2020-06-22T21:12:24Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "rsmudge", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "rsmudge", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/1174994?v=4", "type": "User" } ] }, { "repo": "goshs-labs/goshs", "name": "goshs", "owner": "goshs-labs", "url": "https://github.com/goshs-labs/goshs", "id": "b29233fe94d0", "stars": 932, "language": "Go", "description": "Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful pytho", "type": "tool", "pushedAt": "2026-07-16T10:05:55Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "goshs-labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "login": "parzel" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "patrickhener", "c": 576, "avatar": "https://avatars.githubusercontent.com/u/7579055?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 58, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "aWZHY0yQH81uOYvH", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32046476?v=4", "type": "User" }, { "login": "alexandear", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3228886?v=4", "type": "User" }, { "login": "abgordon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3271877?v=4", "type": "User" }, { "login": "Hazegard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11147206?v=4", "type": "User" }, { "login": "parzel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" }, { "login": "ty3gx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26776749?v=4", "type": "User" } ] }, { "repo": "nccgroup/exploit_mitigations", "name": "exploit_mitigations", "owner": "nccgroup", "url": "https://github.com/nccgroup/exploit_mitigations", "id": "432920c6c36a", "stars": 925, "language": null, "description": "Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.", "type": "tool", "pushedAt": "2024-05-20T06:20:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" }, { "name": "Cedric Halbronn", "cardId": "0e9cf6d9bec332e9", "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "login": "saidelike" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "fidgetingbits", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "saidelike", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "type": "User" }, { "login": "alanc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/111997?v=4", "type": "User" }, { "login": "x86pup", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112147643?v=4", "type": "User" }, { "login": "NerdKernel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7063051?v=4", "type": "User" }, { "login": "nickkral", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24510873?v=4", "type": "User" } ] }, { "repo": "esc4icescesc/skanuvaty", "name": "skanuvaty", "owner": "Esc4iCEscEsc", "url": "https://github.com/Esc4iCEscEsc/skanuvaty", "id": "ffbf755f37e4", "stars": 924, "language": "Rust", "description": "Dangerously fast DNS/network/port scanner", "type": "tool", "pushedAt": "2022-03-18T12:36:50Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Esc4iCEscEsc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Esc4iCEscEsc", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/101108295?v=4", "type": "User" } ] }, { "repo": "xx0hcd/malleable-c2-profiles", "name": "Malleable-C2-Profiles", "owner": "xx0hcd", "url": "https://github.com/xx0hcd/Malleable-C2-Profiles", "id": "ebe8f91ba2f7", "stars": 889, "language": null, "description": "Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.", "type": "tool", "pushedAt": "2022-10-28T18:21:42Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "xx0hcd", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xx0hcd", "c": 143, "avatar": "https://avatars.githubusercontent.com/u/23107122?v=4", "type": "User" } ] }, { "repo": "flangvik/bettersafetykatz", "name": "BetterSafetyKatz", "owner": "Flangvik", "url": "https://github.com/Flangvik/BetterSafetyKatz", "id": "6b5225004c5e", "stars": 886, "language": "C#", "description": "Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into me", "type": "tool", "pushedAt": "2021-03-29T13:15:58Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Flangvik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "Flangvik", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" }, { "login": "ktambascio", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/289344?v=4", "type": "User" }, { "login": "clubby789", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13556931?v=4", "type": "User" } ] }, { "repo": "bishopfox/sj", "name": "sj", "owner": "BishopFox", "url": "https://github.com/BishopFox/sj", "id": "d7000134adcc", "stars": 865, "language": "Go", "description": "A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.", "type": "tool", "pushedAt": "2026-07-09T15:31:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Tony West", "cardId": "a203774ff1208644", "avatar": "https://avatars.githubusercontent.com/u/125916820?v=4", "login": "twest-bf" }, { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "twest-bf", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/125916820?v=4", "type": "User" }, { "login": "aringo-bf", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/102995281?v=4", "type": "User" }, { "login": "0x303", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/107429937?v=4", "type": "User" }, { "login": "bsysop", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9998303?v=4", "type": "User" }, { "login": "idanya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10362893?v=4", "type": "User" }, { "login": "affix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/184308?v=4", "type": "User" }, { "login": "0xz32", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47873286?v=4", "type": "User" }, { "login": "altperfect", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32578434?v=4", "type": "User" }, { "login": "six2dez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "bloodhoundad/sharphound2", "name": "SharpHound2", "owner": "BloodHoundAD", "url": "https://github.com/BloodHoundAD/SharpHound2", "id": "307d40327af7", "stars": 507, "language": "C#", "description": "The Old BloodHound C# Ingestor (Deprecated)", "type": "tool", "pushedAt": "2022-06-22T17:07:56Z", "archived": true, "lanes": [ "org" ], "author": { "name": "BloodHound Legacy Account (Deprecated)", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 1, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "rvazarkar", "c": 282, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "cnotin", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "paalbra", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/265215?v=4", "type": "User" }, { "login": "jonas2k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19586472?v=4", "type": "User" }, { "login": "Crypt0-M3lon", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7677901?v=4", "type": "User" }, { "login": "dirkjanm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "eranzim", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33493384?v=4", "type": "User" }, { "login": "joncave", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/621103?v=4", "type": "User" }, { "login": "ihamburglar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5925087?v=4", "type": "User" }, { "login": "morphly", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37324404?v=4", "type": "User" } ] }, { "repo": "nettitude/sharpsocks", "name": "SharpSocks", "owner": "nettitude", "url": "https://github.com/nettitude/SharpSocks", "id": "c99878c1dd8f", "stars": 496, "language": "C#", "description": "Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell", "type": "tool", "pushedAt": "2023-03-15T19:19:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "riskydissonance", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" }, { "login": "rolen", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/1428801?v=4", "type": "User" }, { "login": "benpturner", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "strawp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/548565?v=4", "type": "User" } ] }, { "repo": "rteccybersec/bitlockmove", "name": "BitlockMove", "owner": "rtecCyberSec", "url": "https://github.com/rtecCyberSec/BitlockMove", "id": "696c8fa76821", "stars": 444, "language": "C#", "description": "Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking", "type": "tool", "pushedAt": "2025-06-27T17:53:12Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "rtecCyberSec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Fabian Mosch", "cardId": "889af864fbab7560", "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "login": "S3cur3Th1sSh1t" } ], "adoptionOperators": 1, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "S3cur3Th1sSh1t", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/27858067?v=4", "type": "User" } ] }, { "repo": "netdiscover-scanner/netdiscover", "name": "netdiscover", "owner": "netdiscover-scanner", "url": "https://github.com/netdiscover-scanner/netdiscover", "id": "d6e9b87c15c8", "stars": 388, "language": "C", "description": "Netdiscover, ARP Scanner (official repository)", "type": "tool", "pushedAt": "2025-08-14T21:38:23Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "netdiscover-scanner", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "eribertomota", "c": 137, "avatar": "https://avatars.githubusercontent.com/u/6435502?v=4", "type": "User" }, { "login": "jpenalbae", "c": 112, "avatar": "https://avatars.githubusercontent.com/u/8380459?v=4", "type": "User" }, { "login": "bcoles", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "bmwiedemann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/637990?v=4", "type": "User" }, { "login": "jeffersonraimon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/80064475?v=4", "type": "User" }, { "login": "Vbrawl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62301731?v=4", "type": "User" }, { "login": "zquestz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83898?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/firewalker", "name": "firewalker", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/firewalker", "id": "bfe216330d15", "stars": 154, "language": "C", "description": "", "type": "tool", "pushedAt": "2020-08-17T14:40:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 2, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "peterwsmdsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64532298?v=4", "type": "User" }, { "login": "mdsecactivebreach", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-templates-ai", "name": "nuclei-templates-ai", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-templates-ai", "stars": 124, "language": null, "description": "Repository of AI-generated Nuclei templates for public CVEs not yet covered by existing templates, enhancing detection speed and coverage 👾", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4bd2e50bd29f", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2025-09-30T09:44:30Z", "archived": false, "topContributors": [ { "login": "princechaddha", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16654365?v=4", "type": "User" }, { "login": "ehsandeep", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" } ] }, { "repo": "frkngksl/parallelnimcalls", "name": "parallelnimcalls", "owner": "frkngksl", "url": "https://github.com/frkngksl/ParallelNimcalls", "stars": 123, "language": "Nim", "description": "Nim version of MDSec's Parallel Syscall PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71ae51134a73", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T12:00:13Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "bats3c/defensiveinjector", "name": "defensiveinjector", "owner": "bats3c", "url": "https://github.com/bats3c/DefensiveInjector", "stars": 123, "language": "C", "description": "Shellcode injector using direct syscalls", "type": "tool", "lanes": [ "2" ], "author": { "name": "batsec", "cardId": "30c37ba3edd9701f", "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "924ba06ab470", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-17T10:27:31Z", "archived": false, "topContributors": [ { "login": "bats3c", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63263302?v=4", "type": "User" } ] }, { "repo": "forrest-orr/exploits", "name": "exploits", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/Exploits", "stars": 122, "language": "C", "description": "A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a552a92d031a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-21T16:19:43Z", "archived": false, "topContributors": [ { "login": "forrest-orr", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4", "type": "User" } ] }, { "repo": "malvuln/adversary3", "name": "adversary3", "owner": "malvuln", "url": "https://github.com/malvuln/Adversary3", "stars": 122, "language": null, "description": "Malware vulnerability intel tool for third-party attackers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Malvuln (aka hyp3rlinx)", "cardId": "68d2b7258663f41f", "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc1be3eb6c82", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-24T15:36:49Z", "archived": false, "topContributors": [ { "login": "malvuln", "c": 139, "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4", "type": "User" } ] }, { "repo": "0vercl0k/rp-bf.rs", "name": "rp-bf.rs", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/rp-bf.rs", "id": "7a19e48b0084", "stars": 121, "language": "Rust", "description": "rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump", "type": "tool", "pushedAt": "2024-05-01T23:57:23Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0vercl0k", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "hacksysteam/cve-2022-28672", "name": "cve-2022-28672", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/CVE-2022-28672", "stars": 120, "language": "JavaScript", "description": "Foxit PDF Reader Remote Code Execution Exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f5dc92136142", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-05T12:22:45Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "swisskyrepo/whid_toolkit", "name": "WHID_Toolkit", "owner": "swisskyrepo", "url": "https://github.com/swisskyrepo/WHID_Toolkit", "id": "f8c3d0e46fb5", "stars": 120, "language": "Python", "description": "Simple script for the WHID injector - a rubberducky wifi", "type": "tool", "pushedAt": "2024-07-16T23:41:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Swissky", "cardId": "8206e618c104197b", "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "swisskyrepo", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/12152583?v=4", "type": "User" } ] }, { "repo": "specterops/bloodhound-cli", "name": "bloodhound-cli", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/bloodhound-cli", "id": "05a70c498b0f", "stars": 118, "language": "Go", "description": "", "type": "tool", "pushedAt": "2026-07-03T09:03:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "login": "chrismaddalena" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "chrismaddalena", "c": 127, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" }, { "login": "pradameinhof", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16960409?v=4", "type": "User" }, { "login": "StephenHinck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12970156?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Anthirian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/704388?v=4", "type": "User" }, { "login": "hdm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1171392?v=4", "type": "User" }, { "login": "coderabbitai[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/347564?v=4", "type": "Bot" } ] }, { "repo": "epi052/cve-2018-15473", "name": "cve-2018-15473", "owner": "epi052", "url": "https://github.com/epi052/cve-2018-15473", "stars": 115, "language": "Python", "description": "Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473", "type": "tool", "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "009c9ea16873", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-04-29T13:17:43Z", "archived": false, "topContributors": [ { "login": "brisher777", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3487313?v=4", "type": "User" }, { "login": "epi052", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" } ] }, { "repo": "six2dez/obsidian-pentesting-vault", "name": "obsidian-pentesting-vault", "owner": "six2dez", "url": "https://github.com/six2dez/obsidian-pentesting-vault", "id": "00c3efdbf5bd", "stars": 115, "language": null, "description": "Sample Obsidian's vault for web pentesting", "type": "tool", "pushedAt": "2024-08-08T13:38:55Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "six2dez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/cve-2023-27532", "name": "cve-2023-27532", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2023-27532", "stars": 114, "language": "C#", "description": "Exploit for CVE-2023-27532 against Veeam Backup & Replication", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "018dd876df22", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-23T18:03:27Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "frkngksl/hintinject", "name": "hintinject", "owner": "frkngksl", "url": "https://github.com/frkngksl/HintInject", "stars": 114, "language": "C++", "description": "A PoC project for embedding shellcode to Hint/Name Table", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "22d27a82300a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T11:59:54Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "volexity/goresolver", "name": "GoResolver", "owner": "volexity", "url": "https://github.com/volexity/GoResolver", "id": "151d2738da16", "stars": 114, "language": "Python", "description": "GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the function symbols of an obfuscated Go binary.", "type": "tool", "pushedAt": "2026-01-26T11:31:25Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Volexity", "cardId": "287b5e6a3295a883", "avatar": "https://avatars.githubusercontent.com/u/61506761?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "imladenov51", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29190056?v=4", "type": "User" } ] }, { "repo": "nul0x4c/etwsessionhijacking", "name": "etwsessionhijacking", "owner": "nul0x4c", "url": "https://github.com/NUL0x4C/EtwSessionHijacking", "stars": 112, "language": "C++", "description": "A Poc on blocking Procmon from monitoring network events", "type": "tool", "lanes": [ "2" ], "author": { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "efc98f3ec8e5", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-08-07T08:33:48Z", "archived": false, "topContributors": [] }, { "repo": "m14r41/scan4secrets", "name": "scan4secrets", "owner": "m14r41", "url": "https://github.com/m14r41/scan4secrets", "id": "0497fa7e7f0f", "stars": 112, "language": "Python", "description": "Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and generates SARIF, JSONL, HTML, PDF, or Excel reports.", "type": "tool", "pushedAt": "2026-07-03T15:25:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Madhurendra kumar", "cardId": "72f08c5be09cd0d7", "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "m14r41", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4", "type": "User" } ] }, { "repo": "random-robbie/aws-scanner", "name": "aws-scanner", "owner": "random-robbie", "url": "https://github.com/random-robbie/AWS-Scanner", "stars": 110, "language": "Go", "description": "Scans a list of websites for Cloudfront or S3 Buckets", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54d38af49902", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-10-28T16:09:09Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" }, { "login": "glove400", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33153904?v=4", "type": "User" } ] }, { "repo": "boku7/halosgate-ps", "name": "halosgate-ps", "owner": "boku7", "url": "https://github.com/boku7/halosgate-ps", "stars": 109, "language": "C", "description": "Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "76a06983443e", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:55:24Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "x86byte/sbox", "name": "sbox", "owner": "x86byte", "url": "https://github.com/x86byte/sbox", "id": "3caa4aac93dd", "stars": 109, "language": "C++", "description": "Compile-time AES string obfuscation for C++", "type": "tool", "pushedAt": "2026-05-26T11:42:57Z", "archived": false, "lanes": [ "2" ], "author": { "name": "x86byte", "cardId": "ac9359867d6fdf55", "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "x86byte", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4", "type": "User" } ] }, { "repo": "frkngksl/silentnimvest", "name": "silentnimvest", "owner": "frkngksl", "url": "https://github.com/frkngksl/SilentNimvest", "stars": 107, "language": "Nim", "description": "Nim implementation for sud0Ru's Credential Dumping from SAM/SECURITY Hives Method (a.k.a. SilentHarvest)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "037a05872266", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T11:57:43Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "botherder/vxcage", "name": "vxcage", "owner": "botherder", "url": "https://github.com/botherder/vxcage", "stars": 107, "language": "Python", "description": "REST API based malware repository (abandoned)", "type": "tool", "lanes": [ "2" ], "author": { "name": "nex", "cardId": "ebbd5cd763363431", "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "66ac48f6c230", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2015-04-04T17:45:27Z", "archived": true, "topContributors": [ { "login": "jekil", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1069119?v=4", "type": "User" }, { "login": "onlyhavecans", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/718435?v=4", "type": "User" }, { "login": "jaegeral", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/741037?v=4", "type": "User" }, { "login": "botherder", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1032671?v=4", "type": "User" } ] }, { "repo": "boku7/xss-clientside-attacks", "name": "xss-clientside-attacks", "owner": "boku7", "url": "https://github.com/boku7/XSS-Clientside-Attacks", "stars": 106, "language": "JavaScript", "description": "A repository of JavaScript XSS attacks against client browsers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "33d09d5cc523", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-29T17:05:28Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "1n3/attacksurfacemanagement", "name": "attacksurfacemanagement", "owner": "1n3", "url": "https://github.com/1N3/AttackSurfaceManagement", "stars": 105, "language": "Shell", "description": "Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty ", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2b802dba0099", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 18, "contributors": [ { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "login": "six2dez" } ], "pushedAt": "2021-09-27T01:55:30Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 213, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" }, { "login": "ifly53e", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2816894?v=4", "type": "User" }, { "login": "r3k2", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5316229?v=4", "type": "User" }, { "login": "six2dez", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" }, { "login": "jmchia", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/334560?v=4", "type": "User" }, { "login": "joaomatosf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10002353?v=4", "type": "User" }, { "login": "alexoslabs2", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39374140?v=4", "type": "User" }, { "login": "gbiagomba", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5851606?v=4", "type": "User" }, { "login": "mw3demo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4109485?v=4", "type": "User" }, { "login": "hariomv-exzeo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40633561?v=4", "type": "User" }, { "login": "hexageek", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8998446?v=4", "type": "User" }, { "login": "iambrosie", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4072584?v=4", "type": "User" }, { "login": "th3gundy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6793697?v=4", "type": "User" }, { "login": "MrTuxracer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17544684?v=4", "type": "User" }, { "login": "menzow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5744434?v=4", "type": "User" }, { "login": "m4st3rCh13f3r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25395681?v=4", "type": "User" }, { "login": "HacKanCuBa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7178420?v=4", "type": "User" }, { "login": "cyrinux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/519083?v=4", "type": "User" } ] }, { "repo": "eversinc33/red-team-advent-of-code", "name": "red-team-advent-of-code", "owner": "eversinc33", "url": "https://github.com/eversinc33/Red-Team-Advent-of-Code", "stars": 105, "language": "Nim", "description": "Red Teaming / Pentesting challenges for my Advent-Of-Code 2021.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "420144b2e712", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-21T17:13:39Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "1n3/httpoxyscan", "name": "httpoxyscan", "owner": "1n3", "url": "https://github.com/1N3/HTTPoxyScan", "stars": 104, "language": "Python", "description": "HTTPoxy Exploit Scanner by 1N3 @CrowdShield", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f4cfe61efb3b", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-08-09T15:11:26Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" } ] }, { "repo": "x86byte/stuxnet-rootkit", "name": "stuxnet-rootkit", "owner": "x86byte", "url": "https://github.com/x86byte/Stuxnet-Rootkit", "stars": 103, "language": "C", "description": "Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "x86byte", "cardId": "ac9359867d6fdf55", "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f6866ddb5764", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-14T23:01:28Z", "archived": false, "topContributors": [ { "login": "x86byte", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4", "type": "User" } ] }, { "repo": "six2dez/reconftw_ai", "name": "reconftw_ai", "owner": "six2dez", "url": "https://github.com/six2dez/reconftw_ai", "id": "41c58cc59ef3", "stars": 102, "language": "Python", "description": "AI/LLM local model integration for analysis of reconftw results", "type": "tool", "pushedAt": "2025-05-03T11:44:34Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "six2dez", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "firefart/hashcollision-dos-poc", "name": "hashcollision-dos-poc", "owner": "firefart", "url": "https://github.com/firefart/HashCollision-DOS-POC", "stars": 101, "language": "Python", "description": "Proof of Concept for the PHP and JAVA Hashcollision Denial of service attack", "type": "tool", "lanes": [ "2" ], "author": { "name": "C:\\hristian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "325a070a150f", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2012-01-17T18:54:35Z", "archived": true, "topContributors": [ { "login": "firefart", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" } ] }, { "repo": "nickvangilder/most-average-c2-ever", "name": "most-average-c2-ever", "owner": "nickvangilder", "url": "https://github.com/nickvangilder/most-average-c2-ever", "stars": 100, "language": "C#", "description": "The most average C2 ever (MACE)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick VanGilder", "cardId": "35f156651bb1c4a5", "avatar": "https://avatars.githubusercontent.com/u/26583248?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9f40364ea14b", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-09T18:07:27Z", "archived": false, "topContributors": [ { "login": "nickvangilder", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/26583248?v=4", "type": "User" } ] }, { "repo": "mrd0x/pe2shc-to-cdb", "name": "pe2shc-to-cdb", "owner": "mrd0x", "url": "https://github.com/mrd0x/pe2shc-to-cdb", "stars": 100, "language": "Python", "description": "Convert shellcode generated using pe_2_shellcode to cdb format.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8278677f9511", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-18T03:35:57Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/hwbp-dep-bypass", "name": "hwbp-dep-bypass", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/HWBP-DEP-Bypass", "stars": 100, "language": "C", "description": "Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulation on Windows x64. For security research and learning purposes ", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3529b8ce0d2e", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-17T12:45:46Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "jonaslyk/exploitkitpub", "name": "exploitkitpub", "owner": "jonaslyk", "url": "https://github.com/jonaslyk/exploitkitpub", "id": "0e06029f5f09", "stars": 100, "language": "C++", "description": "", "type": "tool", "pushedAt": "2021-12-09T18:41:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Jonas L", "cardId": "d2fd47c3c49b8eee", "avatar": "https://avatars.githubusercontent.com/u/6555969?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jonaslyk", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6555969?v=4", "type": "User" } ] }, { "repo": "boku7/nobelium-pdfdlrunaesshellcode", "name": "nobelium-pdfdlrunaesshellcode", "owner": "boku7", "url": "https://github.com/boku7/Nobelium-PdfDLRunAesShellcode", "stars": 99, "language": "C", "description": "A recreation of the \"Nobelium\" malware based on Microsofts Malware analysis - Part 1: PDF2Pwn", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "925b3d9168ae", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-03-08T15:52:31Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "Kafkamorph", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2609870?v=4", "type": "User" } ] }, { "repo": "kevin-robertson/conveigh", "name": "Conveigh", "owner": "Kevin-Robertson", "url": "https://github.com/Kevin-Robertson/Conveigh", "id": "5ed1237cfe39", "stars": 99, "language": "PowerShell", "description": "Conveigh is a Windows PowerShell LLMNR/NBNS spoofer detection tool", "type": "tool", "pushedAt": "2016-08-28T19:55:44Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Kevin Robertson", "cardId": "d804a589308448f2", "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Kevin-Robertson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5897462?v=4", "type": "User" } ] }, { "repo": "specterops/configmanbearpig", "name": "ConfigManBearPig", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/ConfigManBearPig", "id": "058aaf39726d", "stars": 99, "language": "PowerShell", "description": "PowerShell collector for adding SCCM attack paths to BloodHound with OpenGraph", "type": "tool", "pushedAt": "2026-04-21T14:43:46Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Chris Thompson", "cardId": "d97f674db640056b", "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "login": "Mayyhem" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Mayyhem", "c": 79, "avatar": "https://avatars.githubusercontent.com/u/30671833?v=4", "type": "User" } ] }, { "repo": "hasherezade/funky_malware_formats", "name": "funky_malware_formats", "owner": "hasherezade", "url": "https://github.com/hasherezade/funky_malware_formats", "stars": 97, "language": "C++", "description": "Parsers for custom malware formats (\"Funky malware formats\")", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "142ae2db8d25", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-08T18:59:56Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "boku7/xpipe", "name": "xpipe", "owner": "boku7", "url": "https://github.com/boku7/xPipe", "stars": 97, "language": "C", "description": "Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4351e9c7cbb9", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" } ], "pushedAt": "2023-03-08T15:51:47Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" } ] }, { "repo": "whokilleddb/clickforclickonce", "name": "ClickForClickOnce", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/ClickForClickOnce", "id": "b6fd0fe7bb04", "stars": 97, "language": "HTML", "description": "ClickForClickOnce - Generate configurable clickonce payloads", "type": "tool", "pushedAt": "2026-04-17T19:40:50Z", "archived": false, "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "whokilleddb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "1n3/powerexfil", "name": "powerexfil", "owner": "1n3", "url": "https://github.com/1N3/PowerExfil", "stars": 96, "language": "PowerShell", "description": "A collection of data exfiltration scripts for Red Team assessments.", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "48d844df635a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-02-21T23:02:10Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" } ] }, { "repo": "maldev-academy/githubdevicecodephishing", "name": "githubdevicecodephishing", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/GitHubDeviceCodePhishing", "stars": 96, "language": "Python", "description": "A tool to easily perform GitHub Device Code Phishing on red team engagements", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aa9479c68cf2", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [ { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "login": "mrd0x" } ], "pushedAt": "2026-02-09T01:26:44Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "eversinc33/1.6-c2", "name": "1.6-c2", "owner": "eversinc33", "url": "https://github.com/eversinc33/1.6-C2", "stars": 95, "language": "C++", "description": "Using the Counter Strike 1.6 RCON protocol as a C2 Channel. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "664c76d94ec4", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-19T15:34:37Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "frkngksl/nimicstack", "name": "NimicStack", "owner": "frkngksl", "url": "https://github.com/frkngksl/NimicStack", "id": "f135717cabe6", "stars": 95, "language": "Nim", "description": "NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs", "type": "tool", "pushedAt": "2026-04-04T11:59:07Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "frkngksl", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "maldev-academy/3layerspersistence", "name": "3LayersPersistence", "owner": "Maldev-Academy", "url": "https://github.com/Maldev-Academy/3LayersPersistence", "id": "3c3d789bd51b", "stars": 94, "language": "C", "description": "Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime", "type": "tool", "pushedAt": "2026-03-29T09:28:22Z", "archived": false, "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "login": "NUL0x4C" } ], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "NUL0x4C", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/cs-edr-enumeration", "name": "cs-edr-enumeration", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/CS-EDR-Enumeration", "stars": 92, "language": "C", "description": "Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from silent in-process BOF to full PowerShell/WMI.", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c870641cbe49", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-06T19:38:04Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "kbsec/malware-course-public", "name": "malware-course-public", "owner": "kbsec", "url": "https://github.com/kbsec/malware-course-public", "stars": 92, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kai", "cardId": "ac82068bd32a729c", "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "96d8615b44f5", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2024-04-10T20:33:25Z", "archived": false, "topContributors": [ { "login": "superman32432432", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/7228420?v=4", "type": "User" }, { "login": "kbsec", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4", "type": "User" }, { "login": "lin826", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9304486?v=4", "type": "User" }, { "login": "aimgo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44831139?v=4", "type": "User" } ] }, { "repo": "noraj/ctf-party", "name": "ctf-party", "owner": "noraj", "url": "https://github.com/noraj/ctf-party", "stars": 91, "language": "Ruby", "description": ":triangular_flag_on_post: A CLI tool & library to enhance and speed up script/exploit writing with string conversion/manipulation.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "741b1aef34f2", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-15T05:17:38Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 218, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "noraj", "c": 128, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 22, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" } ] }, { "repo": "repnz/shellcode2exe", "name": "shellcode2exe", "owner": "repnz", "url": "https://github.com/repnz/shellcode2exe", "stars": 91, "language": "Batchfile", "description": "Batch script to compile a binary shellcode blob into an exe file", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "538935872967", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-12T13:35:21Z", "archived": false, "topContributors": [ { "login": "repnz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "t3l3machus/cve-2023-22960", "name": "cve-2023-22960", "owner": "t3l3machus", "url": "https://github.com/t3l3machus/CVE-2023-22960", "stars": 91, "language": "Python", "description": "This vulnerability allows an attacker to bypass the credentials brute-force prevention mechanism of the Embedded Web Server (interface) of more than 60 Lexmark printer models. This issue affects both ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Panagiotis Chartas", "cardId": "e014aaefe37ca2d4", "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "44f2de606bac", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-19T06:36:55Z", "archived": false, "topContributors": [ { "login": "t3l3machus", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/75489922?v=4", "type": "User" } ] }, { "repo": "marco-lancini/offensive-infrastructure", "name": "offensive-infrastructure", "owner": "marco-lancini", "url": "https://github.com/marco-lancini/offensive-infrastructure", "stars": 91, "language": "Shell", "description": "Offensive Infrastructure with Modern Technologies", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marco Lancini", "cardId": "f546fb7b871cb152", "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "afebea9b0439", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2020-11-24T20:52:51Z", "archived": false, "topContributors": [ { "login": "snyk-bot", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/19733683?v=4", "type": "User" }, { "login": "marco-lancini", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1472968?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "mocofound", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9669770?v=4", "type": "User" }, { "login": "oleksiimorozenko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41582251?v=4", "type": "User" }, { "login": "tehtbl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3999809?v=4", "type": "User" } ] }, { "repo": "0vercl0k/paracosme", "name": "paracosme", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/paracosme", "stars": 90, "language": "Python", "description": "Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stage during the Pwn2Own Miami 2022 competition.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "24900307565d", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-08T18:50:23Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "wh1t3rh1n0/ssh-phone-home", "name": "ssh-phone-home", "owner": "wh1t3rh1n0", "url": "https://github.com/Wh1t3Rh1n0/ssh-phone-home", "stars": 90, "language": "Shell", "description": "Pentest dropbox setup scripts for Kali Linux", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "65a90a8dd260", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2016-02-15T17:02:41Z", "archived": false, "topContributors": [ { "login": "Wh1t3Rh1n0", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4", "type": "User" }, { "login": "jmassey09", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7598154?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2023-20178", "name": "cve-2023-20178", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2023-20178", "stars": 89, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "883baa75f65d", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-18T12:41:52Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/taskschedule-persistence-download-cradles", "name": "Taskschedule-Persistence-Download-Cradles", "owner": "VirtualAlllocEx", "url": "https://github.com/VirtualAlllocEx/Taskschedule-Persistence-Download-Cradles", "id": "3b51e53bbdfa", "stars": 89, "language": "HTML", "description": "Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged ", "type": "tool", "pushedAt": "2022-07-07T07:26:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "VirtualAlllocEx", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "infosecn1nja/ycsm", "name": "ycsm", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/ycsm", "stars": 87, "language": "Shell", "description": "This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools (Cobalt Strike, Empire, Metasploit, PoshC2).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ad56cf9555fb", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-07-02T07:32:52Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/cve-repository", "name": "cve-repository", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/CVE-repository", "stars": 87, "language": "Python", "description": " :beetle: Repository of CVE found by OCD people", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "550a7a4e00a5", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2025-06-19T15:48:37Z", "archived": false, "topContributors": [ { "login": "v1k1ngfr", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/32877266?v=4", "type": "User" }, { "login": "claire-lex", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55185179?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "jenaye", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15458329?v=4", "type": "User" } ] }, { "repo": "tenebrae93/defender_bypass_with_sliver", "name": "defender_bypass_with_sliver", "owner": "tenebrae93", "url": "https://github.com/TeneBrae93/defender_bypass_with_sliver", "stars": 86, "language": "Python", "description": "This is a Python script that generates a staged payload that fully bypasses MS Defender. Can potentially be used for EDRs with some customization.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tyler Ramsbey", "cardId": "5ccc8a85d47160b1", "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3621d0f78497", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-31T16:28:55Z", "archived": false, "topContributors": [ { "login": "TeneBrae93", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/nuclei-docs", "name": "nuclei-docs", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/nuclei-docs", "stars": 86, "language": "HTML", "description": "Nuclei documentation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "96324ad65f2c", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 39, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" }, { "name": "Dwi Siswanto", "cardId": "90b5b3ab59068b21", "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "login": "dwisiswant0" }, { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "pushedAt": "2023-08-18T17:58:28Z", "archived": true, "topContributors": [ { "login": "ehsandeep", "c": 226, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "Ice3man543", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "Mzack9999", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "geeknik", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/466878?v=4", "type": "User" }, { "login": "sullo", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1474884?v=4", "type": "User" }, { "login": "tonghuaroot", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/23011166?v=4", "type": "User" }, { "login": "fxploit", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/63603934?v=4", "type": "User" }, { "login": "xm1k3", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/73166077?v=4", "type": "User" }, { "login": "kchason", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1111099?v=4", "type": "User" }, { "login": "lu4nx", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3006875?v=4", "type": "User" }, { "login": "ShubhamRasal", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45902122?v=4", "type": "User" }, { "login": "parrasajad", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16835787?v=4", "type": "User" }, { "login": "dolphin235", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/33066453?v=4", "type": "User" }, { "login": "c4pr1c3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5326304?v=4", "type": "User" }, { "login": "tarunKoyalwar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45962551?v=4", "type": "User" }, { "login": "princechaddha", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16654365?v=4", "type": "User" }, { "login": "Esonhugh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32677240?v=4", "type": "User" }, { "login": "dwisiswant0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25837540?v=4", "type": "User" }, { "login": "dogancanbakir", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/65292895?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "thomrichards", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/108839520?v=4", "type": "User" }, { "login": "st0fm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/99617394?v=4", "type": "User" }, { "login": "meme-lord", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17912559?v=4", "type": "User" }, { "login": "kimcy7316", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64760746?v=4", "type": "User" }, { "login": "Xplo8E", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55936553?v=4", "type": "User" }, { "login": "stevemason", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10374916?v=4", "type": "User" }, { "login": "LuitelSamikshya", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85764322?v=4", "type": "User" }, { "login": "MetzinAround", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65838556?v=4", "type": "User" }, { "login": "mjang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3287976?v=4", "type": "User" } ] }, { "repo": "octoberfest7/cohab_processes", "name": "Cohab_Processes", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/Cohab_Processes", "id": "cc2fd535102b", "stars": 86, "language": "C", "description": "A small Aggressor script to help Red Teams identify foreign processes on a host machine", "type": "tool", "pushedAt": "2023-01-06T23:37:38Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Octoberfest7", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "hacksysteam/wpadescape", "name": "wpadescape", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/WpadEscape", "stars": 85, "language": "Python", "description": "Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3c0aac03c0b7", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-03T07:17:22Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "wirepair/autogcd", "name": "autogcd", "owner": "wirepair", "url": "https://github.com/wirepair/autogcd", "stars": 85, "language": "Go", "description": "Chrome Automation Library using Google Chrome Remote Debugger API in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "isaac 🌻", "cardId": "d299a8e9dd44ee18", "avatar": "https://avatars.githubusercontent.com/u/1073742?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0d137021f917", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2021-10-05T12:24:14Z", "archived": false, "topContributors": [ { "login": "wirepair", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/1073742?v=4", "type": "User" }, { "login": "davyzhang", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/576863?v=4", "type": "User" }, { "login": "BSick7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/830878?v=4", "type": "User" }, { "login": "s3rj1k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11349489?v=4", "type": "User" }, { "login": "nnn-gif", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1260902?v=4", "type": "User" }, { "login": "patanasov", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22467778?v=4", "type": "User" } ] }, { "repo": "0vercl0k/fuzzing-ida75", "name": "fuzzing-ida75", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/fuzzing-ida75", "id": "e76a13a6e2c2", "stars": 85, "language": null, "description": "Repository of the findings found by wtf when fuzzing IDA75.", "type": "tool", "pushedAt": "2021-08-02T14:57:50Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0vercl0k", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "jeffmcjunkin/packer_boxes", "name": "packer_boxes", "owner": "jeffmcjunkin", "url": "https://github.com/jeffmcjunkin/packer_boxes", "stars": 1, "language": null, "description": "Packer build scripts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3cf0d19ffb5f", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-03-10T18:47:45Z", "archived": false, "topContributors": [ { "login": "jeffmcjunkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" } ] }, { "repo": "wongwaituck/cve-2021-4034", "name": "cve-2021-4034", "owner": "wongwaituck", "url": "https://github.com/wongwaituck/CVE-2021-4034", "stars": 1, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "WONG Wai Tuck", "cardId": "374147d925b68b57", "avatar": "https://avatars.githubusercontent.com/u/2370088?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "50e47298f7d1", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-26T05:46:34Z", "archived": false, "topContributors": [ { "login": "wongwaituck", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2370088?v=4", "type": "User" } ] }, { "repo": "lockfale/vuln.c", "name": "vuln.c", "owner": "lockfale", "url": "https://github.com/lockfale/vuln.c", "stars": 1, "language": "C", "description": "simple c for buffer overflow", "type": "tool", "lanes": [ "2" ], "author": { "name": "David Fletcher", "cardId": "8ddd3c6722a8556c", "avatar": "https://avatars.githubusercontent.com/u/871266?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c0205ac73662", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2017-11-27T16:36:19Z", "archived": false, "topContributors": [ { "login": "smrk3r", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2893982?v=4", "type": "User" }, { "login": "digital-shokunin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/913856?v=4", "type": "User" } ] }, { "repo": "e11i0t4lders0n/cve-2023-36845", "name": "cve-2023-36845", "owner": "e11i0t4lders0n", "url": "https://github.com/e11i0t4lders0n/CVE-2023-36845", "stars": 1, "language": "Shell", "description": "CVE-2023-36845 – Unauthenticated Juniper Remote Code Execution Vulnerability Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tushar Verma", "cardId": "94b974391a4a1b74", "avatar": "https://avatars.githubusercontent.com/u/76389721?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "89371bde92e3", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-18T18:44:03Z", "archived": false, "topContributors": [ { "login": "e11i0t4lders0n", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/76389721?v=4", "type": "User" } ] }, { "repo": "erd0spy/emulate", "name": "emulate", "owner": "erd0spy", "url": "https://github.com/erd0spy/emulate", "stars": 1, "language": "Shell", "description": "Emulate is a tool for emulating firmware images using QEMU and Firmadyne. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Fikret Garipay", "cardId": "59393a834e542794", "avatar": "https://avatars.githubusercontent.com/u/58850695?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "420a66d0fe4a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-06T17:17:22Z", "archived": false, "topContributors": [ { "login": "erd0spy", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/58850695?v=4", "type": "User" } ] }, { "repo": "oliviagallucci/warranty", "name": "warranty", "owner": "oliviagallucci", "url": "https://github.com/oliviagallucci/warranty", "stars": 1, "language": null, "description": "Warranties for Offensive Security Tooling", "type": "tool", "lanes": [ "2" ], "author": { "name": "Olivia Gallucci", "cardId": "c6e54d215f52525b", "avatar": "https://avatars.githubusercontent.com/u/63474548?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "512b4e0b288c", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-25T13:50:59Z", "archived": false, "topContributors": [ { "login": "oliviagallucci", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/63474548?v=4", "type": "User" } ] }, { "repo": "actuator/rebel", "name": "rebel", "owner": "actuator", "url": "https://github.com/actuator/rebel", "stars": 1, "language": null, "description": "CVE-2023-46447 | VU#672804 ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8c910205e234", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-01T12:53:54Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "brutelogic/rekon", "name": "rekon", "owner": "brutelogic", "url": "https://github.com/BRuteLogic/reKon", "stars": 1, "language": null, "description": "Master orchestrator script for recon", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rodolfo Assis (Brute Logic)", "cardId": "073ef5e4d16742d8", "avatar": "https://avatars.githubusercontent.com/u/20602952?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2dd64a366c51", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-28T00:56:07Z", "archived": false, "topContributors": [ { "login": "BRuteLogic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20602952?v=4", "type": "User" } ] }, { "repo": "hackvertor/document-my-pentest", "name": "document-my-pentest", "owner": "hackvertor", "url": "https://github.com/hackvertor/document-my-pentest", "stars": 1, "language": "Java", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gareth Heyes", "cardId": "0c8f7458f3455124", "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ed7d4f83b153", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-19T10:00:42Z", "archived": false, "topContributors": [ { "login": "hackvertor", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/1217702?v=4", "type": "User" } ] }, { "repo": "jgamblin/cve-purl-usage", "name": "cve-purl-usage", "owner": "jgamblin", "url": "https://github.com/jgamblin/cve-purl-usage", "stars": 1, "language": "Python", "description": "Tracking PURL Adoption", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jerry Gamblin", "cardId": "0eae75bb01ff28f8", "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "168009343423", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-18T02:51:57Z", "archived": false, "topContributors": [ { "login": "github-actions[bot]", "c": 95, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "jgamblin", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/8428124?v=4", "type": "User" } ] }, { "repo": "bambenek/zloader-telemetry", "name": "zloader-telemetry", "owner": "bambenek", "url": "https://github.com/bambenek/zloader-telemetry", "stars": 1, "language": null, "description": "Telemetry from the ZLoader malware that is using DNS for C2 communications", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Bambenek", "cardId": "19a74a55cc9792d6", "avatar": "https://avatars.githubusercontent.com/u/4118623?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7cadc344eb07", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-11T22:20:16Z", "archived": false, "topContributors": [ { "login": "bambenek", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4118623?v=4", "type": "User" } ] }, { "repo": "aleksazatezalo/glinet-1800-rce", "name": "glinet-1800-rce", "owner": "aleksazatezalo", "url": "https://github.com/AleksaZatezalo/glinet-1800-rce", "stars": 1, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aleksa Zatezalo", "cardId": "263516ed9d82e3bf", "avatar": "https://avatars.githubusercontent.com/u/59803757?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1ca0ba359b9f", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-28T21:18:05Z", "archived": false, "topContributors": [ { "login": "AleksaZatezalo", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/59803757?v=4", "type": "User" } ] }, { "repo": "its-a-feature/aggressor-scripts", "name": "aggressor-scripts", "owner": "its-a-feature", "url": "https://github.com/its-a-feature/Aggressor-Scripts", "stars": 1, "language": "PowerShell", "description": "Aggregation of Cobalt Strike's aggressor scripts.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cody Thomas", "cardId": "26aa9761e865f222", "avatar": "https://avatars.githubusercontent.com/u/5313261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f4779c7a777d", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-31T18:53:36Z", "archived": false, "topContributors": [ { "login": "djhohnstein", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9327224?v=4", "type": "User" } ] }, { "repo": "galoget/thruk-cve-2023-34096", "name": "thruk-cve-2023-34096", "owner": "galoget", "url": "https://github.com/galoget/Thruk-CVE-2023-34096", "stars": 1, "language": "Python", "description": "Thruk Monitoring Web Interface <= 3.06 vulnerable to CVE-2023-34096 (Path Traversal).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Galoget Latorre", "cardId": "38fb4b9abe4642f1", "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7ecf75eefe1", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-09T17:26:57Z", "archived": false, "topContributors": [ { "login": "galoget", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8353133?v=4", "type": "User" } ] }, { "repo": "ericevenchick/can-relay", "name": "can-relay", "owner": "ericevenchick", "url": "https://github.com/ericevenchick/can-relay", "stars": 1, "language": "C", "description": "Uses a PIC18F26K80 to control relays over CAN", "type": "tool", "lanes": [ "2" ], "author": { "name": "Eric Evenchick", "cardId": "3d851b36a8962314", "avatar": "https://avatars.githubusercontent.com/u/195032?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "263237b8c299", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2012-05-11T20:10:44Z", "archived": false, "topContributors": [ { "login": "ericevenchick", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/195032?v=4", "type": "User" } ] }, { "repo": "urcuqui/mcp-shield", "name": "mcp-shield", "owner": "urcuqui", "url": "https://github.com/urcuqui/MCP-SHIELD", "stars": 1, "language": "Python", "description": "A research-driven framework to analyze, exploit, and harden MCP servers powering AI agents. Includes vulnerability discovery, adversarial testing, and resilience techniques to secure tool execution, m", "type": "tool", "lanes": [ "2" ], "author": { "name": "Christian Camilo Urcuqui López", "cardId": "43a6aa36e48b07d5", "avatar": "https://avatars.githubusercontent.com/u/2390479?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "71c3e0ecd3d7", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-21T11:44:38Z", "archived": false, "topContributors": [ { "login": "urcuqui", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2390479?v=4", "type": "User" } ] }, { "repo": "bugch3ck/nse-ntlm-info", "name": "nse-ntlm-info", "owner": "bugch3ck", "url": "https://github.com/bugch3ck/nse-ntlm-info", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonas Vestberg", "cardId": "4795ac8b58da707a", "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "19cab85b08f3", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-05-01T00:25:15Z", "archived": false, "topContributors": [ { "login": "bugch3ck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4165895?v=4", "type": "User" } ] }, { "repo": "omespino/osint-tropicon-2026", "name": "osint-tropicon-2026", "owner": "omespino", "url": "https://github.com/omespino/osint-tropicon-2026", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Omar Espino (omespino)", "cardId": "49d71f5a0fecbe0a", "avatar": "https://avatars.githubusercontent.com/u/8670352?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da35d7d6c629", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-20T19:15:52Z", "archived": false, "topContributors": [ { "login": "omespino", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/8670352?v=4", "type": "User" } ] }, { "repo": "hevnsnt/eken-firmware", "name": "eken-firmware", "owner": "hevnsnt", "url": "https://github.com/hevnsnt/EKEN-FIRMWARE", "stars": 1, "language": null, "description": "Old and Hard to find firmware for EKEN Action Cameras", "type": "tool", "lanes": [ "2" ], "author": { "name": "~billswearingen☎️# 🟩", "cardId": "4bfe962d0c189bba", "avatar": "https://avatars.githubusercontent.com/u/4072860?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bb9bfbd7651a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-15T23:59:12Z", "archived": false, "topContributors": [ { "login": "hevnsnt", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/4072860?v=4", "type": "User" } ] }, { "repo": "gergelykalman/bigoh", "name": "bigoh", "owner": "gergelykalman", "url": "https://github.com/gergelykalman/bigOH", "stars": 1, "language": "Python", "description": "Proof of concept for hashmap DoS for Python", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gergely Kalman", "cardId": "5bb36333010e649f", "avatar": "https://avatars.githubusercontent.com/u/1591209?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "75e723a58c5c", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-08-20T18:44:52Z", "archived": false, "topContributors": [] }, { "repo": "0xkol/freebsd-dhclient-poc", "name": "freebsd-dhclient-poc", "owner": "0xkol", "url": "https://github.com/0xkol/freebsd-dhclient-poc", "stars": 1, "language": "Python", "description": "Reproducer PoC for FreeBSD dhclient heap-based buffer overflow vulnerability when parsing DHCP option 119 (CVE-2020-7461)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Moshe Kol", "cardId": "626be8eaa344eeba", "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da4e1cd92147", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-30T19:04:37Z", "archived": false, "topContributors": [ { "login": "0xkol", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58270928?v=4", "type": "User" } ] }, { "repo": "tomvangoethem/poi-fuzz", "name": "poi-fuzz", "owner": "tomvangoethem", "url": "https://github.com/tomvangoethem/poi-fuzz", "stars": 1, "language": "PHP", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tom Van Goethem", "cardId": "659fb8b3f7353d92", "avatar": "https://avatars.githubusercontent.com/u/4355579?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "492becd55122", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-03-28T01:06:54Z", "archived": false, "topContributors": [ { "login": "tomvangoethem", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4355579?v=4", "type": "User" } ] }, { "repo": "ccelikanil/exploit-development-tryouts", "name": "exploit-development-tryouts", "owner": "ccelikanil", "url": "https://github.com/ccelikanil/Exploit-Development-Tryouts", "stars": 1, "language": null, "description": "This repo contains the exploits that I've re-written for known vulnerable apps", "type": "tool", "lanes": [ "2" ], "author": { "name": "Anil Celik", "cardId": "6cb62d472a3bbb85", "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5e8bd13a0442", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-06T08:49:40Z", "archived": false, "topContributors": [ { "login": "ccelikanil", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25687355?v=4", "type": "User" } ] }, { "repo": "rocky/go-loader", "name": "go-loader", "owner": "rocky", "url": "https://github.com/rocky/go-loader", "stars": 1, "language": "Go", "description": "fork of \"experimental\" loader which breaks our code too much can causes too much unappreciated reworking.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rocky Bernstein", "cardId": "78d94ebd43122031", "avatar": "https://avatars.githubusercontent.com/u/8851?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b642cee792a0", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-01-13T22:00:58Z", "archived": false, "topContributors": [ { "login": "rocky", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8851?v=4", "type": "User" } ] }, { "repo": "supersat/radio-debugger", "name": "radio-debugger", "owner": "supersat", "url": "https://github.com/supersat/radio-debugger", "stars": 1, "language": "C", "description": "A hand-crafted debugger for a SuperH-based radio used in some vehicles. Mostly for historic curiosity.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karl Koscher (supersat)", "cardId": "7f4c3a3d2711492c", "avatar": "https://avatars.githubusercontent.com/u/1396229?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d317c6b05dfb", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-24T11:32:41Z", "archived": false, "topContributors": [ { "login": "supersat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1396229?v=4", "type": "User" } ] }, { "repo": "supersat/ppc-dump", "name": "ppc-dump", "owner": "supersat", "url": "https://github.com/supersat/ppc-dump", "stars": 1, "language": "C", "description": "Quick and dirty program to dump firmware from a PowerPC device over JTAG", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karl Koscher (supersat)", "cardId": "7f4c3a3d2711492c", "avatar": "https://avatars.githubusercontent.com/u/1396229?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9040127c0f20", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-09T20:05:38Z", "archived": false, "topContributors": [ { "login": "supersat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1396229?v=4", "type": "User" } ] }, { "repo": "carlospolop/monitor-backdoor-appengine", "name": "monitor-backdoor-appengine", "owner": "carlospolop", "url": "https://github.com/carlospolop/Monitor-Backdoor-AppEngine", "stars": 1, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1aa40e461b66", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-09T13:30:30Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" } ] }, { "repo": "carlospolop/vsock-scanner", "name": "vsock-scanner", "owner": "carlospolop", "url": "https://github.com/carlospolop/Vsock-scanner", "stars": 1, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carlos Polop Martin", "cardId": "847968ceaa83bc90", "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a26e6cecfda2", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-19T03:55:24Z", "archived": false, "topContributors": [ { "login": "carlospolop", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17181413?v=4", "type": "User" } ] }, { "repo": "themalwareguardian/cve-2025-5548", "name": "cve-2025-5548", "owner": "themalwareguardian", "url": "https://github.com/TheMalwareGuardian/CVE-2025-5548", "stars": 1, "language": "Python", "description": "Buffer overflow in FreeFloat FTP Server 1.0 illustrating how a single unsafe handler can generate multiple CVE entries across different commands.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alejandro Vazquez", "cardId": "890cb6d9c4da886d", "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "228d3dbf7555", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-23T11:37:37Z", "archived": false, "topContributors": [ { "login": "TheMalwareGuardian", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/118515671?v=4", "type": "User" } ] }, { "repo": "j-baines/tippa-my-tongue", "name": "tippa-my-tongue", "owner": "j-baines", "url": "https://github.com/j-baines/tippa-my-tongue", "stars": 1, "language": "Python", "description": "F5 BIG-IP Exploit Using CVE-2022-1388 and CVE-2022-41800", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jacob Baines", "cardId": "9b19a0474b81a7b0", "avatar": "https://avatars.githubusercontent.com/u/113205286?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "47933f1b6c36", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-12T21:03:44Z", "archived": false, "topContributors": [ { "login": "j-baines", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/113205286?v=4", "type": "User" } ] }, { "repo": "fluxius/libresdr-b2xx", "name": "libresdr-b2xx", "owner": "fluxius", "url": "https://github.com/FlUxIuS/libresdr-b2xx", "stars": 1, "language": null, "description": "Unofficial repository about the libresdr b210 for RF Swift to get FPGA firmware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sébastien Dudek", "cardId": "c4b70c09db23a0b4", "avatar": "https://avatars.githubusercontent.com/u/715195?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "003f1cf44678", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-08T22:28:52Z", "archived": false, "topContributors": [ { "login": "FlUxIuS", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/715195?v=4", "type": "User" } ] }, { "repo": "abhijithbr/telegot", "name": "telegot", "owner": "abhijithbr", "url": "https://github.com/abhijithbr/TeleGot", "stars": 1, "language": "JavaScript", "description": "TeleGot C2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhijith 'Abx' B R", "cardId": "cc627854b816ba18", "avatar": "https://avatars.githubusercontent.com/u/14778039?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "58e8a90ba946", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-01T08:42:20Z", "archived": false, "topContributors": [ { "login": "abhijithbr", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/14778039?v=4", "type": "User" } ] }, { "repo": "tijme/aptlib.h", "name": "aptlib.h", "owner": "tijme", "url": "https://github.com/tijme/aptlib.h", "stars": 1, "language": "C", "description": "A standard c-code library (`aptlib.h`) for Windows exploit & malware development.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tijme Gommers", "cardId": "d9e9c778fc403205", "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a11747699c2a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-07-09T19:19:45Z", "archived": false, "topContributors": [ { "login": "tijme", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/5873573?v=4", "type": "User" } ] }, { "repo": "jlleitschuh/nestjs-devtools-integration-rce-poc", "name": "nestjs-devtools-integration-rce-poc", "owner": "jlleitschuh", "url": "https://github.com/JLLeitschuh/nestjs-devtools-integration-rce-poc", "stars": 1, "language": "HTML", "description": "A demonstration of the RCE vulnerability in the @nestjs/devtools-integration", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jonathan Leitschuh", "cardId": "dc3c42eee9426138", "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b5c4cd18152", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-01T16:48:48Z", "archived": false, "topContributors": [ { "login": "JLLeitschuh", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1323708?v=4", "type": "User" } ] }, { "repo": "ndrix/wifibacon", "name": "wifibacon", "owner": "ndrix", "url": "https://github.com/ndrix/wifibacon", "stars": 1, "language": "Python", "description": "Simple WLAN python scripts. for wifi beacon capturing and all. Just to play around, nothing big.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Hendrickx", "cardId": "e0fcf494618057a9", "avatar": "https://avatars.githubusercontent.com/u/355050?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "30b1d8677247", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-02-24T22:05:19Z", "archived": false, "topContributors": [ { "login": "ndrix", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/355050?v=4", "type": "User" } ] }, { "repo": "actuator/com.enflick.android.textnow", "name": "com.enflick.android.textnow", "owner": "actuator", "url": "https://github.com/actuator/com.enflick.android.TextNow", "stars": 1, "language": null, "description": "CVE-2024-36437", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1cb76cd21b41", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-01T17:12:51Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.cn.dq.ipc", "name": "com.cn.dq.ipc", "owner": "actuator", "url": "https://github.com/actuator/com.cn.dq.ipc", "stars": 1, "language": null, "description": "CVE-2024-25731", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a7ea359fb3dc", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-26T23:51:10Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.solarized.firedown", "name": "com.solarized.firedown", "owner": "actuator", "url": "https://github.com/actuator/com.solarized.firedown", "stars": 1, "language": null, "description": "CVE-2024-31974", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4750bc21d015", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-17T02:10:57Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.tcl.browser", "name": "com.tcl.browser", "owner": "actuator", "url": "https://github.com/actuator/com.tcl.browser", "stars": 1, "language": null, "description": "CVE-2023-43481 ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "671243e243a7", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-13T01:51:45Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/yi", "name": "yi", "owner": "actuator", "url": "https://github.com/actuator/yi", "stars": 1, "language": null, "description": "CVE-2023-47882 | CVE-2024-23727", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3e008763bc65", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-24T16:16:58Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.cutestudio.colordialer", "name": "com.cutestudio.colordialer", "owner": "actuator", "url": "https://github.com/actuator/com.cutestudio.colordialer", "stars": 1, "language": null, "description": "CVE-2023-42468", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "097a9126f1e0", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-27T01:05:27Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.full.dialer.top.secure.encrypted", "name": "com.full.dialer.top.secure.encrypted", "owner": "actuator", "url": "https://github.com/actuator/com.full.dialer.top.secure.encrypted", "stars": 1, "language": null, "description": "CVE-2023-42469", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b8c73617b56", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-12-26T22:35:00Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.sinous.voice.dialer", "name": "com.sinous.voice.dialer", "owner": "actuator", "url": "https://github.com/actuator/com.sinous.voice.dialer", "stars": 1, "language": null, "description": "CVE-2023-49002", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c36c787324c7", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-28T08:15:21Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.simplemobiletools.dialer", "name": "com.simplemobiletools.dialer", "owner": "actuator", "url": "https://github.com/actuator/com.simplemobiletools.dialer", "stars": 1, "language": null, "description": "CVE-2023-49003", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e69ec5a2e320", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-19T18:20:39Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/wave.ai.browser", "name": "wave.ai.browser", "owner": "actuator", "url": "https://github.com/actuator/wave.ai.browser", "stars": 1, "language": null, "description": "CVE-2023-42471", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b1c6368665c8", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-14T14:45:42Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.phlox.tvwebbrowser", "name": "com.phlox.tvwebbrowser", "owner": "actuator", "url": "https://github.com/actuator/com.phlox.tvwebbrowser", "stars": 1, "language": null, "description": "CVE-2023-43955", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e636423335c", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-07T16:45:42Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.eypcnnapps.quickreboot", "name": "com.eypcnnapps.quickreboot", "owner": "actuator", "url": "https://github.com/actuator/com.eypcnnapps.quickreboot", "stars": 1, "language": null, "description": "CVE-2023-47355", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d781d41ff94f", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-01T02:41:13Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "actuator/com.bdrm.superreboot", "name": "com.bdrm.superreboot", "owner": "actuator", "url": "https://github.com/actuator/com.bdrm.superreboot", "stars": 1, "language": null, "description": "CVE-2023-47889 | CVE-2023-47354", "type": "tool", "lanes": [ "2" ], "author": { "name": "Lucas Carmo", "cardId": "e8174f4b40427680", "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f7bd14e97d3a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-01T01:12:15Z", "archived": false, "topContributors": [ { "login": "actuator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/78701239?v=4", "type": "User" } ] }, { "repo": "bgeesaman/cve-2018-1002105", "name": "cve-2018-1002105", "owner": "bgeesaman", "url": "https://github.com/bgeesaman/cve-2018-1002105", "stars": 1, "language": "Go", "description": "PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105", "type": "tool", "lanes": [ "2" ], "author": { "name": "Brad Geesaman", "cardId": "e9ea317205f8c648", "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7c05d5c0ea9a", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-30T15:14:03Z", "archived": false, "topContributors": [ { "login": "bgeesaman", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3769609?v=4", "type": "User" } ] }, { "repo": "clevernyyyy/cve-2025-55182-dockerized", "name": "cve-2025-55182-dockerized", "owner": "clevernyyyy", "url": "https://github.com/clevernyyyy/CVE-2025-55182-Dockerized", "stars": 1, "language": "Shell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Adam Schaal", "cardId": "f545eaaa75072b6d", "avatar": "https://avatars.githubusercontent.com/u/2798509?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a701a4aea4c4", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-01T21:37:58Z", "archived": false, "topContributors": [ { "login": "clevernyyyy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2798509?v=4", "type": "User" } ] }, { "repo": "tihmstar/bberase_ultrasn0w", "name": "bberase_ultrasn0w", "owner": "tihmstar", "url": "https://github.com/tihmstar/bberase_ultrasn0w", "stars": 1, "language": "C", "description": "Tool for erasing X-Gold 608 06.15.00 baseband using AT+XAPP exploit", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tihmstar", "cardId": "f757d3b21c2ac97c", "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2d9f8e075e73", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": true, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-11T12:29:12Z", "archived": false, "topContributors": [ { "login": "tihmstar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1363935?v=4", "type": "User" } ] }, { "repo": "qtc-de/ctfcred", "name": "ctfcred", "owner": "qtc-de", "url": "https://github.com/qtc-de/ctfcred", "stars": 1, "language": "Python", "description": "CTF Credential Manager", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tobias Neitzel", "cardId": "5a0ad51ea66c2a96", "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8bd940ec214e", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-28T05:52:51Z", "archived": false, "topContributors": [ { "login": "qtc-de", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/49147108?v=4", "type": "User" } ] }, { "repo": "csandker/enum-adtrusts", "name": "enum-adtrusts", "owner": "csandker", "url": "https://github.com/csandker/Enum-ADTrusts", "stars": 1, "language": "PowerShell", "description": "Forked from https://github.com/sse-secure-systems/Active-Directory-Spotlights/blob/master/AD-Trusts/Enum-ADTrusts.ps1", "type": "tool", "lanes": [ "2" ], "author": { "name": "Carsten Sandker", "cardId": "8e4383b825a0355e", "avatar": "https://avatars.githubusercontent.com/u/4909972?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "50689901520d", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-10-11T21:05:10Z", "archived": false, "topContributors": [] }, { "repo": "parzel/rusty-joomla-rce", "name": "rusty-joomla-rce", "owner": "parzel", "url": "https://github.com/parzel/rusty-joomla-rce", "stars": 1, "language": "Python", "description": "Rusty Joomla RCE (3.0.0 to the 3.4.6) - Unauthenticated PHP object injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pascal Zenker", "cardId": "9b6f2291602b7f1c", "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "abb6c4c5ab91", "score": 18, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": true, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-03T12:38:47Z", "archived": false, "topContributors": [ { "login": "parzel", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9403390?v=4", "type": "User" } ] }, { "repo": "hausec/bloodhound-custom-queries", "name": "bloodhound-custom-queries", "owner": "hausec", "url": "https://github.com/hausec/Bloodhound-Custom-Queries", "stars": 857, "language": null, "description": "Custom Query list for the Bloodhound GUI based off my cheatsheet", "type": "tool", "lanes": [ "1" ], "author": { "name": "hausec", "cardId": null }, "referencedBy": [ { "url": "https://blog.zsec.uk/crto-review/", "title": "Certified Red Team Operator (CRTO) aka RTO I - Red Team Ops I Review", "person": "Andy Gill" }, { "url": "https://hausec.com/azure/", "title": "Azure Penetration Testing Articles", "person": "Ryan Hausknecht" }, { "url": "https://hausec.com/2019/09/09/bloodhound-cypher-cheatsheet/", "title": "BloodHound Cypher Cheatsheet", "person": "Ryan Hausknecht" }, { "url": "https://hausec.com/2020/11/23/azurehound-cypher-cheatsheet/", "title": "AzureHound Cypher Cheatsheet", "person": "Ryan Hausknecht" } ], "referencedCount": 4, "id": "cd4f0b3c3e48", "score": 17, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 1, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [ { "name": "Kent Ickler", "cardId": "7288fb628e8144ab", "avatar": "https://avatars.githubusercontent.com/u/29710634?v=4", "login": "Relkci" } ], "pushedAt": "2025-10-29T22:18:11Z", "archived": false, "topContributors": [ { "login": "hausec", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/33264718?v=4", "type": "User" }, { "login": "Relkci", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29710634?v=4", "type": "User" }, { "login": "Scoubi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7934465?v=4", "type": "User" }, { "login": "joedoejames", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53355319?v=4", "type": "User" }, { "login": "nopfor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2806446?v=4", "type": "User" } ] }, { "repo": "worawit/cve-2021-3156", "name": "cve-2021-3156", "owner": "worawit", "url": "https://github.com/worawit/CVE-2021-3156", "stars": 801, "language": "Python", "description": "Sudo Baron Samedit Exploit", "type": "tool", "lanes": [ "1" ], "author": { "name": "worawit", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2022/06/18/htb-paper.html", "title": "HTB: Paper", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/07/09/htb-routerspace.html", "title": "HTB: RouterSpace", "person": "0xdf" } ], "referencedCount": 2, "id": "fb9480a046c9", "score": 17, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-01-13T05:48:01Z", "archived": false, "topContributors": [ { "login": "worawit", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/1352296?v=4", "type": "User" }, { "login": "zeroSteiner", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2058303?v=4", "type": "User" } ] }, { "repo": "initstring/dirty_sock", "name": "dirty_sock", "owner": "initstring", "url": "https://github.com/initstring/dirty_sock", "stars": 683, "language": "Python", "description": "Linux privilege escalation exploit via snapd (CVE-2019-7304)", "type": "tool", "lanes": [ "1" ], "author": { "name": "initstring", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2019/03/30/htb-curling.html", "title": "HTB: Curling", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2019/02/13/playing-with-dirty-sock.html", "title": "Playing with Dirty Sock", "person": "0xdf" } ], "referencedCount": 2, "id": "e1240638258f", "score": 17, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-05-09T21:34:26Z", "archived": false, "topContributors": [ { "login": "initstring", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/26131150?v=4", "type": "User" } ] }, { "repo": "cn33liz/starfighters", "name": "starfighters", "owner": "cn33liz", "url": "https://github.com/Cn33liz/StarFighters", "stars": 321, "language": "Visual Basic", "description": "A JavaScript and VBScript Based Empire Launcher, which runs within their own embedded PowerShell Host.", "type": "tool", "lanes": [ "1" ], "author": { "name": "cn33liz", "cardId": null }, "referencedBy": [ { "url": "https://oddvar.moe/2017/08/13/bypassing-device-guard-umci-using-chm-cve-2017-8625/", "title": "Bypassing Device guard UMCI using CHM – CVE-2017-8625", "person": "Oddvar Moe" }, { "url": "https://oddvar.moe/2017/12/21/applocker-case-study-how-insecure-is-it-really-part-2/", "title": "AppLocker – Case study – How insecure is it really? – Part 2", "person": "Oddvar Moe" } ], "referencedCount": 2, "id": "ba696a0f26d6", "score": 17, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2017-06-05T19:18:38Z", "archived": false, "topContributors": [ { "login": "Cn33liz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "gimini/powermemory", "name": "PowerMemory", "owner": "giMini", "url": "https://github.com/giMini/PowerMemory", "id": "858eeabbcdc2", "stars": 847, "language": "PowerShell", "description": "Exploit the credentials present in files and memory", "type": "tool", "pushedAt": "2023-05-25T17:58:53Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "giMini", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "giMini", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/13139808?v=4", "type": "User" } ] }, { "repo": "synacktiv/hopla", "name": "HopLa", "owner": "synacktiv", "url": "https://github.com/synacktiv/HopLa", "id": "8c76d8945bf2", "stars": 836, "language": "Java", "description": " HopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite", "type": "tool", "pushedAt": "2026-04-01T19:51:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "0x4144", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/51817778?v=4", "type": "User" }, { "login": "joris56", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/249715415?v=4", "type": "User" } ] }, { "repo": "sensepost/det", "name": "DET", "owner": "sensepost", "url": "https://github.com/sensepost/DET", "id": "a1537b2e5d8b", "stars": 821, "language": "Python", "description": "(extensible) Data Exfiltration Toolkit (DET)", "type": "tool", "pushedAt": "2017-11-03T12:37:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "login": "staaldraad" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "nopdotcom", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/1357866?v=4", "type": "User" }, { "login": "PaulSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4060683?v=4", "type": "User" }, { "login": "singe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "staaldraad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" }, { "login": "chokepoint", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1689043?v=4", "type": "User" } ] }, { "repo": "skahwah/sqlrecon", "name": "SQLRecon", "owner": "skahwah", "url": "https://github.com/skahwah/SQLRecon", "id": "eb4f382a466d", "stars": 812, "language": "C#", "description": "A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation. ", "type": "tool", "pushedAt": "2026-06-16T23:26:07Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "skahwah", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rasta Mouse (Daniel Duggan)", "cardId": "a1481876ae7e3fee", "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "login": "rasta-mouse" }, { "name": "Matt Creel", "cardId": "02afec87bd2b8023", "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "login": "Tw1sm" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "skahwah", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/5567558?v=4", "type": "User" }, { "login": "sanjivkawa", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/142624255?v=4", "type": "User" }, { "login": "rasta-mouse", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7346521?v=4", "type": "User" }, { "login": "n3rada", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/72791564?v=4", "type": "User" }, { "login": "G0ldenGunSec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/28241763?v=4", "type": "User" }, { "login": "jakxx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1746973?v=4", "type": "User" }, { "login": "Scaum", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9824789?v=4", "type": "User" }, { "login": "Tw1sm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37981031?v=4", "type": "User" } ] }, { "repo": "ytisf/pyexfil", "name": "PyExfil", "owner": "ytisf", "url": "https://github.com/ytisf/PyExfil", "id": "3f5dbb196ac1", "stars": 809, "language": "Python", "description": "PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For red team simulation and DLP detection testing.", "type": "tool", "pushedAt": "2026-06-23T03:39:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ytisf", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre Dulaunoy", "cardId": "ce61bec31cf8c835", "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "login": "adulau" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "ytisf", "c": 70, "avatar": "https://avatars.githubusercontent.com/u/5548594?v=4", "type": "User" }, { "login": "DZertLife", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12176300?v=4", "type": "User" }, { "login": "matthieuxyz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9122514?v=4", "type": "User" }, { "login": "james-richards-privitar", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/61580341?v=4", "type": "User" }, { "login": "dabi0ne", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6230732?v=4", "type": "User" }, { "login": "adulau", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3309?v=4", "type": "User" }, { "login": "Sheksa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6614945?v=4", "type": "User" }, { "login": "tisf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/726629?v=4", "type": "User" } ] }, { "repo": "bishopfox/h2csmuggler", "name": "h2csmuggler", "owner": "BishopFox", "url": "https://github.com/BishopFox/h2csmuggler", "id": "f95af53f653f", "stars": 803, "language": "Python", "description": "HTTP Request Smuggling over HTTP/2 Cleartext (h2c)", "type": "tool", "pushedAt": "2022-05-10T21:52:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "the-bumble", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1927215?v=4", "type": "User" }, { "login": "riramar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6748242?v=4", "type": "User" } ] }, { "repo": "federicodotta/java-deserialization-scanner", "name": "Java-Deserialization-Scanner", "owner": "federicodotta", "url": "https://github.com/federicodotta/Java-Deserialization-Scanner", "id": "cf217b837623", "stars": 801, "language": "Java", "description": "All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities", "type": "tool", "pushedAt": "2021-11-07T18:30:53Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "federicodotta", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "federicodotta", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/1651767?v=4", "type": "User" }, { "login": "jg10", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/2336737?v=4", "type": "User" }, { "login": "dnet", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/163115?v=4", "type": "User" } ] }, { "repo": "mojtabatajik/robber", "name": "Robber", "owner": "MojtabaTajik", "url": "https://github.com/MojtabaTajik/Robber", "id": "a04b7e7e61a0", "stars": 799, "language": "Pascal", "description": "Robber is open source tool for finding executables prone to DLL hijacking", "type": "tool", "pushedAt": "2026-07-08T09:17:14Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "MojtabaTajik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MojtabaTajik", "c": 67, "avatar": "https://avatars.githubusercontent.com/u/15414923?v=4", "type": "User" } ] }, { "repo": "netspi/sqlinjectionwiki", "name": "SQLInjectionWiki", "owner": "NetSPI", "url": "https://github.com/NetSPI/SQLInjectionWiki", "id": "768d068989a6", "stars": 796, "language": "HTML", "description": "A wiki focusing on aggregating and documenting various SQL injection methods", "type": "tool", "pushedAt": "2026-04-01T22:05:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "JacobReynolds", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/6618908?v=4", "type": "User" }, { "login": "nullbind", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" }, { "login": "rbeebe-netspi", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/130483061?v=4", "type": "User" }, { "login": "tigertigerboy07", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/86011901?v=4", "type": "User" }, { "login": "Yaeger", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3026660?v=4", "type": "User" }, { "login": "secf00tprint", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1818452?v=4", "type": "User" }, { "login": "melkNS", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/69648136?v=4", "type": "User" }, { "login": "anukaal", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53907493?v=4", "type": "User" }, { "login": "aph3rson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/838916?v=4", "type": "User" }, { "login": "wstrei", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23058204?v=4", "type": "User" }, { "login": "ankushshekhawat", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29685400?v=4", "type": "User" } ] }, { "repo": "nccgroup/sadcloud", "name": "sadcloud", "owner": "nccgroup", "url": "https://github.com/nccgroup/sadcloud", "id": "6718d05231b8", "stars": 784, "language": "HCL", "description": "A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure", "type": "tool", "pushedAt": "2023-10-14T19:09:38Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "ramimac", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/13310971?v=4", "type": "User" }, { "login": "0xJDow", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/15065052?v=4", "type": "User" }, { "login": "jdow-ncc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/55851560?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" }, { "login": "danielperez660", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30447150?v=4", "type": "User" } ] }, { "repo": "aas-n/spraykatz", "name": "spraykatz", "owner": "aas-n", "url": "https://github.com/aas-n/spraykatz", "id": "f14422d0c37c", "stars": 782, "language": "Python", "description": "Credentials gathering tool automating remote procdump and parse of lsass process.", "type": "tool", "pushedAt": "2020-06-20T12:14:00Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "aas-n", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "aas-n", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/10345890?v=4", "type": "User" }, { "login": "cclauss", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3709715?v=4", "type": "User" } ] }, { "repo": "blackarrowsec/mssqlproxy", "name": "mssqlproxy", "owner": "blackarrowsec", "url": "https://github.com/blackarrowsec/mssqlproxy", "id": "a3a72392fa0c", "stars": 773, "language": "Python", "description": "mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse", "type": "tool", "pushedAt": "2021-02-16T20:13:04Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "blackarrowsec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "xassiz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10196385?v=4", "type": "User" }, { "login": "apanonimo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5932334?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/fingerprintx", "name": "fingerprintx", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/fingerprintx", "id": "bd2c2e5f7e46", "stars": 760, "language": "Go", "description": "Standalone utility for service discovery on open ports! ", "type": "tool", "pushedAt": "2026-01-13T18:25:31Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 11, "topContributors": [ { "login": "nsportsman", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "praetorian-thendrickson", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/69640071?v=4", "type": "User" }, { "login": "UNC1739", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "Ameston", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/25017069?v=4", "type": "User" }, { "login": "EvanLeleux", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/85642615?v=4", "type": "User" }, { "login": "noah-tutt-praetorian", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/69209160?v=4", "type": "User" }, { "login": "praetorian-rad", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/125032465?v=4", "type": "User" }, { "login": "luke-goddard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56234834?v=4", "type": "User" }, { "login": "poq79", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43519176?v=4", "type": "User" }, { "login": "No-Github", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18167071?v=4", "type": "User" }, { "login": "treburn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97044356?v=4", "type": "User" } ] }, { "repo": "screetsec/vegile", "name": "Vegile", "owner": "screetsec", "url": "https://github.com/screetsec/Vegile", "id": "31ac4f07f660", "stars": 754, "language": "Shell", "description": "This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will", "type": "tool", "pushedAt": "2022-09-01T01:54:35Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "screetsec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "screetsec", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/17976841?v=4", "type": "User" }, { "login": "harsxv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32115753?v=4", "type": "User" }, { "login": "M-Kinley", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26259619?v=4", "type": "User" } ] }, { "repo": "print3m/dllshimmer", "name": "DllShimmer", "owner": "Print3M", "url": "https://github.com/Print3M/DllShimmer", "id": "f130037ec888", "stars": 749, "language": "Go", "description": "Weaponize DLL hijacking easily. Backdoor any function in any DLL.", "type": "tool", "pushedAt": "2025-08-26T12:06:52Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Print3M", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Print3M", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/92022497?v=4", "type": "User" }, { "login": "chainski", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/96607632?v=4", "type": "User" } ] }, { "repo": "optiv/ivy", "name": "Ivy", "owner": "optiv", "url": "https://github.com/optiv/Ivy", "id": "0e1afe616071", "stars": 743, "language": "Go", "description": "Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment t", "type": "tool", "pushedAt": "2023-08-18T17:30:14Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "optiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Tylous", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "nccgroup/aws-inventory", "name": "aws-inventory", "owner": "nccgroup", "url": "https://github.com/nccgroup/aws-inventory", "id": "b109d6ecf16f", "stars": 740, "language": "Python", "description": "Discover resources created in an AWS account.", "type": "tool", "pushedAt": "2024-04-05T12:41:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bitsandsalsa", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/6826235?v=4", "type": "User" } ] }, { "repo": "l0ss/grouper", "name": "Grouper", "owner": "l0ss", "url": "https://github.com/l0ss/Grouper", "id": "51a1ca52023c", "stars": 736, "language": "PowerShell", "description": "A PowerShell script for helping to find vulnerable settings in AD Group Policy. (deprecated, use Grouper2 instead!)", "type": "tool", "pushedAt": "2019-02-05T03:20:23Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "l0ss", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "smileytechguy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62458599?v=4", "type": "User" } ] }, { "repo": "peewpw/invoke-wcmdump", "name": "Invoke-WCMDump", "owner": "peewpw", "url": "https://github.com/peewpw/Invoke-WCMDump", "id": "83d4d58011a7", "stars": 736, "language": "PowerShell", "description": "PowerShell Script to Dump Windows Credentials from the Credential Manager", "type": "tool", "pushedAt": "2017-12-12T00:46:33Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "peewpw", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "peewpw", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26287488?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/purple-team-attack-automation", "name": "purple-team-attack-automation", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/purple-team-attack-automation", "id": "985e650def1b", "stars": 732, "language": "Ruby", "description": "Praetorian's public release of our Metasploit automation of MITRE ATT&CK™ TTPs", "type": "tool", "pushedAt": "2020-01-21T20:48:17Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jay Turla", "cardId": "4db7ae9311224949", "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "login": "shipcod3" }, { "name": "Dhiraj Mishra", "cardId": "9d00ea00090f2bac", "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "login": "RootUp" }, { "name": "Quentin Kaiser", "cardId": "bae8b4a25b1e703b", "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "login": "qkaiser" }, { "name": "Steven Seeley", "cardId": "fde791457a7ce34d", "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "login": "stevenseeley" }, { "name": "András Kabai", "cardId": "82aa039ea4465e64", "avatar": "https://avatars.githubusercontent.com/u/3336678?v=4", "login": "andrewkabai" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 100, "topContributors": [ { "login": "msjenkins-r7", "c": 928, "avatar": "https://avatars.githubusercontent.com/u/5332090?v=4", "type": "User" }, { "login": "h00die", "c": 655, "avatar": "https://avatars.githubusercontent.com/u/752491?v=4", "type": "User" }, { "login": "bcoles", "c": 502, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "jrobles-r7", "c": 411, "avatar": "https://avatars.githubusercontent.com/u/23102036?v=4", "type": "User" }, { "login": "cbrnrd", "c": 165, "avatar": "https://avatars.githubusercontent.com/u/16970798?v=4", "type": "User" }, { "login": "nixawk", "c": 146, "avatar": "https://avatars.githubusercontent.com/u/7352479?v=4", "type": "User" }, { "login": "aushack", "c": 142, "avatar": "https://avatars.githubusercontent.com/u/1175434?v=4", "type": "User" }, { "login": "ebleiweiss-r7", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/41024958?v=4", "type": "User" }, { "login": "Green-m", "c": 117, "avatar": "https://avatars.githubusercontent.com/u/22535454?v=4", "type": "User" }, { "login": "stephenfewer", "c": 115, "avatar": "https://avatars.githubusercontent.com/u/1172185?v=4", "type": "User" }, { "login": "itsmeroy2012", "c": 108, "avatar": "https://avatars.githubusercontent.com/u/20739241?v=4", "type": "User" }, { "login": "shipcod3", "c": 101, "avatar": "https://avatars.githubusercontent.com/u/3483615?v=4", "type": "User" }, { "login": "Auxilus", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/23075789?v=4", "type": "User" }, { "login": "RootUp", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/29517169?v=4", "type": "User" }, { "login": "benpturner", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "juushya", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/4639200?v=4", "type": "User" }, { "login": "mdisec", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/4004716?v=4", "type": "User" }, { "login": "qkaiser", "c": 85, "avatar": "https://avatars.githubusercontent.com/u/569494?v=4", "type": "User" }, { "login": "DanielRTeixeira", "c": 84, "avatar": "https://avatars.githubusercontent.com/u/11260062?v=4", "type": "User" }, { "login": "clee-r7", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/857346?v=4", "type": "User" }, { "login": "tabassassin", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/4990957?v=4", "type": "User" }, { "login": "sn0wfa11", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/12484685?v=4", "type": "User" }, { "login": "Meatballs1", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "phra", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/984628?v=4", "type": "User" }, { "login": "kenlacroix", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/53909268?v=4", "type": "User" }, { "login": "tasos-r7", "c": 61, "avatar": "https://avatars.githubusercontent.com/u/1943841?v=4", "type": "User" }, { "login": "mandreko", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/419731?v=4", "type": "User" }, { "login": "averagesecurityguy", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/1117951?v=4", "type": "User" }, { "login": "nstarke", "c": 56, "avatar": "https://avatars.githubusercontent.com/u/2895826?v=4", "type": "User" }, { "login": "stevenseeley", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/1301421?v=4", "type": "User" } ] }, { "repo": "nongiach/sudo_inject", "name": "sudo_inject", "owner": "nongiach", "url": "https://github.com/nongiach/sudo_inject", "id": "69409ddb41c6", "stars": 731, "language": "C", "description": "[Linux] Two Privilege Escalation techniques abusing sudo token", "type": "tool", "pushedAt": "2019-04-14T07:43:35Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "nongiach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "aringo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3400203?v=4", "type": "User" }, { "login": "nfsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15172919?v=4", "type": "User" } ] }, { "repo": "nccgroup/blackboxprotobuf", "name": "blackboxprotobuf", "owner": "nccgroup", "url": "https://github.com/nccgroup/blackboxprotobuf", "id": "993aa2640a3c", "stars": 730, "language": "Python", "description": "Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.", "type": "tool", "pushedAt": "2026-04-13T17:08:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "rwinkelmaier-ncc", "c": 171, "avatar": "https://avatars.githubusercontent.com/u/4604906?v=4", "type": "User" }, { "login": "Benjamin-Loison", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12752145?v=4", "type": "User" }, { "login": "daverigby", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/755459?v=4", "type": "User" }, { "login": "KonpakuSyl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33344292?v=4", "type": "User" }, { "login": "spolansky-apple", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/75332242?v=4", "type": "User" }, { "login": "Shra1V32", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/89348492?v=4", "type": "User" }, { "login": "irsdl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1798313?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/dvrf", "name": "DVRF", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/DVRF", "id": "23cee8651657", "stars": 719, "language": "HTML", "description": "The Damn Vulnerable Router Firmware Project", "type": "tool", "pushedAt": "2021-04-07T22:27:40Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "b1ack0wl", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/14972026?v=4", "type": "User" } ] }, { "repo": "optiv/freeze.rs", "name": "Freeze.rs", "owner": "optiv", "url": "https://github.com/optiv/Freeze.rs", "id": "9f640e9613f8", "stars": 717, "language": "Rust", "description": "Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST", "type": "tool", "pushedAt": "2023-08-18T17:26:44Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Tylous", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "nccgroup/loggerplusplus", "name": "LoggerPlusPlus", "owner": "nccgroup", "url": "https://github.com/nccgroup/LoggerPlusPlus", "id": "e489478e1cd4", "stars": 710, "language": "Java", "description": "Advanced Burp Suite Logging Extension", "type": "tool", "pushedAt": "2024-05-31T05:48:24Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 16, "topContributors": [ { "login": "C0DEbrained", "c": 163, "avatar": "https://avatars.githubusercontent.com/u/1339555?v=4", "type": "User" }, { "login": "irsdl", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1798313?v=4", "type": "User" }, { "login": "latacora-tomekr", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/69216698?v=4", "type": "User" }, { "login": "PortSwiggerSupport", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/52737744?v=4", "type": "User" }, { "login": "jselvi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/773518?v=4", "type": "User" }, { "login": "Hannah-PortSwigger", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/58562826?v=4", "type": "User" }, { "login": "UthmanPortSwigger", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/60008549?v=4", "type": "User" }, { "login": "blackphreak", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13148377?v=4", "type": "User" }, { "login": "tsc-awardle", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/67977601?v=4", "type": "User" }, { "login": "cnotin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "ldionmarcil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1320868?v=4", "type": "User" }, { "login": "jorgectf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46056498?v=4", "type": "User" }, { "login": "JulianVolodia", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1219023?v=4", "type": "User" }, { "login": "mtausig", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1511226?v=4", "type": "User" }, { "login": "jm-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/77107401?v=4", "type": "User" }, { "login": "wotgl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7968712?v=4", "type": "User" } ] }, { "repo": "bishopfox/badpods", "name": "badPods", "owner": "BishopFox", "url": "https://github.com/BishopFox/badPods", "id": "fe7302f65e32", "stars": 707, "language": "Shell", "description": "A collection of manifests that will create pods with elevated privileges.", "type": "tool", "pushedAt": "2025-12-30T17:58:33Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "sethsec-bf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/46326948?v=4", "type": "User" }, { "login": "Kirandawadi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33518011?v=4", "type": "User" }, { "login": "sethsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" }, { "login": "ccerne-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97538241?v=4", "type": "User" } ] }, { "repo": "fortra/no-consolation", "name": "No-Consolation", "owner": "fortra", "url": "https://github.com/fortra/No-Consolation", "id": "a36b5b0f34c5", "stars": 700, "language": "C", "description": " A BOF that runs unmanaged PEs inline ", "type": "tool", "pushedAt": "2024-10-23T16:25:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "S4ntiagoP", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" }, { "login": "Cerbersec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/58052983?v=4", "type": "User" } ] }, { "repo": "0xthirteen/movekit", "name": "MoveKit", "owner": "0xthirteen", "url": "https://github.com/0xthirteen/MoveKit", "id": "d3da48439255", "stars": 680, "language": "C#", "description": "Cobalt Strike kit for Lateral Movement", "type": "tool", "pushedAt": "2020-02-21T20:23:45Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "0xthirteen", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xthirteen", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9096315?v=4", "type": "User" } ] }, { "repo": "anon-exploiter/suid3num", "name": "SUID3NUM", "owner": "Anon-Exploiter", "url": "https://github.com/Anon-Exploiter/SUID3NUM", "id": "f0400ed62ce0", "stars": 676, "language": "Python", "description": "A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & a", "type": "tool", "pushedAt": "2025-08-04T05:07:43Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Anon-Exploiter", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "Anon-Exploiter", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/18597330?v=4", "type": "User" }, { "login": "OutHackThem", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24292478?v=4", "type": "User" }, { "login": "Xib3rR4dAr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24238512?v=4", "type": "User" }, { "login": "0liverFlow", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/64969369?v=4", "type": "User" } ] }, { "repo": "nhoya/gosint", "name": "gOSINT", "owner": "Nhoya", "url": "https://github.com/Nhoya/gOSINT", "id": "e8e60b9e8a0e", "stars": 672, "language": "Go", "description": "OSINT Swiss Army Knife", "type": "tool", "pushedAt": "2021-02-23T00:20:27Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Nhoya", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Nhoya", "c": 186, "avatar": "https://avatars.githubusercontent.com/u/7293260?v=4", "type": "User" }, { "login": "gSpera", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15197329?v=4", "type": "User" } ] }, { "repo": "netspi/pesecurity", "name": "PESecurity", "owner": "NetSPI", "url": "https://github.com/NetSPI/PESecurity", "id": "ab48363b5e5a", "stars": 667, "language": "PowerShell", "description": "PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.", "type": "tool", "pushedAt": "2024-07-31T09:53:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "egru", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" }, { "login": "aaronhudon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4406811?v=4", "type": "User" }, { "login": "EricSesterhennX41", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25737023?v=4", "type": "User" } ] }, { "repo": "optiv/go365", "name": "Go365", "owner": "optiv", "url": "https://github.com/optiv/Go365", "id": "500931cfb120", "stars": 652, "language": "Go", "description": "An Office365 User Attack Tool", "type": "tool", "pushedAt": "2024-03-19T11:02:57Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "pavetheway", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/6688373?v=4", "type": "User" }, { "login": "Tylous", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "EatonChips", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9360098?v=4", "type": "User" } ] }, { "repo": "sensepost/kwetza", "name": "kwetza", "owner": "sensepost", "url": "https://github.com/sensepost/kwetza", "id": "77390fad3910", "stars": 645, "language": "Smali", "description": "Python script to inject existing Android applications with a Meterpreter payload.", "type": "tool", "pushedAt": "2023-07-21T16:30:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "login": "brompwnie" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "brompwnie", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" }, { "login": "JunaidLoonat", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1301829?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" } ] }, { "repo": "bishopfox/bfinject", "name": "bfinject", "owner": "BishopFox", "url": "https://github.com/BishopFox/bfinject", "id": "cecda3fdc880", "stars": 641, "language": "Objective-C++", "description": "Dylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks", "type": "tool", "pushedAt": "2022-03-17T17:55:10Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xhaggis", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/6735009?v=4", "type": "User" } ] }, { "repo": "juliourena/sharpnopsexec", "name": "SharpNoPSExec", "owner": "juliourena", "url": "https://github.com/juliourena/SharpNoPSExec", "id": "c89636d7e18f", "stars": 639, "language": "C#", "description": "Get file less command execution for lateral movement.", "type": "tool", "pushedAt": "2022-06-03T10:32:55Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "juliourena", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "juliourena", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/29603107?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/titus", "name": "titus", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/titus", "id": "d6c8eb9ea25d", "stars": 635, "language": "Go", "description": "High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.", "type": "tool", "pushedAt": "2026-07-15T23:20:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Matthew Jackoski", "cardId": "48359776e3d7d716", "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "login": "DS-KoolAid" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 35, "topContributors": [ { "login": "michaelweber", "c": 90, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "nsportsman", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "anushkavirgaonkar", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/41755334?v=4", "type": "User" }, { "login": "tk-praet", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/188894168?v=4", "type": "User" }, { "login": "carterross", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/164905970?v=4", "type": "User" }, { "login": "frosales-pra", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/184157184?v=4", "type": "User" }, { "login": "ztgrace", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2554037?v=4", "type": "User" }, { "login": "willmccardell", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/33265548?v=4", "type": "User" }, { "login": "maurodelossantos-praetorian", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/173078822?v=4", "type": "User" }, { "login": "mlefebvre", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2453368?v=4", "type": "User" }, { "login": "mikepiotrowski2", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/198971315?v=4", "type": "User" }, { "login": "noah-tutt-praetorian", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/69209160?v=4", "type": "User" }, { "login": "aarushidwi", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/135048681?v=4", "type": "User" }, { "login": "aashish-sec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/135348127?v=4", "type": "User" }, { "login": "Creastery-Praetorian", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/181773125?v=4", "type": "User" }, { "login": "Ameston", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25017069?v=4", "type": "User" }, { "login": "praetorian-peter-mueller", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/45581135?v=4", "type": "User" }, { "login": "gitoso", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2094672?v=4", "type": "User" }, { "login": "knowttl", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/190909824?v=4", "type": "User" }, { "login": "hugo-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "rgrunsten", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44093608?v=4", "type": "User" }, { "login": "KhaelK-Praetorian", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/171597026?v=4", "type": "User" }, { "login": "ASCIIFry", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32338942?v=4", "type": "User" }, { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "brandon-t-elliott", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/126433368?v=4", "type": "User" }, { "login": "ChrisJr404", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11917633?v=4", "type": "User" }, { "login": "realslimsud0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105659843?v=4", "type": "User" }, { "login": "eli-wald", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/173080195?v=4", "type": "User" }, { "login": "EvanLeleux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85642615?v=4", "type": "User" }, { "login": "DS-KoolAid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "type": "User" } ] }, { "repo": "redsiege/graphstrike", "name": "GraphStrike", "owner": "RedSiege", "url": "https://github.com/RedSiege/GraphStrike", "id": "4fa4b896f4b3", "stars": 634, "language": "C", "description": "Cobalt Strike HTTPS beaconing over Microsoft Graph API ", "type": "tool", "pushedAt": "2024-06-25T11:18:19Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "RedSiege", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "login": "Octoberfest7" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Octoberfest7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" }, { "login": "alex-redsiege", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/152210699?v=4", "type": "User" } ] }, { "repo": "ring0lab/catphish", "name": "catphish", "owner": "ring0lab", "url": "https://github.com/ring0lab/catphish", "id": "25fe4e1815f2", "stars": 634, "language": "Ruby", "description": "CATPHISH project - For phishing and corporate espionage. Perfect for RED TEAM. ", "type": "tool", "pushedAt": "2018-10-16T12:57:25Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ring0lab", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "ring0lab", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/6279661?v=4", "type": "User" }, { "login": "andrewhowdencom", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/6720547?v=4", "type": "User" }, { "login": "jnqpblc", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10349141?v=4", "type": "User" }, { "login": "picatz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/14850816?v=4", "type": "User" }, { "login": "sundhaug92", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/519283?v=4", "type": "User" }, { "login": "shahzeb1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383831?v=4", "type": "User" }, { "login": "disenchant", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/686611?v=4", "type": "User" } ] }, { "repo": "nccgroup/phantap", "name": "phantap", "owner": "nccgroup", "url": "https://github.com/nccgroup/phantap", "id": "6babe5cd6aa5", "stars": 626, "language": "C", "description": "Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams", "type": "tool", "pushedAt": "2025-10-06T19:56:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "champtar", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/3536755?v=4", "type": "User" }, { "login": "Bloup1net", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/15453157?v=4", "type": "User" }, { "login": "0xflotus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26602940?v=4", "type": "User" } ] }, { "repo": "nccgroup/nmap-nse-vulnerability-scripts", "name": "nmap-nse-vulnerability-scripts", "owner": "nccgroup", "url": "https://github.com/nccgroup/nmap-nse-vulnerability-scripts", "id": "cd3f463d9ade", "stars": 624, "language": "Lua", "description": "NMAP Vulnerability Scanning Scripts", "type": "tool", "pushedAt": "2022-03-04T09:08:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "fidgetingbits", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "FahimFBA", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/64195132?v=4", "type": "User" }, { "login": "nkukard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2354782?v=4", "type": "User" } ] }, { "repo": "synacktiv/frinet", "name": "frinet", "owner": "synacktiv", "url": "https://github.com/synacktiv/frinet", "id": "db564152c9d2", "stars": 617, "language": "Rust", "description": "Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.", "type": "tool", "pushedAt": "2026-06-08T15:49:23Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hexa-synacktiv", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/89987811?v=4", "type": "User" }, { "login": "syn-wardenfar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/290041545?v=4", "type": "User" } ] }, { "repo": "g0ldengunsec/sharpsecdump", "name": "SharpSecDump", "owner": "G0ldenGunSec", "url": "https://github.com/G0ldenGunSec/SharpSecDump", "id": "505b33a23dcc", "stars": 615, "language": "C#", "description": ".Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py", "type": "tool", "pushedAt": "2023-02-16T18:47:26Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "G0ldenGunSec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "G0ldenGunSec", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/28241763?v=4", "type": "User" } ] }, { "repo": "sensepost/hostapd-mana", "name": "hostapd-mana", "owner": "sensepost", "url": "https://github.com/sensepost/hostapd-mana", "id": "74f811fb94bb", "stars": 613, "language": "C", "description": "SensePost's modified hostapd for wifi attacks.", "type": "tool", "pushedAt": "2024-08-05T18:59:33Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "singe", "c": 130, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "010Hamza010", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/60020444?v=4", "type": "User" }, { "login": "cablethief", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7942469?v=4", "type": "User" }, { "login": "blshkv", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/309751?v=4", "type": "User" }, { "login": "lgtm-migrator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116650770?v=4", "type": "User" }, { "login": "leonjza", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "Meatballs1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1854557?v=4", "type": "User" }, { "login": "Rogdham", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3994389?v=4", "type": "User" }, { "login": "fransla", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20791766?v=4", "type": "User" } ] }, { "repo": "nccgroup/nccfsas", "name": "nccfsas", "owner": "nccgroup", "url": "https://github.com/nccgroup/nccfsas", "id": "c7f0149f8cbe", "stars": 610, "language": "C", "description": "Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.", "type": "tool", "pushedAt": "2022-08-05T16:25:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "rxwx", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" }, { "login": "neonbunny", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6201399?v=4", "type": "User" }, { "login": "cash-", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/5032114?v=4", "type": "User" }, { "login": "ItsIgnacioPortal", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/46269721?v=4", "type": "User" }, { "login": "bao7uo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21125224?v=4", "type": "User" }, { "login": "NotMedic", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17074002?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "threatexpress/cs2modrewrite", "name": "cs2modrewrite", "owner": "threatexpress", "url": "https://github.com/threatexpress/cs2modrewrite", "id": "7b8dd8ba3211", "stars": 609, "language": "Python", "description": "Convert Cobalt Strike profiles to modrewrite scripts", "type": "tool", "pushedAt": "2023-01-30T17:47:51Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "threatexpress", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Christopher Maddalena", "cardId": "b419603eab4c21a9", "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "login": "chrismaddalena" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "andrewchiles", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/12104886?v=4", "type": "User" }, { "login": "vestjoe", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/21366480?v=4", "type": "User" }, { "login": "chrismaddalena", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10526228?v=4", "type": "User" }, { "login": "bridge-four", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12418879?v=4", "type": "User" }, { "login": "t94j0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5448134?v=4", "type": "User" } ] }, { "repo": "mertdas/privkit", "name": "PrivKit", "owner": "mertdas", "url": "https://github.com/mertdas/PrivKit", "id": "b8839d15986c", "stars": 608, "language": "C", "description": "PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.", "type": "tool", "pushedAt": "2026-01-20T20:08:48Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "mertdas", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "mertdas", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/48562581?v=4", "type": "User" }, { "login": "nickvourd", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32869078?v=4", "type": "User" }, { "login": "beune", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47817451?v=4", "type": "User" }, { "login": "molatho", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43727386?v=4", "type": "User" } ] }, { "repo": "bloodhoundad/bark", "name": "BARK", "owner": "BloodHoundAD", "url": "https://github.com/BloodHoundAD/BARK", "id": "056fe194e074", "stars": 601, "language": "PowerShell", "description": "BloodHound Attack Research Kit", "type": "tool", "pushedAt": "2025-03-18T23:49:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "BloodHound Legacy Account (Deprecated)", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" }, { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "andyrobbins", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "JonasBK", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" }, { "login": "Pri3st", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/66968346?v=4", "type": "User" }, { "login": "f-bader", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3834359?v=4", "type": "User" }, { "login": "Iamitzu", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/90748655?v=4", "type": "User" }, { "login": "ruppde", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46819580?v=4", "type": "User" }, { "login": "ddlees", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8984872?v=4", "type": "User" }, { "login": "Nimretz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/71188380?v=4", "type": "User" }, { "login": "g60ocR", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1780918?v=4", "type": "User" } ] }, { "repo": "kurobeats/fimap", "name": "fimap", "owner": "kurobeats", "url": "https://github.com/kurobeats/fimap", "id": "4148b0f1a056", "stars": 590, "language": "Python", "description": "fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.", "type": "tool", "pushedAt": "2026-07-12T10:39:25Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "kurobeats", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "kurobeats", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/4091936?v=4", "type": "User" }, { "login": "h4ck3rm1k3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/34903?v=4", "type": "User" }, { "login": "eur0pa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4948454?v=4", "type": "User" } ] }, { "repo": "hackplayers/salsa-tools", "name": "Salsa-tools", "owner": "Hackplayers", "url": "https://github.com/Hackplayers/Salsa-tools", "id": "c59e026d0d38", "stars": 587, "language": "C#", "description": "Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched", "type": "tool", "pushedAt": "2020-01-31T22:41:35Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Hackplayers", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "cybervaca", "c": 144, "avatar": "https://avatars.githubusercontent.com/u/6973635?v=4", "type": "User" }, { "login": "F1t1", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/48532546?v=4", "type": "User" }, { "login": "vmotos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22636953?v=4", "type": "User" }, { "login": "socketz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/638274?v=4", "type": "User" } ] }, { "repo": "riccardoancarani/liquidsnake", "name": "LiquidSnake", "owner": "RiccardoAncarani", "url": "https://github.com/RiccardoAncarani/LiquidSnake", "id": "94f7eef0429d", "stars": 347, "language": "C#", "description": "LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript", "type": "tool", "pushedAt": "2021-09-01T11:53:30Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "RiccardoAncarani", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ajpc500", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62765165?v=4", "type": "User" } ] }, { "repo": "sensepost/autodane", "name": "autoDANE", "owner": "sensepost", "url": "https://github.com/sensepost/autoDANE", "id": "c19032cf3384", "stars": 299, "language": "Python", "description": "Auto Domain Admin and Network Exploitation.", "type": "tool", "pushedAt": "2017-12-21T09:21:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "danegoodwin", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/14952191?v=4", "type": "User" }, { "login": "singe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "octoberfest7/jumpsession_bof", "name": "jumpsession_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/JumpSession_BOF", "stars": 84, "language": "C", "description": "Beacon Object File allowing creation of Beacons in different sessions.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6c93fcd704f9", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-23T22:23:33Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "octoberfest7/lnk_generator", "name": "lnk_generator", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/lnk_generator", "id": "8472f9d87bd8", "stars": 84, "language": "Python", "description": "Small project to facilitate creation of .lnk payloads", "type": "tool", "pushedAt": "2022-11-18T06:18:52Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Octoberfest7", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "0xpugal/knoxsser", "name": "knoxsser", "owner": "0xpugal", "url": "https://github.com/0xPugal/knoxsser", "stars": 83, "language": "Shell", "description": "A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pugalarasan", "cardId": "697fe36354f625da", "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7c9d416fe5d", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-24T07:16:54Z", "archived": false, "topContributors": [ { "login": "0xPugal", "c": 100, "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "type": "User" }, { "login": "semgrep-bot", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/170460994?v=4", "type": "User" } ] }, { "repo": "bartblaze/matire", "name": "matire", "owner": "bartblaze", "url": "https://github.com/bartblaze/MaTiRe", "stars": 82, "language": "C", "description": "Malware Analysis, Threat Intelligence and Reverse Engineering: LABS", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bart", "cardId": "9b82391c60e5a30e", "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da03dbc54330", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-24T02:33:38Z", "archived": false, "topContributors": [ { "login": "bartblaze", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4", "type": "User" } ] }, { "repo": "whokilleddb/sinister-vsix", "name": "sinister-vsix", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/sinister-vsix", "stars": 81, "language": "TypeScript", "description": "Blog/Journal on how to backdoor VSCode extensions", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d82661d7ce01", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-02-24T18:49:28Z", "archived": false, "topContributors": [] }, { "repo": "soxoj/osint-cli-tool-skeleton", "name": "osint-cli-tool-skeleton", "owner": "soxoj", "url": "https://github.com/soxoj/osint-cli-tool-skeleton", "stars": 81, "language": "Python", "description": "Template for new OSINT command-line tools", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cbf9cc34fc69", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-17T23:05:36Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 42, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Copilot", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" } ] }, { "repo": "taviso/dbusmap", "name": "dbusmap", "owner": "taviso", "url": "https://github.com/taviso/dbusmap", "id": "df0dfee25aa3", "stars": 81, "language": "C", "description": "This is a simple utility for enumerating D-Bus endpoints, an nmap for D-Bus.", "type": "tool", "pushedAt": "2019-11-22T22:43:05Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Tavis Ormandy", "cardId": "f8252c7b6035a712", "avatar": "https://avatars.githubusercontent.com/u/123814?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "taviso", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/123814?v=4", "type": "User" }, { "login": "snyh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1437166?v=4", "type": "User" }, { "login": "voltagex", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83080728?v=4", "type": "User" }, { "login": "wjt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/86760?v=4", "type": "User" } ] }, { "repo": "rek7/postshell", "name": "postshell", "owner": "rek7", "url": "https://github.com/rek7/postshell", "id": "0290b1d4bfe2", "stars": 81, "language": "C", "description": "PostShell - Post Exploitation Bind/Backconnect Shell", "type": "tool", "pushedAt": "2019-09-09T18:50:15Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "rek7", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/network-fingerprint", "name": "network-fingerprint", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/network-fingerprint", "stars": 80, "language": "Go", "description": "A fingerprint generation helper for nuclei network templates", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c127b06db1b", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2022-11-20T16:51:36Z", "archived": false, "topContributors": [ { "login": "Ice3man543", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "ehsandeep", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" } ] }, { "repo": "wh1t3rh1n0/dns-triage", "name": "dns-triage", "owner": "wh1t3rh1n0", "url": "https://github.com/Wh1t3Rh1n0/dns-triage", "stars": 80, "language": "Python", "description": "A simple Python script to do quick, targeted recon of a given domain.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "54062483163e", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-17T18:30:47Z", "archived": false, "topContributors": [ { "login": "Wh1t3Rh1n0", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4", "type": "User" } ] }, { "repo": "eversinc33/sharpstartwebclient", "name": "sharpstartwebclient", "owner": "eversinc33", "url": "https://github.com/eversinc33/SharpStartWebclient", "stars": 80, "language": "C#", "description": "Programmatically start WebClient from an unprivileged session to enable that juicy privesc.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4da4bef70b01", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-08T08:22:43Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "eversinc33/malwareadventurez", "name": "malwareadventurez", "owner": "eversinc33", "url": "https://github.com/eversinc33/MalwareAdventurez", "stars": 79, "language": "C++", "description": "My adventures in learning about different userland malware techniques, such as syscalls, injection, unhooking or sandbox evasion.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7f760660b80c", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-10T06:54:15Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "hasherezade/vidi", "name": "ViDi", "owner": "hasherezade", "url": "https://github.com/hasherezade/ViDi", "id": "c83e1e25e1ba", "stars": 79, "language": "C++", "description": "ViDi Visual Disassembler (experimental)", "type": "tool", "pushedAt": "2025-10-08T04:51:43Z", "archived": false, "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hasherezade", "c": 146, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "eversinc33/triagemcp", "name": "triagemcp", "owner": "eversinc33", "url": "https://github.com/eversinc33/TriageMCP", "stars": 78, "language": "Python", "description": "Vibe Malware Triage - MCP server for static PE analysis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "72f94c6876c9", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-01T05:21:33Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" }, { "login": "B1naryAdventure", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/181202376?v=4", "type": "User" } ] }, { "repo": "bin3xish477/cybersecurity", "name": "cybersecurity", "owner": "bin3xish477", "url": "https://github.com/bin3xish477/cybersecurity", "stars": 77, "language": "HTML", "description": "blue team, red team stuff. All things cyber ;)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Rodriguez", "cardId": "d53200790bbf6dc2", "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b35f9cf3d9f", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 80, "contributorCount": 2, "contributors": [], "pushedAt": "2025-05-08T19:58:24Z", "archived": false, "topContributors": [ { "login": "bin3xish477", "c": 896, "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "johnwoodman/stealthinjector", "name": "stealthinjector", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/stealthInjector", "stars": 77, "language": "C++", "description": "Injects shellcode into remote processes using direct syscalls", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "abf1ba940326", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-12-30T22:21:49Z", "archived": false, "topContributors": [ { "login": "JohnWoodman", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" } ] }, { "repo": "mordavid/externalattacker-mcp", "name": "ExternalAttacker-MCP", "owner": "MorDavid", "url": "https://github.com/MorDavid/ExternalAttacker-MCP", "id": "b7a4fb5d570e", "stars": 77, "language": "Python", "description": "A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.", "type": "tool", "pushedAt": "2025-04-06T20:48:36Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MorDavid", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/moxpack", "name": "moxpack", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/moxpack", "stars": 75, "language": "Smarty", "description": "A Qemu Proxmox Template builder project using Packer", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f3e4a3bacf07", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-05T14:49:33Z", "archived": false, "topContributors": [ { "login": "Mayfly277", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/23179648?v=4", "type": "User" }, { "login": "v1k1ngfr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32877266?v=4", "type": "User" } ] }, { "repo": "edoverflow/legal-bug-bounty", "name": "legal-bug-bounty", "owner": "EdOverflow", "url": "https://github.com/EdOverflow/legal-bug-bounty", "id": "fa9a5c8c4a6c", "stars": 75, "language": null, "description": "#legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.", "type": "tool", "pushedAt": "2019-12-04T21:04:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "EdOverflow", "cardId": "5ea61790652f7a1c", "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "EdOverflow", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/18099289?v=4", "type": "User" }, { "login": "Amitelazari", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/37913175?v=4", "type": "User" } ] }, { "repo": "maldev-academy/ghostlyhollowingviatamperedsyscalls2", "name": "ghostlyhollowingviatamperedsyscalls2", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/GhostlyHollowingViaTamperedSyscalls2", "stars": 74, "language": "C", "description": "Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c672c2187bca", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-12-26T18:25:54Z", "archived": false, "topContributors": [] }, { "repo": "sfewer-r7/cve-2025-22457", "name": "cve-2025-22457", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2025-22457", "stars": 73, "language": "Ruby", "description": "PoC for CVE-2025-22457 - A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4909ccf33d24", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-25T08:14:05Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2022-28281", "name": "cve-2022-28281", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2022-28281", "stars": 73, "language": "HTML", "description": "PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "58eb4578350a", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-08T15:21:26Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "liveoverflow/log4shell", "name": "log4shell", "owner": "liveoverflow", "url": "https://github.com/LiveOverflow/log4shell", "stars": 72, "language": "Java", "description": "Small example repo for looking into log4j CVE-2021-44228", "type": "tool", "lanes": [ "2" ], "author": { "name": "LiveOverflow 🔴", "cardId": "b61c535e38df6b14", "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5d4dfc6fea80", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 6, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-24T15:44:53Z", "archived": false, "topContributors": [ { "login": "LiveOverflow", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4", "type": "User" } ] }, { "repo": "ropnop/kerberos_windows_scripts", "name": "kerberos_windows_scripts", "owner": "ropnop", "url": "https://github.com/ropnop/kerberos_windows_scripts", "stars": 72, "language": "Shell", "description": "Collection of scripts for interacting with AD Kerberos from Linux", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d4fd77dc8aaf", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-22T18:00:38Z", "archived": false, "topContributors": [ { "login": "ropnop", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" } ] }, { "repo": "maldev-academy/drmbinviaordinalimports", "name": "drmbinviaordinalimports", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/DRMBinViaOrdinalImports", "stars": 72, "language": "C", "description": "Create Anti-Copy DRM Malware ", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a8c933f47a33", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2024-08-19T15:23:08Z", "archived": false, "topContributors": [] }, { "repo": "firefart/cve-2018-7600", "name": "cve-2018-7600", "owner": "firefart", "url": "https://github.com/firefart/CVE-2018-7600", "stars": 72, "language": "Python", "description": "CVE-2018-7600 - Drupal 7.x RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "C:\\hristian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d3bc18f6351", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-18T20:34:19Z", "archived": true, "topContributors": [ { "login": "firefart", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" } ] }, { "repo": "mordavid/dcsynchound", "name": "dcsynchound", "owner": "mordavid", "url": "https://github.com/MorDavid/DCSyncHound", "stars": 71, "language": "Python", "description": "This script analyzes the DCSync output file from several tools (such as Mimikatz, Secretsdump and SharpKatz...)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f69872fd5a36", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-17T00:24:49Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "timmisiak/loaderlog", "name": "loaderlog", "owner": "timmisiak", "url": "https://github.com/TimMisiak/LoaderLog", "stars": 70, "language": "C++", "description": "Small application that can be used to log loader snaps and other debug output", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Misiak", "cardId": "65b09d2324bf2680", "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "45c684a870ae", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-01-18T18:04:55Z", "archived": false, "topContributors": [ { "login": "TimMisiak", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4", "type": "User" }, { "login": "dmpots", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/244998?v=4", "type": "User" } ] }, { "repo": "soxoj/mailto_analyzer", "name": "mailto_analyzer", "owner": "soxoj", "url": "https://github.com/soxoj/mailto_analyzer", "stars": 69, "language": "Python", "description": "PoC analyzer of your email address exposure on various services", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2b352df5ecba", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-26T14:50:52Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" } ] }, { "repo": "reversinglabs/reversinglabs-siem-rules", "name": "reversinglabs-siem-rules", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/reversinglabs-siem-rules", "stars": 69, "language": "YARA", "description": "A collection of various SIEM rules relating to malware family groups.", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "51b7e4acbbfd", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-06-18T16:18:53Z", "archived": false, "topContributors": [ { "login": "AaronHoffmannRL", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/108887095?v=4", "type": "User" } ] }, { "repo": "eversinc33/invoke-pre2kspray", "name": "Invoke-Pre2kSpray", "owner": "eversinc33", "url": "https://github.com/eversinc33/Invoke-Pre2kSpray", "id": "f28630a6cde5", "stars": 69, "language": "PowerShell", "description": "Enumerate domain machine accounts and perform pre2k password spraying.", "type": "tool", "pushedAt": "2023-07-14T06:50:22Z", "archived": false, "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Garrett Foster", "cardId": "f1f6d596ac885bc3", "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "login": "garrettfoster13" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "eversinc33", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" }, { "login": "garrettfoster13", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/82191679?v=4", "type": "User" } ] }, { "repo": "specterops/jailbreaker-ce", "name": "Jailbreaker-CE", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/Jailbreaker-CE", "id": "bb6f8a46d0ef", "stars": 68, "language": "Python", "description": "Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failure modes.", "type": "tool", "pushedAt": "2026-07-16T20:27:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Neeraj Gupta", "cardId": "a2d9c22896674c6e", "avatar": "https://avatars.githubusercontent.com/u/22429174?v=4", "login": "gneeraj97" } ], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "gneeraj97", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22429174?v=4", "type": "User" } ] }, { "repo": "octoberfest7/killdefender_bof", "name": "killdefender_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/KillDefender_BOF", "stars": 67, "language": "C++", "description": "Beacon Object File implementation of pwn1sher's KillDefender", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "867938e2e743", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-28T15:54:15Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2023-36723", "name": "cve-2023-36723", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2023-36723", "stars": 67, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "219172aa3a67", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-10T17:29:32Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "dinosn/hikvision", "name": "hikvision", "owner": "dinosn", "url": "https://github.com/dinosn/hikvision", "stars": 66, "language": "Python", "description": "Hikvision log4j PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0687e7b4a242", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2022-12-29T09:01:32Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" }, { "login": "Blyth0He", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12743647?v=4", "type": "User" } ] }, { "repo": "epi052/osce-exam-practice", "name": "osce-exam-practice", "owner": "epi052", "url": "https://github.com/epi052/OSCE-exam-practice", "stars": 65, "language": "Python", "description": "Proof of Concept exploit scripts and fuzzing templates. Companion blog posts located at https://epi052.gitlab.io/notes-to-self/blog/2020-05-13-osce-exam-practice-part-one/", "type": "tool", "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7c02d775492", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-05-31T12:37:50Z", "archived": false, "topContributors": [ { "login": "epi052", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" } ] }, { "repo": "boku7/x64win-dynamicnonull-winexec-popcalc-shellcode", "name": "x64win-dynamicnonull-winexec-popcalc-shellcode", "owner": "boku7", "url": "https://github.com/boku7/x64win-DynamicNoNull-WinExec-PopCalc-Shellcode", "stars": 65, "language": "Assembly", "description": "64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "69ef180664ec", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:56:52Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/cve-2023-34362", "name": "cve-2023-34362", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2023-34362", "stars": 64, "language": "Ruby", "description": "CVE-2023-34362: MOVEit Transfer Unauthenticated RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ca8dcecf95d5", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-03-24T00:46:38Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "frkngksl/unlinkdll", "name": "unlinkdll", "owner": "frkngksl", "url": "https://github.com/frkngksl/UnlinkDLL", "stars": 64, "language": "Nim", "description": "DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3967c0d23446", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T11:59:34Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "nul0x4c/gp", "name": "gp", "owner": "nul0x4c", "url": "https://github.com/NUL0x4C/GP", "stars": 64, "language": "C", "description": "using the gpu to hide your payload", "type": "tool", "lanes": [ "2" ], "author": { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0f010d7b2fe5", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2022-08-15T14:47:14Z", "archived": false, "topContributors": [] }, { "repo": "daffainfo/suricata-rules", "name": "suricata-rules", "owner": "daffainfo", "url": "https://github.com/daffainfo/suricata-rules", "stars": 64, "language": "Python", "description": "Suricata rules that can detect a wide range of threats, including malware, exploits, and other malicious activity especially web application attacks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Muhammad Daffa", "cardId": "6e6b6c585fcb159b", "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3a45accb3ac4", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2024-04-02T12:15:02Z", "archived": false, "topContributors": [ { "login": "daffainfo", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4", "type": "User" }, { "login": "actions-user", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/65916846?v=4", "type": "User" }, { "login": "armadani", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35127610?v=4", "type": "User" } ] }, { "repo": "joasasantos/av-edr-evasion-practical-techniques-course", "name": "av-edr-evasion-practical-techniques-course", "owner": "joasasantos", "url": "https://github.com/JoasASantos/AV-EDR-Evasion-Practical-Techniques-Course", "stars": 64, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "65d54792867d", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-15T14:50:09Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "michalkoczwara/aggressor_scripts_collection", "name": "aggressor_scripts_collection", "owner": "michalkoczwara", "url": "https://github.com/michalkoczwara/aggressor_scripts_collection", "stars": 63, "language": "PowerShell", "description": "Collection of various Aggressor Scripts for Cobalt Strike from awesome people. Will be sure to update this repo with credit to each person.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Koczwara", "cardId": "c8532c2f9d6ab3fb", "avatar": "https://avatars.githubusercontent.com/u/7808779?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4f010e17629c", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-09-26T15:23:34Z", "archived": false, "topContributors": [ { "login": "invokethreatguy", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21073604?v=4", "type": "User" } ] }, { "repo": "hasherezade/pin_n_sieve", "name": "pin_n_sieve", "owner": "hasherezade", "url": "https://github.com/hasherezade/pin_n_sieve", "stars": 62, "language": "C++", "description": "An experimental dynamic malware unpacker based on Intel Pin and PE-sieve", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc4b93b0f1d5", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-09T00:12:13Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "whokilleddb/aspxecute", "name": "aspxecute", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/ASPxecute", "stars": 61, "language": "Python", "description": "Execute shellcode via ASPNET compiler", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f4bb330a2c9", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-02T19:42:48Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "struppigel/hedgehoglab", "name": "hedgehoglab", "owner": "struppigel", "url": "https://github.com/struppigel/HedgehogLab", "stars": 61, "language": "Python", "description": "Malware Analysis Exercise Samples and Resources", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karsten Hahn", "cardId": "2c4963b333ad77b5", "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3d7ecc5928b3", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-25T04:50:58Z", "archived": false, "topContributors": [ { "login": "struppigel", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4", "type": "User" } ] }, { "repo": "nul0x4c/hookinglsassforcredentials", "name": "hookinglsassforcredentials", "owner": "nul0x4c", "url": "https://github.com/NUL0x4C/HookingLsassForCredentials", "stars": 61, "language": "C", "description": "Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials", "type": "tool", "lanes": [ "2" ], "author": { "name": "NULL", "cardId": "4efea98cfae28790", "avatar": "https://avatars.githubusercontent.com/u/111295429?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "636b200b6c0a", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-05-12T14:56:46Z", "archived": false, "topContributors": [] }, { "repo": "dinosn/cve-2024-20931", "name": "cve-2024-20931", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2024-20931", "stars": 61, "language": null, "description": "CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d273775a5fdf", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-06T15:56:12Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "rek7/dll-hijacking", "name": "dll-hijacking", "owner": "rek7", "url": "https://github.com/rek7/dll-hijacking", "stars": 60, "language": "C++", "description": "dll proxying", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "11b0c26f78f5", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-03T01:22:42Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "addyosmani/scan", "name": "scan", "owner": "addyosmani", "url": "https://github.com/addyosmani/scan", "stars": 60, "language": "TypeScript", "description": "Free document to PDF scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Addy Osmani", "cardId": "8d94591d6660fba4", "avatar": "https://avatars.githubusercontent.com/u/110953?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "148603eddbd7", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-23T23:44:20Z", "archived": false, "topContributors": [ { "login": "addyosmani", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/110953?v=4", "type": "User" } ] }, { "repo": "firefart/hivenightmare", "name": "hivenightmare", "owner": "firefart", "url": "https://github.com/firefart/hivenightmare", "stars": 60, "language": "Go", "description": "Exploit for HiveNightmare - CVE-2021–36934", "type": "tool", "lanes": [ "2" ], "author": { "name": "C:\\hristian Mehlmauer", "cardId": "a78fb8c41e9c9971", "avatar": "https://avatars.githubusercontent.com/u/105281?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df6c590fffb8", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2025-08-22T08:43:36Z", "archived": true, "topContributors": [ { "login": "firefart", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/105281?v=4", "type": "User" }, { "login": "sudhackar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10460978?v=4", "type": "User" } ] }, { "repo": "endermanch/ddom", "name": "ddom", "owner": "endermanch", "url": "https://github.com/Endermanch/DDoM", "stars": 60, "language": "Python", "description": "A simple, open-source, easy to use, and free download manager for malware samples.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Enderman", "cardId": "d8dfb8d6364e4c37", "avatar": "https://avatars.githubusercontent.com/u/44542704?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9b5b338bb38", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-06-02T09:31:01Z", "archived": false, "topContributors": [ { "login": "Endermanch", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/44542704?v=4", "type": "User" } ] }, { "repo": "mukul975/threatswarm", "name": "threatswarm", "owner": "mukul975", "url": "https://github.com/mukul975/Threatswarm", "stars": 60, "language": "Python", "description": "27 scope-enforced AI agents that run the full pentest kill-chain (recon → exploit → post-ex → DFIR → report) as a one-command Claude Code plugin. Backed by 754 MITRE-mapped skills.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mahipal", "cardId": "8653a26074607efd", "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e135b81080b3", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-29T15:49:33Z", "archived": false, "topContributors": [ { "login": "mukul975", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4", "type": "User" } ] }, { "repo": "hasherezade/hidden_bee_tools", "name": "hidden_bee_tools", "owner": "hasherezade", "url": "https://github.com/hasherezade/hidden_bee_tools", "stars": 59, "language": "C++", "description": "Parser for a custom executable formats from Hidden Bee and Rhadamanthys malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7943b5474bc8", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-06T17:44:00Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 101, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "mordavid/bloodhoundviewer", "name": "BloodHoundViewer", "owner": "MorDavid", "url": "https://github.com/MorDavid/BloodHoundViewer", "id": "31a4da1d5bf1", "stars": 58, "language": "JavaScript", "description": "Addon for BHCE", "type": "tool", "pushedAt": "2025-04-01T03:46:47Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MorDavid", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2022-21974", "name": "cve-2022-21974", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2022-21974", "stars": 57, "language": "Rich Text Format", "description": "PoC for CVE-2022-21974 \"Roaming Security Rights Management Services Remote Code Execution Vulnerability\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c19da775afcf", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-26T19:12:12Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "win3zz/cve-2023-43261", "name": "cve-2023-43261", "owner": "win3zz", "url": "https://github.com/win3zz/CVE-2023-43261", "stars": 57, "language": "Python", "description": "CVE-2023-43261 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d54603ceadf3", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-01T08:36:06Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "joasasantos/rtlc2", "name": "rtlc2", "owner": "joasasantos", "url": "https://github.com/JoasASantos/RTLC2", "stars": 57, "language": "C++", "description": "Advanced Command and Control Framework for Authorized Red Team Operations", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0bd782b17fa5", "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-03-01T04:00:04Z", "archived": false, "topContributors": [] }, { "repo": "noraj/pass-station", "name": "pass-station", "owner": "noraj", "url": "https://github.com/noraj/pass-station", "id": "7015898111a5", "stars": 57, "language": "Ruby", "description": "CLI & library to search for default credentials among thousands of Products / Vendors", "type": "tool", "pushedAt": "2026-07-15T17:32:26Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 17, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "dependabot[bot]", "c": 95, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "noraj", "c": 87, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "Zeecka", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24873615?v=4", "type": "User" } ] }, { "repo": "nikitastupin/pwnhub", "name": "pwnhub", "owner": "nikitastupin", "url": "https://github.com/nikitastupin/pwnhub", "stars": 186, "language": "Shell", "description": "How GitHub Actions workflows can be hacked", "type": "tool", "lanes": [ "1" ], "author": { "name": "nikitastupin", "cardId": null }, "referencedBy": [ { "url": "https://adnanthekhan.com/2024/04/15/an-obscure-actions-workflow-vulnerability-in-googles-flank/", "title": "An Obscure Actions Workflow Vulnerability in Google's Flank | Adnan Khan - Security Research", "person": "Adnan Khan" }, { "url": "https://adnanthekhan.com/2024/07/02/roguepuppet-a-critical-puppet-forge-supply-chain-vulnerability/", "title": "RoguePuppet - A Critical Puppet Forge Supply Chain Vulnerability | Adnan Khan - Security Research", "person": "Adnan Khan" }, { "url": "https://johnstawinski.com/2024/01/11/playing-with-fire-how-we-executed-a-critical-supply-chain-attack-on-pytorch/", "title": "Playing with Fire – How We Executed a Critical Supply Chain Attack on PyTorch", "person": "John Stawinski" }, { "url": "https://adnanthekhan.com/2024/01/10/cve-2023-49291-and-more-a-potential-actions-nightmare/", "title": "CVE-2023-49291 and More - A Potential Actions Nightmare | Adnan Khan - Security Research", "person": "Adnan Khan" }, { "url": "https://adnanthekhan.com/2023/12/20/one-supply-chain-attack-to-rule-them-all/", "title": "One Supply Chain Attack to Rule Them All - Poisoning GitHub's Runner Images | Adnan Khan - Security Research", "person": "Adnan Khan" } ], "referencedCount": 5, "id": "2cada7f38ddd", "score": 16, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 1, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2024-08-23T21:03:12Z", "archived": false, "topContributors": [ { "login": "nikitastupin", "c": 57, "avatar": "https://avatars.githubusercontent.com/u/18281368?v=4", "type": "User" }, { "login": "jalvarezit", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/47305925?v=4", "type": "User" } ] }, { "repo": "bcoles/kasld", "name": "kasld", "owner": "bcoles", "url": "https://github.com/bcoles/kasld", "stars": 499, "language": "C", "description": "KASLD derandomizes the Linux kernel's virtual and physical memory layout from a local process, using whatever its vantage — privilege, configuration, and confinement — allows.", "type": "tool", "lanes": [ "1" ], "author": { "name": "bcoles", "cardId": null }, "referencedBy": [ { "url": "https://kqx.io/writeups/baby_smallest/", "title": "🍼🤏🤏 - TRX CTF Quals 2026 – kqx", "person": "kqx" }, { "url": "https://www.willsroot.io/2022/12/entrybleed.html", "title": "EntryBleed: Breaking KASLR under KPTI with Prefetch (CVE-2022-4543)", "person": "willsroot" } ], "referencedCount": 2, "id": "56ef9b91629f", "score": 16, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-17T16:50:52Z", "archived": false, "topContributors": [ { "login": "bcoles", "c": 627, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" }, { "login": "Hamled", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66355?v=4", "type": "User" } ] }, { "repo": "microsoft/dev-tunnels", "name": "dev-tunnels", "owner": "microsoft", "url": "https://github.com/microsoft/dev-tunnels", "stars": 488, "language": "C#", "description": "Dev Tunnels SDK", "type": "tool", "lanes": [ "1" ], "author": { "name": "microsoft", "cardId": null }, "referencedBy": [ { "url": "https://specterops.io/blog/2026/05/06/dev-tunnels-the-accidental-c2/", "title": "The Accidental C2: Exploring Dev Tunnels for Remote Access", "person": "Adam Chester" }, { "url": "https://blog.xpnsec.com/accidental-c2/", "title": "The Accidental C2 - Exploring Dev Tunnels for Remote Access", "person": "Adam Chester" } ], "referencedCount": 2, "id": "998486b0181d", "score": 16, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 25, "contributors": [], "pushedAt": "2026-07-10T13:20:19Z", "archived": false, "topContributors": [ { "login": "jfullerton44", "c": 97, "avatar": "https://avatars.githubusercontent.com/u/12804248?v=4", "type": "User" }, { "login": "jasongin", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/13093042?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 45, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "IlyaBiryukov", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/15989459?v=4", "type": "User" }, { "login": "jessetrinity", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/42591254?v=4", "type": "User" }, { "login": "connor4312", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/2230985?v=4", "type": "User" }, { "login": "taiyosogawa", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/1176981?v=4", "type": "User" }, { "login": "klvnraju", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/25800054?v=4", "type": "User" }, { "login": "jramsay", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8161247?v=4", "type": "User" }, { "login": "DavidObando", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/950290?v=4", "type": "User" }, { "login": "JacobRoberts", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1372881?v=4", "type": "User" }, { "login": "usanth", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/111899981?v=4", "type": "User" }, { "login": "derekbekoe", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16448634?v=4", "type": "User" }, { "login": "plequere-ms", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/48521719?v=4", "type": "User" }, { "login": "neelip", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/17537419?v=4", "type": "User" }, { "login": "microsoftopensource", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22527892?v=4", "type": "User" }, { "login": "josebalius", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/339080?v=4", "type": "User" }, { "login": "dmgardiner25", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/22037769?v=4", "type": "User" }, { "login": "setaskin", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/37163639?v=4", "type": "User" }, { "login": "jpablo2002", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/90735251?v=4", "type": "User" }, { "login": "ArunGopinathan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5236730?v=4", "type": "User" }, { "login": "joshaber", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13760?v=4", "type": "User" }, { "login": "williammartin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1611510?v=4", "type": "User" }, { "login": "microsoft-github-operations[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/41902?v=4", "type": "Bot" }, { "login": "tanhakabir", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12758612?v=4", "type": "User" } ] }, { "repo": "fuzzysecurity/pskernel-primitives", "name": "pskernel-primitives", "owner": "fuzzysecurity", "url": "https://github.com/FuzzySecurity/PSKernel-Primitives", "stars": 436, "language": "PowerShell", "description": "Exploit primitives for PowerShell", "type": "tool", "lanes": [ "1" ], "author": { "name": "fuzzysecurity", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2018/10/27/htb-bounty.html", "title": "HTB: Bounty", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2021/03/17/htb-optimum.html", "title": "HTB: Optimum", "person": "0xdf" } ], "referencedCount": 2, "id": "6be40cd6cbf0", "score": 16, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-25T13:30:17Z", "archived": false, "topContributors": [ { "login": "FuzzySecurity", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/10997340?v=4", "type": "User" } ] }, { "repo": "cwolff411/redteamvillage-sshtunnels", "name": "redteamvillage-sshtunnels", "owner": "cwolff411", "url": "https://github.com/cwolff411/RedTeamVillage-SSHTunnels", "stars": 39, "language": null, "description": "Slides, documentation, and files from my presentation at Red Team Village for HackerOne's hacktivitycon.", "type": "tool", "lanes": [ "1", "2" ], "author": { "name": "Cody Wolff (cwolff411)", "cardId": "3f7b76a8e8031ed9", "avatar": "https://avatars.githubusercontent.com/u/8293038?v=4" }, "referencedBy": [ { "url": "https://grahamhelton.com/blog/ssh-cheatsheet.html", "title": "An Excruciatingly Detailed Guide To\nSSH (But Only The Things I Actually Find Useful)", "person": "Graham Helton" } ], "referencedCount": 1, "id": "8c4eb0dc6a92", "score": 16, "signals": { "cited": true, "bothLanes": true, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-18T14:40:42Z", "archived": false, "topContributors": [ { "login": "cwolff411", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8293038?v=4", "type": "User" } ] }, { "repo": "nccgroup/azucar", "name": "azucar", "owner": "nccgroup", "url": "https://github.com/nccgroup/azucar", "id": "e812ad880b62", "stars": 583, "language": "PowerShell", "description": "Security auditing tool for Azure environments", "type": "tool", "pushedAt": "2022-11-04T17:35:10Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "lgeurts", "c": 80, "avatar": "https://avatars.githubusercontent.com/u/15815425?v=4", "type": "User" }, { "login": "silverhack", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5271640?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/callstackspoofer", "name": "CallStackSpoofer", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/CallStackSpoofer", "id": "d09a50728045", "stars": 582, "language": "C++", "description": "A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)", "type": "tool", "pushedAt": "2025-04-08T15:35:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "william-burgess", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/108275364?v=4", "type": "User" }, { "login": "NJonesUK", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/338818?v=4", "type": "User" } ] }, { "repo": "hardenedlinux/linux-exploit-development-tutorial", "name": "linux-exploit-development-tutorial", "owner": "hardenedlinux", "url": "https://github.com/hardenedlinux/linux-exploit-development-tutorial", "id": "9ee7de4e11cb", "stars": 579, "language": "C", "description": "a series tutorial for linux exploit development to newbie.", "type": "tool", "pushedAt": "2024-04-12T02:00:37Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "hardenedlinux", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mudongliang", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6214861?v=4", "type": "User" }, { "login": "biergaizi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1310693?v=4", "type": "User" } ] }, { "repo": "bishopfox/iam-vulnerable", "name": "iam-vulnerable", "owner": "BishopFox", "url": "https://github.com/BishopFox/iam-vulnerable", "id": "79a8a4a89522", "stars": 577, "language": "HCL", "description": "Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.", "type": "tool", "pushedAt": "2026-03-12T15:38:01Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "sethsec-bf", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/46326948?v=4", "type": "User" }, { "login": "sethsec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" }, { "login": "pswalia2u", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20887270?v=4", "type": "User" }, { "login": "TheCloudNativeHacker", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/148928834?v=4", "type": "User" }, { "login": "pasqua1e", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31853954?v=4", "type": "User" } ] }, { "repo": "p0cl4bs/kadimus", "name": "kadimus", "owner": "P0cL4bs", "url": "https://github.com/P0cL4bs/kadimus", "id": "240733dcd1e8", "stars": 575, "language": "C", "description": "kadimus is a tool to check and exploit lfi vulnerability.", "type": "tool", "pushedAt": "2020-08-17T12:01:23Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "P0cL4bs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "pyaillet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11957179?v=4", "type": "User" }, { "login": "w0rldpain", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67708987?v=4", "type": "User" } ] }, { "repo": "mr-un1k0d3r/redteamccode", "name": "RedTeamCCode", "owner": "Mr-Un1k0d3r", "url": "https://github.com/Mr-Un1k0d3r/RedTeamCCode", "id": "5f0de1ada419", "stars": 573, "language": "C", "description": "Red Team C code repo", "type": "tool", "pushedAt": "2024-12-16T17:21:47Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Mr-Un1k0d3r", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Mr-Un1k0d3r", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/4238766?v=4", "type": "User" } ] }, { "repo": "yeeb1/socktail", "name": "SockTail", "owner": "Yeeb1", "url": "https://github.com/Yeeb1/SockTail", "id": "feef13c2c5a2", "stars": 569, "language": "Go", "description": "Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephemeral access into restricted environments using Tailscale’s emb", "type": "tool", "pushedAt": "2025-10-03T14:34:58Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Yeeb1", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Yeeb1", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/47221467?v=4", "type": "User" } ] }, { "repo": "rhinosecuritylabs/gcpbucketbrute", "name": "GCPBucketBrute", "owner": "RhinoSecurityLabs", "url": "https://github.com/RhinoSecurityLabs/GCPBucketBrute", "id": "b6fb3bb0903e", "stars": 568, "language": "Python", "description": "A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.", "type": "tool", "pushedAt": "2023-05-26T19:11:42Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "RhinoSecurityLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Spencer Gietzen", "cardId": "8cf1b4099e27ec73", "avatar": "https://avatars.githubusercontent.com/u/19161821?v=4", "login": "SpenGietz" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "SpenGietz", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19161821?v=4", "type": "User" }, { "login": "ashokdelphia", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/48444234?v=4", "type": "User" }, { "login": "vitoriario", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17754098?v=4", "type": "User" }, { "login": "BBerastegui", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3830238?v=4", "type": "User" }, { "login": "DaveYesland", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41924355?v=4", "type": "User" }, { "login": "erjanmx", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4899432?v=4", "type": "User" } ] }, { "repo": "ricardojoserf/trickdump", "name": "TrickDump", "owner": "ricardojoserf", "url": "https://github.com/ricardojoserf/TrickDump", "id": "080eafb32d1e", "stars": 563, "language": "C#", "description": "Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!", "type": "tool", "pushedAt": "2025-05-09T18:52:47Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ricardojoserf", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ricardojoserf", "c": 59, "avatar": "https://avatars.githubusercontent.com/u/11477353?v=4", "type": "User" } ] }, { "repo": "nccgroup/tracy", "name": "tracy", "owner": "nccgroup", "url": "https://github.com/nccgroup/tracy", "id": "be899947103f", "stars": 560, "language": "JavaScript", "description": "A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.", "type": "tool", "pushedAt": "2023-03-06T17:30:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "heathj", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/3597899?v=4", "type": "User" }, { "login": "robertmd", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/2561290?v=4", "type": "User" }, { "login": "gg-gg-gg-gg", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/3237506?v=4", "type": "User" }, { "login": "mrobertsNCC", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13909921?v=4", "type": "User" }, { "login": "ajcolson", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21285050?v=4", "type": "User" }, { "login": "danielthatcher", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11726509?v=4", "type": "User" }, { "login": "parsiya", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3981231?v=4", "type": "User" }, { "login": "AvaHowellNCC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37153925?v=4", "type": "User" } ] }, { "repo": "bloodhoundad/sharphound3", "name": "SharpHound3", "owner": "BloodHoundAD", "url": "https://github.com/BloodHoundAD/SharpHound3", "id": "28827687fa22", "stars": 555, "language": "C#", "description": "C# Data Collector for the BloodHound Project, Version 3", "type": "tool", "pushedAt": "2022-06-22T22:03:52Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "BloodHoundAD", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "rvazarkar", "c": 152, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "rmaksimov", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2904679?v=4", "type": "User" }, { "login": "cnotin", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/550823?v=4", "type": "User" }, { "login": "sploutchy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1473439?v=4", "type": "User" }, { "login": "nikallass", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10115306?v=4", "type": "User" } ] }, { "repo": "knight0x07/impulsivedllhijack", "name": "ImpulsiveDLLHijack", "owner": "knight0x07", "url": "https://github.com/knight0x07/ImpulsiveDLLHijack", "id": "9bb7f1693df8", "stars": 554, "language": "C#", "description": "C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.", "type": "tool", "pushedAt": "2021-09-15T08:03:59Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "knight0x07", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "knight0x07", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/60843949?v=4", "type": "User" } ] }, { "repo": "sensepost/rattler", "name": "rattler", "owner": "sensepost", "url": "https://github.com/sensepost/rattler", "id": "729e7d2ad9cd", "stars": 549, "language": "C++", "description": "Automated DLL Enumerator", "type": "tool", "pushedAt": "2017-12-21T18:01:09Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "sensepost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Chris Le Roy", "cardId": "54e315deb7df30b6", "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "login": "brompwnie" }, { "name": "Rob Fuller", "cardId": "73e0722f77489d17", "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "login": "mubix" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "brompwnie", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/8638589?v=4", "type": "User" }, { "login": "mubix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/679319?v=4", "type": "User" } ] }, { "repo": "nccgroup/vcg", "name": "VCG", "owner": "nccgroup", "url": "https://github.com/nccgroup/VCG", "id": "26c1bd6df5eb", "stars": 549, "language": "Visual Basic .NET", "description": "VisualCodeGrepper - Code security scanning tool.", "type": "tool", "pushedAt": "2023-07-06T08:11:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "N1ckDunn", "c": 33, "avatar": "https://avatars.githubusercontent.com/u/4202898?v=4", "type": "User" }, { "login": "dommyzee", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5357590?v=4", "type": "User" }, { "login": "DomZukiewiczNCC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/104916725?v=4", "type": "User" } ] }, { "repo": "sensepost/dns-shell", "name": "DNS-Shell", "owner": "sensepost", "url": "https://github.com/sensepost/DNS-Shell", "id": "9a49c24f499f", "stars": 532, "language": "Python", "description": "DNS-Shell is an interactive Shell over DNS channel", "type": "tool", "pushedAt": "2020-10-11T16:26:14Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Etienne Stalmans", "cardId": "f3923a7b592fd537", "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "login": "staaldraad" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "staaldraad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4200832?v=4", "type": "User" }, { "login": "5A1F", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35032883?v=4", "type": "User" } ] }, { "repo": "horizon3ai/vcenter_saml_login", "name": "vcenter_saml_login", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/vcenter_saml_login", "id": "4a2979f640ca", "stars": 529, "language": "Python", "description": "A tool to extract the IdP cert from vCenter backups and log in as Administrator", "type": "tool", "pushedAt": "2023-09-01T02:34:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "mr-sparkles-h3", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" }, { "login": "tonyph3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79593883?v=4", "type": "User" } ] }, { "repo": "fox-it/invoke-aclpwn", "name": "Invoke-ACLPwn", "owner": "fox-it", "url": "https://github.com/fox-it/Invoke-ACLPwn", "id": "986740af1bcf", "stars": 527, "language": "PowerShell", "description": "", "type": "tool", "pushedAt": "2022-09-15T15:13:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rindert-fox", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/24459322?v=4", "type": "User" }, { "login": "dirkjanm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" } ] }, { "repo": "ghostpack/koh", "name": "Koh", "owner": "GhostPack", "url": "https://github.com/GhostPack/Koh", "id": "0dad5e7994ad", "stars": 522, "language": "C#", "description": "The Token Stealer", "type": "tool", "pushedAt": "2022-07-13T23:41:38Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" }, { "name": "John Lambert", "cardId": "3f4f88ac139f6285", "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "login": "JohnLaTwC" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "HarmJ0y", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "Neo23x0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2851492?v=4", "type": "User" }, { "login": "wenqingl", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/86453680?v=4", "type": "User" }, { "login": "JohnLaTwC", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16035087?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/chameleon", "name": "Chameleon", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/Chameleon", "id": "46c98686c005", "stars": 522, "language": "Python", "description": "Chameleon: A tool for evading Proxy categorisation", "type": "tool", "pushedAt": "2024-11-28T16:40:36Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "mdsecactivebreach", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" }, { "login": "wbloeyaert", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/86670151?v=4", "type": "User" }, { "login": "mdsec", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2891056?v=4", "type": "User" }, { "login": "dmchell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9010884?v=4", "type": "User" }, { "login": "MarcOverIP", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" }, { "login": "Someniak", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9357656?v=4", "type": "User" }, { "login": "kaospunk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3227499?v=4", "type": "User" }, { "login": "c0mplexdev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48425956?v=4", "type": "User" } ] }, { "repo": "nullarray/roothelper", "name": "RootHelper", "owner": "NullArray", "url": "https://github.com/NullArray/RootHelper", "id": "0e7f410c184e", "stars": 506, "language": "Shell", "description": "A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.", "type": "tool", "pushedAt": "2021-07-28T07:04:41Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "NullArray", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "NullArray", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/13443322?v=4", "type": "User" }, { "login": "diego-treitos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/644696?v=4", "type": "User" }, { "login": "ssewell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2242776?v=4", "type": "User" } ] }, { "repo": "sensepost/usabuse", "name": "USaBUSe", "owner": "sensepost", "url": "https://github.com/sensepost/USaBUSe", "id": "00b682deb008", "stars": 501, "language": "C", "description": "Universal Serial aBUSe is a project to demonstrate the risks of hardware bypasses of software security by Rogan Dawes at SensePost.", "type": "tool", "pushedAt": "2017-08-11T08:49:11Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "singe", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "hlldz/reflexxion", "name": "RefleXXion", "owner": "hlldz", "url": "https://github.com/hlldz/RefleXXion", "id": "033d93be38b9", "stars": 499, "language": "C++", "description": "RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCrea", "type": "tool", "pushedAt": "2022-01-25T17:06:21Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "hlldz", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hlldz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16455559?v=4", "type": "User" } ] }, { "repo": "nettitude/sharpwsus", "name": "SharpWSUS", "owner": "nettitude", "url": "https://github.com/nettitude/SharpWSUS", "id": "fb16c2139e7c", "stars": 499, "language": "C#", "description": "", "type": "tool", "pushedAt": "2022-11-20T23:41:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "ngalongc/autolocalprivilegeescalation", "name": "AutoLocalPrivilegeEscalation", "owner": "ngalongc", "url": "https://github.com/ngalongc/AutoLocalPrivilegeEscalation", "id": "9638c49e5fc3", "stars": 497, "language": "Python", "description": "An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically", "type": "tool", "pushedAt": "2021-09-21T08:26:28Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ngalongc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Hackndo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" } ] }, { "repo": "redteampentesting/monsoon", "name": "monsoon", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/monsoon", "id": "0cef7b8d0326", "stars": 497, "language": "Go", "description": "Fast HTTP enumerator", "type": "tool", "pushedAt": "2026-07-17T09:52:56Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Daniel Küppers", "cardId": "a21e6ac4124486d0", "avatar": "https://avatars.githubusercontent.com/u/148886858?v=4", "login": "dkx-daniel" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "fd0", "c": 226, "avatar": "https://avatars.githubusercontent.com/u/123276?v=4", "type": "User" }, { "login": "rtpt-alexanderneumann", "c": 106, "avatar": "https://avatars.githubusercontent.com/u/62751754?v=4", "type": "User" }, { "login": "rtpt-erikgeiser", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/70747329?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" }, { "login": "erikgeiser", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/14264874?v=4", "type": "User" }, { "login": "dkx-daniel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/148886858?v=4", "type": "User" }, { "login": "inverse", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/713525?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/linkedint", "name": "LinkedInt", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/LinkedInt", "id": "c3cb58744b27", "stars": 492, "language": "Python", "description": "LinkedInt: A LinkedIn scraper for reconnaissance during adversary simulation", "type": "tool", "pushedAt": "2023-05-23T23:34:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "n0pe-sled", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11933250?v=4", "type": "User" }, { "login": "mdsecactivebreach", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" }, { "login": "vysec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/46484330?v=4", "type": "User" }, { "login": "joshuaplatz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117751339?v=4", "type": "User" }, { "login": "blackout314", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/818568?v=4", "type": "User" } ] }, { "repo": "hlldz/dazzleup", "name": "dazzleUP", "owner": "hlldz", "url": "https://github.com/hlldz/dazzleUP", "id": "4461d70b7ba8", "stars": 491, "language": "C++", "description": "A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.", "type": "tool", "pushedAt": "2020-07-23T08:48:43Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "hlldz", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hlldz", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/16455559?v=4", "type": "User" } ] }, { "repo": "outflanknl/sharphide", "name": "SharpHide", "owner": "outflanknl", "url": "https://github.com/outflanknl/SharpHide", "id": "4f8e55187550", "stars": 491, "language": "C#", "description": "Tool to create hidden registry keys.", "type": "tool", "pushedAt": "2019-10-23T10:44:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "outflanknl/invoke-adlabdeployer", "name": "Invoke-ADLabDeployer", "owner": "outflanknl", "url": "https://github.com/outflanknl/Invoke-ADLabDeployer", "id": "344d59f01907", "stars": 491, "language": "PowerShell", "description": "Automated deployment of Windows and Active Directory test lab networks. Useful for red and blue teams.", "type": "tool", "pushedAt": "2019-02-16T21:35:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MarcOverIP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" } ] }, { "repo": "bishopfox/bfdecrypt", "name": "bfdecrypt", "owner": "BishopFox", "url": "https://github.com/BishopFox/bfdecrypt", "id": "86eaea6d5e58", "stars": 488, "language": "C", "description": "Utility to decrypt App Store apps on jailbroken iOS 11.x", "type": "tool", "pushedAt": "2020-05-24T12:57:38Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xhaggis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6735009?v=4", "type": "User" } ] }, { "repo": "redteampentesting/resocks", "name": "resocks", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/resocks", "id": "8030250c1080", "stars": 484, "language": "Go", "description": "mTLS-Encrypted Back-Connect SOCKS5 Proxy", "type": "tool", "pushedAt": "2023-09-19T10:43:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rtpt-erikgeiser", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/70747329?v=4", "type": "User" }, { "login": "rtpt-alexanderneumann", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62751754?v=4", "type": "User" } ] }, { "repo": "nccgroup/scrying", "name": "scrying", "owner": "nccgroup", "url": "https://github.com/nccgroup/scrying", "id": "bdab040605df", "stars": 479, "language": "Rust", "description": "A tool for collecting RDP, web and VNC screenshots all in one place", "type": "tool", "pushedAt": "2023-04-03T22:55:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "sciguy16", "c": 306, "avatar": "https://avatars.githubusercontent.com/u/10563148?v=4", "type": "User" }, { "login": "mitroko", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6437140?v=4", "type": "User" } ] }, { "repo": "nccgroup/autochrome", "name": "autochrome", "owner": "nccgroup", "url": "https://github.com/nccgroup/autochrome", "id": "a9bca98b9f75", "stars": 478, "language": "HTML", "description": "This tool downloads, installs, and configures a shiny new copy of Chromium.", "type": "tool", "pushedAt": "2024-04-03T18:42:23Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "RyanKoppenhaver-NCC", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/5150207?v=4", "type": "User" }, { "login": "peter-h-ncc", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/113569282?v=4", "type": "User" }, { "login": "hansnielsen", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1776705?v=4", "type": "User" }, { "login": "nheiniger", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20835344?v=4", "type": "User" }, { "login": "Marmelatze", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/199681?v=4", "type": "User" }, { "login": "lgtm-migrator", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116650770?v=4", "type": "User" }, { "login": "raesene", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68317?v=4", "type": "User" }, { "login": "Zawadidone", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21525407?v=4", "type": "User" }, { "login": "dwalters0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1719888?v=4", "type": "User" }, { "login": "sudosammy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18524051?v=4", "type": "User" } ] }, { "repo": "bishopfox/cloudfoxable", "name": "cloudfoxable", "owner": "BishopFox", "url": "https://github.com/BishopFox/cloudfoxable", "id": "706f551578b9", "stars": 465, "language": "Python", "description": "Create your own vulnerable by design AWS penetration testing playground", "type": "tool", "pushedAt": "2026-05-01T21:21:58Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Seth Art", "cardId": "247b88090b18cfbd", "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "login": "sethsec" }, { "name": "Bastien Faure", "cardId": "c529e3fc123f0f24", "avatar": "https://avatars.githubusercontent.com/u/44814578?v=4", "login": "bishopfaure" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 14, "topContributors": [ { "login": "sethsec-bf", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/46326948?v=4", "type": "User" }, { "login": "bf-singularity", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/42755544?v=4", "type": "User" }, { "login": "sethsec", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1268152?v=4", "type": "User" }, { "login": "VladimirTulcinsky", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/25612740?v=4", "type": "User" }, { "login": "pingpong71", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/141460872?v=4", "type": "User" }, { "login": "jbarciabf", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/46936335?v=4", "type": "User" }, { "login": "dbravo-bishopfox", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/77294493?v=4", "type": "User" }, { "login": "adrivillab-bf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/57948867?v=4", "type": "User" }, { "login": "LuD1161", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17861054?v=4", "type": "User" }, { "login": "AlbertoPellitteri", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/66901396?v=4", "type": "User" }, { "login": "bishopfaure", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/44814578?v=4", "type": "User" }, { "login": "mc-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59574884?v=4", "type": "User" }, { "login": "wdahlenburg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4451504?v=4", "type": "User" }, { "login": "bloodstiller", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/84631290?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/kanvas", "name": "Kanvas", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/Kanvas", "id": "a6828960fc14", "stars": 459, "language": "Python", "description": "A simple-to-use IR (incident response) case management tool for tracking and documenting investigations.", "type": "tool", "pushedAt": "2026-04-29T20:08:03Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "arimboor", "c": 86, "avatar": "https://avatars.githubusercontent.com/u/17850392?v=4", "type": "User" } ] }, { "repo": "0xer3bus/poolpartybof", "name": "PoolPartyBof", "owner": "0xEr3bus", "url": "https://github.com/0xEr3bus/PoolPartyBof", "id": "e578f1167ab0", "stars": 454, "language": "C", "description": "A beacon object file implementation of PoolParty Process Injection Technique.", "type": "tool", "pushedAt": "2023-12-21T19:00:20Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "0xEr3bus", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xEr3bus", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/71999752?v=4", "type": "User" } ] }, { "repo": "bluscreenofjeff/malleable-c2-randomizer", "name": "Malleable-C2-Randomizer", "owner": "bluscreenofjeff", "url": "https://github.com/bluscreenofjeff/Malleable-C2-Randomizer", "id": "136ebfbe9a62", "stars": 454, "language": "Python", "description": "A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls", "type": "tool", "pushedAt": "2022-09-09T15:50:16Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "bluscreenofjeff", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bluscreenofjeff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6732151?v=4", "type": "User" } ] }, { "repo": "nccgroup/wssip", "name": "wssip", "owner": "nccgroup", "url": "https://github.com/nccgroup/wssip", "id": "3d81d1eb11b0", "stars": 453, "language": "JavaScript", "description": "Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.", "type": "tool", "pushedAt": "2022-12-08T18:52:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "xwuevernote", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25230940?v=4", "type": "User" }, { "login": "ladyisatis", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/515462?v=4", "type": "User" }, { "login": "DanielTimLee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16421480?v=4", "type": "User" }, { "login": "erezrokah", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26760571?v=4", "type": "User" } ] }, { "repo": "bishopfox/rmiscout", "name": "rmiscout", "owner": "BishopFox", "url": "https://github.com/BishopFox/rmiscout", "id": "c9bafa92d1f6", "stars": 449, "language": "Java", "description": "RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities", "type": "tool", "pushedAt": "2022-09-07T19:06:38Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "the-bumble", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1927215?v=4", "type": "User" }, { "login": "wdahlenburg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4451504?v=4", "type": "User" } ] }, { "repo": "nettitude/runpe", "name": "RunPE", "owner": "nettitude", "url": "https://github.com/nettitude/RunPE", "id": "6792fae9791e", "stars": 447, "language": "C#", "description": "C# Reflective loader for unmanaged binaries.", "type": "tool", "pushedAt": "2023-01-25T19:16:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "riskydissonance", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" }, { "login": "aconite33", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" }, { "login": "kerrymilan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26632151?v=4", "type": "User" } ] }, { "repo": "freddiebarrsmith/buffer-overflow-exploit-development-practice", "name": "Buffer-Overflow-Exploit-Development-Practice", "owner": "freddiebarrsmith", "url": "https://github.com/freddiebarrsmith/Buffer-Overflow-Exploit-Development-Practice", "id": "6605d322d7e1", "stars": 445, "language": "Python", "description": "Good For OSCP Training", "type": "tool", "pushedAt": "2019-01-26T18:11:46Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "freddiebarrsmith", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "freddiebarrsmith", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6563398?v=4", "type": "User" } ] }, { "repo": "outflanknl/spray-ad", "name": "Spray-AD", "owner": "outflanknl", "url": "https://github.com/outflanknl/Spray-AD", "id": "b3c3be9fc623", "stars": 443, "language": "C++", "description": "A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.", "type": "tool", "pushedAt": "2022-04-01T07:03:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "optiv/talon", "name": "Talon", "owner": "optiv", "url": "https://github.com/optiv/Talon", "id": "fe7cd98ebdea", "stars": 443, "language": "Go", "description": "A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.", "type": "tool", "pushedAt": "2023-08-18T17:42:57Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "Tylous", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "ZerkerEOD", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26573385?v=4", "type": "User" }, { "login": "0xAsh", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/51839088?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "fox-it/log4j-finder", "name": "log4j-finder", "owner": "fox-it", "url": "https://github.com/fox-it/log4j-finder", "id": "7b4284c4ebaa", "stars": 439, "language": "Python", "description": "Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)", "type": "tool", "pushedAt": "2022-12-27T17:57:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "yunzheng", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/468612?v=4", "type": "User" }, { "login": "taufderl", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1773401?v=4", "type": "User" }, { "login": "dariux", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1332112?v=4", "type": "User" }, { "login": "erottier", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/25172811?v=4", "type": "User" }, { "login": "mjsalmi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/43180721?v=4", "type": "User" }, { "login": "KrisJanssen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1765614?v=4", "type": "User" }, { "login": "lmorg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12153701?v=4", "type": "User" }, { "login": "grmt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5453386?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/win_driver_plugin", "name": "win_driver_plugin", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/win_driver_plugin", "id": "a10fd780bac7", "stars": 438, "language": "Python", "description": "A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.", "type": "tool", "pushedAt": "2018-08-22T21:12:54Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "sam-b", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/997395?v=4", "type": "User" } ] }, { "repo": "wtsxdev/exploit-development", "name": "Exploit-Development", "owner": "wtsxDev", "url": "https://github.com/wtsxDev/Exploit-Development", "id": "d147fd0a3d8d", "stars": 436, "language": null, "description": "Resources for learning about Exploit Development", "type": "tool", "pushedAt": "2020-10-01T06:53:41Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "wtsxDev", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wtsxDev", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11371613?v=4", "type": "User" } ] }, { "repo": "vectra-ai-research/maad-af", "name": "MAAD-AF", "owner": "vectra-ai-research", "url": "https://github.com/vectra-ai-research/MAAD-AF", "id": "99f1725ba2e7", "stars": 429, "language": "PowerShell", "description": "MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).", "type": "tool", "pushedAt": "2026-01-13T23:59:47Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "vectra-ai-research", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "openrec0n", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/105839082?v=4", "type": "User" }, { "login": "CyrilleFranchet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12778057?v=4", "type": "User" }, { "login": "za", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/409455?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/farmer", "name": "Farmer", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/Farmer", "id": "2d344f8dcd77", "stars": 427, "language": "C#", "description": "", "type": "tool", "pushedAt": "2021-04-28T15:27:24Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "dmchell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9010884?v=4", "type": "User" } ] }, { "repo": "netspi/goddi", "name": "goddi", "owner": "NetSPI", "url": "https://github.com/NetSPI/goddi", "id": "fdaf5fd7e148", "stars": 426, "language": "Go", "description": "goddi (go dump domain info) dumps Active Directory domain information", "type": "tool", "pushedAt": "2022-05-31T01:47:13Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "thomaselling", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/2888142?v=4", "type": "User" }, { "login": "pityonline", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/438222?v=4", "type": "User" } ] }, { "repo": "netspi/xssvalidator", "name": "xssValidator", "owner": "NetSPI", "url": "https://github.com/NetSPI/xssValidator", "id": "baf6e1ca56e7", "stars": 421, "language": "Java", "description": "This is a burp intruder extender that is designed for automation and validation of XSS vulnerabilities.", "type": "tool", "pushedAt": "2022-02-24T20:00:28Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "forced-request", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/961246?v=4", "type": "User" }, { "login": "l50", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4031126?v=4", "type": "User" }, { "login": "f-block", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/8555539?v=4", "type": "User" }, { "login": "nvisium-shawn-smith", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/43347655?v=4", "type": "User" }, { "login": "mccabe615", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1463253?v=4", "type": "User" }, { "login": "gmertk", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/907281?v=4", "type": "User" }, { "login": "kikisslass", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72187261?v=4", "type": "User" } ] }, { "repo": "orf/xcat", "name": "xcat", "owner": "orf", "url": "https://github.com/orf/xcat", "id": "91f11299abf5", "stars": 411, "language": "Python", "description": "XPath injection tool", "type": "tool", "pushedAt": "2023-01-11T21:46:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "orf", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "orf", "c": 205, "avatar": "https://avatars.githubusercontent.com/u/1027207?v=4", "type": "User" }, { "login": "HoLyVieR", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/602057?v=4", "type": "User" }, { "login": "noraj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "bitdeli-chef", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3092978?v=4", "type": "User" }, { "login": "denniskniep", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3629463?v=4", "type": "User" }, { "login": "fabaff", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/116184?v=4", "type": "User" }, { "login": "acru3l", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/40105064?v=4", "type": "User" }, { "login": "lager1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13869941?v=4", "type": "User" } ] }, { "repo": "secrary/ssma", "name": "SSMA", "owner": "secrary", "url": "https://github.com/secrary/SSMA", "id": "ca14bf904286", "stars": 411, "language": "Python", "description": "SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me] ", "type": "tool", "pushedAt": "2020-04-21T04:27:34Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "secrary", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "secrary", "c": 93, "avatar": "https://avatars.githubusercontent.com/u/16405698?v=4", "type": "User" }, { "login": "pielco11", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/17363750?v=4", "type": "User" }, { "login": "Evan-Sa", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/10689431?v=4", "type": "User" }, { "login": "firmianay", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/15265215?v=4", "type": "User" }, { "login": "delirious-lettuce", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24502053?v=4", "type": "User" }, { "login": "gitter-badger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8518239?v=4", "type": "User" } ] }, { "repo": "padovah4ck/psbypassclm", "name": "PSByPassCLM", "owner": "padovah4ck", "url": "https://github.com/padovah4ck/PSByPassCLM", "id": "f4e535ac6665", "stars": 409, "language": "C#", "description": "Bypass for PowerShell Constrained Language Mode", "type": "tool", "pushedAt": "2021-12-23T16:29:01Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "padovah4ck", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "padovah4ck", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/13963076?v=4", "type": "User" } ] }, { "repo": "bloodhoundad/bloodhound-tools", "name": "BloodHound-Tools", "owner": "BloodHoundAD", "url": "https://github.com/BloodHoundAD/BloodHound-Tools", "id": "ca71c9cfb47a", "stars": 408, "language": "Python", "description": "Miscellaneous tools for BloodHound", "type": "tool", "pushedAt": "2024-06-28T14:03:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "BloodHound Legacy Account (Deprecated)", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 7, "topContributors": [ { "login": "rvazarkar", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "ciyi", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1180432?v=4", "type": "User" }, { "login": "andyrobbins", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "peterhgombos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1403395?v=4", "type": "User" }, { "login": "thomai", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6260106?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "rootlo0p", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22565685?v=4", "type": "User" } ] }, { "repo": "ghostpack/deeppass", "name": "DeepPass", "owner": "GhostPack", "url": "https://github.com/GhostPack/DeepPass", "id": "9f605b5753ae", "stars": 242, "language": "Jupyter Notebook", "description": "Hunting for passwords with deep learning", "type": "tool", "pushedAt": "2024-05-10T07:56:27Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 1, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "synacktiv/mindmaps", "name": "Mindmaps", "owner": "synacktiv", "url": "https://github.com/synacktiv/Mindmaps", "id": "4e1e0205e7d6", "stars": 233, "language": null, "description": "Azure mindmap for penetration tests", "type": "tool", "pushedAt": "2023-11-21T15:04:15Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x4144", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/51817778?v=4", "type": "User" } ] }, { "repo": "outflanknl/wdtoggle", "name": "WdToggle", "owner": "outflanknl", "url": "https://github.com/outflanknl/WdToggle", "id": "cd9ace1d9cd0", "stars": 219, "language": null, "description": "A Beacon Object File (BOF) for Cobalt Strike which uses direct system calls to enable WDigest credential caching.", "type": "tool", "pushedAt": "2023-05-03T19:51:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cn33liz", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" }, { "login": "stanhegt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/powerdns", "name": "PowerDNS", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/PowerDNS", "id": "b5269215da03", "stars": 219, "language": "Python", "description": "PowerDNS: Powershell DNS Delivery", "type": "tool", "pushedAt": "2018-09-26T22:55:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mdsec", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/2891056?v=4", "type": "User" }, { "login": "mdsecactivebreach", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/snowcat", "name": "snowcat", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/snowcat", "id": "d0c4fee95fa6", "stars": 173, "language": "Go", "description": "a tool to audit the istio service mesh", "type": "tool", "pushedAt": "2021-10-22T20:03:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 1, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "amlweems", "c": 69, "avatar": "https://avatars.githubusercontent.com/u/117625?v=4", "type": "User" }, { "login": "michaelweber", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "bryankaraffa", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1490015?v=4", "type": "User" }, { "login": "howardjohn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/623453?v=4", "type": "User" } ] }, { "repo": "whokilleddb/lordran.polymorphic.shellcode", "name": "lordran.polymorphic.shellcode", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/lordran.polymorphic.shellcode", "stars": 56, "language": "C", "description": "Things i do because i saw it on twitter on a weekend", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e5dda5eb0032", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-07-20T22:53:56Z", "archived": false, "topContributors": [] }, { "repo": "aniqfakhrul/lazyparam", "name": "lazyparam", "owner": "aniqfakhrul", "url": "https://github.com/aniqfakhrul/lazyParam", "stars": 56, "language": "Python", "description": "A simple automation tool to detect lfi, rce and ssti vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aniq Fakhrul", "cardId": "4a22913fe2902dfe", "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f73f03aed450", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2022-02-15T15:35:36Z", "archived": false, "topContributors": [ { "login": "aniqfakhrul", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4", "type": "User" }, { "login": "m1rz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/22714237?v=4", "type": "User" }, { "login": "H0j3n", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/51261763?v=4", "type": "User" }, { "login": "storenth", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18244131?v=4", "type": "User" } ] }, { "repo": "liveoverflow/webp-cve-2023-4863", "name": "webp-cve-2023-4863", "owner": "liveoverflow", "url": "https://github.com/LiveOverflow/webp-CVE-2023-4863", "stars": 56, "language": "JavaScript", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "LiveOverflow 🔴", "cardId": "b61c535e38df6b14", "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5cd87b9d36d6", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-13T17:40:58Z", "archived": false, "topContributors": [ { "login": "LiveOverflow", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12161158?v=4", "type": "User" } ] }, { "repo": "codingo/fastsub", "name": "fastsub", "owner": "codingo", "url": "https://github.com/codingo/fastsub", "id": "e6a1b3efefb4", "stars": 56, "language": "C++", "description": "A custom built DNS bruteforcer with multi-threading, and handling of bad resolvers.", "type": "tool", "pushedAt": "2022-04-25T02:35:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Skelton", "cardId": "f8f490ae340539c9", "avatar": "https://avatars.githubusercontent.com/u/886344?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "codingo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/886344?v=4", "type": "User" } ] }, { "repo": "eversinc33/credguess", "name": "CredGuess", "owner": "eversinc33", "url": "https://github.com/eversinc33/CredGuess", "id": "30e837f242fa", "stars": 56, "language": "Python", "description": "Generate password spraying lists based on the pwdLastSet-attribute of users.", "type": "tool", "pushedAt": "2023-12-06T12:30:12Z", "archived": false, "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "eversinc33", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/dsc_svc_remote", "name": "dsc_svc_remote", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/DSC_SVC_REMOTE", "stars": 55, "language": "C", "description": "This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service p", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1f5b370959a4", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-08T15:56:24Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "0vercl0k/cve-2021-32537", "name": "cve-2021-32537", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/CVE-2021-32537", "stars": 55, "language": "C++", "description": "PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59604a1b7dc4", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-06-26T18:31:23Z", "archived": true, "topContributors": [ { "login": "0vercl0k", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" } ] }, { "repo": "johnwoodman/fes", "name": "fes", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/FES", "stars": 55, "language": "Rust", "description": "Fast Endpoint Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "37ebd82ea3b0", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2020-12-23T04:50:16Z", "archived": false, "topContributors": [ { "login": "John-woodman", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/32111296?v=4", "type": "User" }, { "login": "JohnWoodman", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" }, { "login": "ricardo0129", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15710124?v=4", "type": "User" } ] }, { "repo": "nicholasaleks/reverse-shells", "name": "reverse-shells", "owner": "nicholasaleks", "url": "https://github.com/nicholasaleks/reverse-shells", "id": "bf36214bad08", "stars": 55, "language": null, "description": "A collection of reverse shell commands and payloads", "type": "tool", "pushedAt": "2023-07-26T02:35:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Nick Aleks", "cardId": "28d1808f86ede3c0", "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nicholasaleks", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4", "type": "User" } ] }, { "repo": "trustedsec/auto_settingcontent-ms", "name": "auto_SettingContent-ms", "owner": "trustedsec", "url": "https://github.com/trustedsec/auto_SettingContent-ms", "id": "e6797d2271cc", "stars": 55, "language": "Python", "description": "This is a quick POC for using the Matt Nelson (enigma0x3) technique for generating a malicious .SettingContent-ms extension type for remote code execution. This automates generating an HTA downloader ", "type": "tool", "pushedAt": "2018-06-15T14:55:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "TrustedSec", "cardId": "f3bff5b30c81bb55", "avatar": "https://avatars.githubusercontent.com/u/3160808?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "specterops/janus", "name": "Janus", "owner": "SpecterOps", "url": "https://github.com/SpecterOps/Janus", "id": "d9a4be920a1a", "stars": 54, "language": "Python", "description": "Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.", "type": "tool", "pushedAt": "2026-06-23T13:47:17Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SpecterOps", "cardId": "eded29409e172109", "avatar": "https://avatars.githubusercontent.com/u/25406560?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Gavin Kramer", "cardId": "f9ed0af301695f21", "avatar": "https://avatars.githubusercontent.com/u/215857709?v=4", "login": "gkramer-SO" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "gkramer-SO", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/215857709?v=4", "type": "User" } ] }, { "repo": "raskolnikov90/lainamsiopensession", "name": "lainamsiopensession", "owner": "raskolnikov90", "url": "https://github.com/raskolnikov90/LainAmsiOpenSession", "stars": 53, "language": "PowerShell", "description": "Custom Amsi Bypass by patching AmsiOpenSession function in amsi.dll", "type": "tool", "lanes": [ "2" ], "author": { "name": "LainKusanagi", "cardId": "0b8f90ebec1aef9e", "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4809d5f80810", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-16T02:01:52Z", "archived": false, "topContributors": [ { "login": "raskolnikov90", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/bof", "name": "bof", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/bof", "stars": 53, "language": "Python", "description": "BOF (Boiboite Opener Framework) is a testing framework for industrial protocols implementations and devices.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c2673e76f97", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2025-02-14T15:09:29Z", "archived": false, "topContributors": [ { "login": "claire-lex", "c": 230, "avatar": "https://avatars.githubusercontent.com/u/55185179?v=4", "type": "User" }, { "login": "theobarrague", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/11135217?v=4", "type": "User" }, { "login": "JonathDu", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/22551879?v=4", "type": "User" }, { "login": "Lex2xS", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/48792176?v=4", "type": "User" } ] }, { "repo": "whokilleddb/injection-for-dummies", "name": "injection-for-dummies", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/injection-for-dummies", "stars": 52, "language": "C", "description": "A collection of PoCs for different injection techniques on Windows!", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "45e28e17dad4", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-27T16:36:09Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "hasherezade/shellc_encoder", "name": "shellc_encoder", "owner": "hasherezade", "url": "https://github.com/hasherezade/shellc_encoder", "stars": 52, "language": "C", "description": "Standalone Metasploit-like XOR encoder for shellcode", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "55e67d28bace", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-12T13:53:45Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "seifreed/r2inspect", "name": "r2inspect", "owner": "seifreed", "url": "https://github.com/seifreed/r2inspect", "stars": 52, "language": "Python", "description": "r2inspect is a professional malware analysis framework that automates deep static inspection for PE, ELF, and Mach-O binaries using the radare2 ecosystem. It combines format parsing, detection heurist", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "98051499ed71", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-01T05:57:10Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 1596, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "pry0cc/doh365", "name": "doh365", "owner": "pry0cc", "url": "https://github.com/pry0cc/Doh365", "stars": 51, "language": "Ruby", "description": "An Office 365 enumeration script - PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a63ec5376000", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": null, "topContributors": [] }, { "repo": "maldev-academy/gitlabdevicecodephishing", "name": "gitlabdevicecodephishing", "owner": "maldev-academy", "url": "https://github.com/Maldev-Academy/GitLabDeviceCodePhishing", "stars": 51, "language": "Python", "description": "A tool to easily perform GitLab Device Code Phishing on red team engagements", "type": "tool", "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "81cb6739f2d1", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [ { "name": "mr.d0x", "cardId": "35cb277528d6d333", "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "login": "mrd0x" } ], "pushedAt": "2026-02-09T01:51:38Z", "archived": false, "topContributors": [ { "login": "mrd0x", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/28691727?v=4", "type": "User" } ] }, { "repo": "calebstewart/peach", "name": "peach", "owner": "calebstewart", "url": "https://github.com/calebstewart/peach", "id": "917a1ac7ca9a", "stars": 51, "language": "Python", "description": "Simple vulnerability scanning framework", "type": "tool", "pushedAt": "2016-10-29T19:54:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Caleb Stewart", "cardId": "ba74cf38708a6351", "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "login": "JohnHammond" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "calebstewart", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4", "type": "User" }, { "login": "JohnHammond", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/cve-2025-0282", "name": "cve-2025-0282", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2025-0282", "stars": 50, "language": "Ruby", "description": "PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4f6b207a8cd4", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-16T20:09:52Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "0vercl0k/kdmp-parser-rs", "name": "kdmp-parser-rs", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/kdmp-parser-rs", "stars": 50, "language": "Rust", "description": "A KISS Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7c4f56146b4c", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-04-17T03:57:56Z", "archived": false, "topContributors": [ { "login": "0vercl0k", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" }, { "login": "ducphanduyagentp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7158594?v=4", "type": "User" }, { "login": "wbenny", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4465216?v=4", "type": "User" } ] }, { "repo": "six2dez/resolvers_reconftw", "name": "resolvers_reconftw", "owner": "six2dez", "url": "https://github.com/six2dez/resolvers_reconftw", "id": "2e80708982c9", "stars": 50, "language": null, "description": "Resolvers updated daily for reconftw", "type": "tool", "pushedAt": "2023-02-07T04:57:49Z", "archived": true, "lanes": [ "2" ], "author": { "name": "Six2dez1", "cardId": "32576d4900c674b2", "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "six2dez", "c": 120, "avatar": "https://avatars.githubusercontent.com/u/24670991?v=4", "type": "User" } ] }, { "repo": "pry0cc/credcatch", "name": "CredCatch", "owner": "pry0cc", "url": "https://github.com/pry0cc/CredCatch", "id": "28d4d65c1f41", "stars": 49, "language": "Ruby", "description": "Find plaintext credentials from emails in bulk from password dumps, and generate emails on the fly.", "type": "tool", "pushedAt": "2019-04-09T14:51:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "pry0cc", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" } ] }, { "repo": "win3zz/cve-2025-5777", "name": "cve-2025-5777", "owner": "win3zz", "url": "https://github.com/win3zz/CVE-2025-5777", "stars": 48, "language": "Python", "description": "CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0155bd4504e5", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-08T17:58:44Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "noperator/wifi-unredactor", "name": "wifi-unredactor", "owner": "noperator", "url": "https://github.com/noperator/wifi-unredactor", "stars": 48, "language": "Swift", "description": "Bypass Wi-Fi (B)SSID redaction on CLI in macOS Sonoma+", "type": "tool", "lanes": [ "2" ], "author": { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f85d5294503a", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-16T16:42:30Z", "archived": false, "topContributors": [ { "login": "noperator", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" } ] }, { "repo": "runzeroinc/runzerohound", "name": "runzerohound", "owner": "runzeroinc", "url": "https://github.com/runZeroInc/runZeroHound", "stars": 48, "language": "Go", "description": "Bring runZero Exposure Management into BloodHound", "type": "tool", "lanes": [ "2" ], "author": { "name": "runZero, Inc.", "cardId": "c3b11d2dc7154a6f", "avatar": "https://avatars.githubusercontent.com/u/50307271?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4237ad1e14e0", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-16T21:59:51Z", "archived": false, "topContributors": [ { "login": "hdm", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1171392?v=4", "type": "User" } ] }, { "repo": "0xsha/cve-2026-6307", "name": "cve-2026-6307", "owner": "0xsha", "url": "https://github.com/0xsha/CVE-2026-6307", "stars": 48, "language": "HTML", "description": "Google Chrome CVE-2026-6307 PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsha", "cardId": "df2469ad581b3713", "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e76b2a2af1ce", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-01T13:32:36Z", "archived": false, "topContributors": [ { "login": "0xsha", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4", "type": "User" } ] }, { "repo": "octoberfest7/cs_uploads_tracker", "name": "CS_Uploads_Tracker", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/CS_Uploads_Tracker", "id": "deaf257beb4a", "stars": 48, "language": null, "description": "Aggressor script add-in for CobaltStrike to track file uploads", "type": "tool", "pushedAt": "2022-11-07T17:12:58Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Octoberfest7", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "maldev-academy/qrsteganography", "name": "QRSteganography", "owner": "Maldev-Academy", "url": "https://github.com/Maldev-Academy/QRSteganography", "id": "44b74789732a", "stars": 48, "language": "C", "description": "Encodes arbitrary data into one or more QR code PNGs and decodes them back as a form of steganography for data obfuscation.", "type": "tool", "pushedAt": "2026-03-10T06:53:53Z", "archived": false, "lanes": [ "2" ], "author": { "name": "MalDev Academy", "cardId": "8d82ed01f01f2611", "avatar": "https://avatars.githubusercontent.com/u/121844819?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "infosecn1nja/invoke-atomicassessment", "name": "invoke-atomicassessment", "owner": "infosecn1nja", "url": "https://github.com/infosecn1nja/Invoke-AtomicAssessment", "stars": 47, "language": "PowerShell", "description": "Invoke-AtomicAssessment is a powerful tool designed to facilitate adversary emulation by leveraging Atomic Red Team.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rahmat Nurfauzi", "cardId": "435814a5a2f77b02", "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ff508b66ef39", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-22T02:39:53Z", "archived": false, "topContributors": [ { "login": "infosecn1nja", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5790261?v=4", "type": "User" }, { "login": "3ldidi94", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/18704024?v=4", "type": "User" } ] }, { "repo": "bellingcat/rs4osint", "name": "rs4osint", "owner": "bellingcat", "url": "https://github.com/bellingcat/RS4OSINT", "stars": 47, "language": "TeX", "description": "Guide to Remote Sensing for OSINT", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bellingcat", "cardId": "a84a5ad1f23a394e", "avatar": "https://avatars.githubusercontent.com/u/71088928?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "954afe33d455", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-01-07T14:37:57Z", "archived": false, "topContributors": [ { "login": "oballinger", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/58981760?v=4", "type": "User" }, { "login": "loganwilliams", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/823027?v=4", "type": "User" }, { "login": "ajmalsiddiqui", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20279129?v=4", "type": "User" } ] }, { "repo": "whokilleddb/a-study-in-obfuscation", "name": "a-study-in-obfuscation", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/A-Study-in-Obfuscation", "stars": 45, "language": "C", "description": "A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ba96d7b77555", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-27T20:02:53Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "soxoj/bellingcat-hackathon-watchcats", "name": "bellingcat-hackathon-watchcats", "owner": "soxoj", "url": "https://github.com/soxoj/bellingcat-hackathon-watchcats", "stars": 45, "language": "Jupyter Notebook", "description": "📊 Adana - 1-click analytical dashboard for OSINT researchers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a10adc712e74", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-04-23T14:42:29Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" }, { "login": "dizvyagintsev", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/104571483?v=4", "type": "User" } ] }, { "repo": "mrexodia/x86-real-mode-bootloader", "name": "x86-real-mode-bootloader", "owner": "mrexodia", "url": "https://github.com/mrexodia/x86-real-mode-bootloader", "stars": 45, "language": "Python", "description": "Boot loader and emulator for real mode written in C/Python.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Duncan Ogilvie 🍍", "cardId": "2751962b9e4a5275", "avatar": "https://avatars.githubusercontent.com/u/2458265?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2a3efd8e34c2", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-06-06T23:33:44Z", "archived": false, "topContributors": [ { "login": "mrexodia", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/2458265?v=4", "type": "User" }, { "login": "claude", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" }, { "login": "deomsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67714723?v=4", "type": "User" } ] }, { "repo": "tenebrae93/xss-cookie-stealer", "name": "xss-cookie-stealer", "owner": "tenebrae93", "url": "https://github.com/TeneBrae93/xss-cookie-stealer", "stars": 45, "language": "Python", "description": "Simple Python script that will set up a PHP server for stealing cookies - and provided the payload needed. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tyler Ramsbey", "cardId": "5ccc8a85d47160b1", "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fde7eb090d82", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-28T15:38:05Z", "archived": false, "topContributors": [ { "login": "TeneBrae93", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4", "type": "User" } ] }, { "repo": "wrongbaud/ghidra-stm32", "name": "ghidra-stm32", "owner": "wrongbaud", "url": "https://github.com/wrongbaud/ghidra-stm32", "stars": 44, "language": "Java", "description": "A Ghidra Loader for STM32 CPUs (WIP)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Alt (wrongbaud)", "cardId": "066df27f625958c1", "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "221417aed5c6", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-05-16T01:13:39Z", "archived": false, "topContributors": [ { "login": "wrongbaud", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4", "type": "User" }, { "login": "bsilvereagle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5597239?v=4", "type": "User" } ] }, { "repo": "pry0cc/autocrack", "name": "autocrack", "owner": "pry0cc", "url": "https://github.com/pry0cc/autocrack", "stars": 44, "language": "Shell", "description": "autocrack adds queue support for hashcat cracking. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c2e4db9b82e7", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2023-03-16T06:30:26Z", "archived": false, "topContributors": [] }, { "repo": "daffainfo/apiguesser", "name": "apiguesser", "owner": "daffainfo", "url": "https://github.com/daffainfo/apiguesser", "stars": 44, "language": "Go", "description": "Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/", "type": "tool", "lanes": [ "2" ], "author": { "name": "Muhammad Daffa", "cardId": "6e6b6c585fcb159b", "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "08d3a79be8fb", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-28T16:31:26Z", "archived": false, "topContributors": [ { "login": "daffainfo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4", "type": "User" } ] }, { "repo": "leonov-av/scanvus", "name": "scanvus", "owner": "leonov-av", "url": "https://github.com/leonov-av/scanvus", "stars": 44, "language": "Python", "description": "Simple Authenticated Vulnerability Scanner for Linux hosts and Docker images", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexander Leonov", "cardId": "83e22269cef8aabb", "avatar": "https://avatars.githubusercontent.com/u/6882372?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f270aad1af0e", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-13T22:55:59Z", "archived": false, "topContributors": [ { "login": "leonov-av", "c": 44, "avatar": "https://avatars.githubusercontent.com/u/6882372?v=4", "type": "User" } ] }, { "repo": "hacksysteam/shellcodeofdeath", "name": "shellcodeofdeath", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/ShellcodeOfDeath", "stars": 43, "language": "C", "description": "Shellcode Of Death", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "74b4eed2e1a3", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-08-31T08:44:28Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "3xp0rt/naminter", "name": "naminter", "owner": "3xp0rt", "url": "https://github.com/3xp0rt/Naminter", "stars": 43, "language": "Python", "description": "A Python package and command-line interface (CLI) tool for asynchronous OSINT username enumeration using the WhatsMyName dataset", "type": "tool", "lanes": [ "2" ], "author": { "name": "3xp0rt", "cardId": "52e97a4643b9a77e", "avatar": "https://avatars.githubusercontent.com/u/61662492?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b89b03fcf7f9", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-04T19:35:07Z", "archived": false, "topContributors": [ { "login": "3xp0rt", "c": 72, "avatar": "https://avatars.githubusercontent.com/u/61662492?v=4", "type": "User" }, { "login": "cloudmaker97", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4189795?v=4", "type": "User" } ] }, { "repo": "whokilleddb/emulat3", "name": "emulat3", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/emulat3", "stars": 42, "language": "Python", "description": "Step through PE functions or shellcode instruction-by-instruction (amd64)", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "84951a07f628", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-05-04T10:04:31Z", "archived": false, "topContributors": [] }, { "repo": "1n3/supermicro-password-scanner", "name": "supermicro-password-scanner", "owner": "1n3", "url": "https://github.com/1N3/SuperMicro-Password-Scanner", "stars": 42, "language": "Shell", "description": "Supermicro IPMI/BMC Cleartext Password Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "xer0dayz", "cardId": "3c918c4ef055bbd8", "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1e5e9eb8c0a5", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-09-06T15:07:03Z", "archived": false, "topContributors": [ { "login": "1N3", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7894221?v=4", "type": "User" } ] }, { "repo": "decal/ssltest-stls", "name": "ssltest-stls", "owner": "decal", "url": "https://github.com/decal/ssltest-stls", "stars": 42, "language": "Python", "description": ":hammer_and_wrench: Proof-of-concept code for Heartbleed a.k.a. CVE2014-0160 with STARTTLS support for various protocols", "type": "tool", "lanes": [ "2" ], "author": { "name": "Derek Callaway", "cardId": "b85bc297d944b524", "avatar": "https://avatars.githubusercontent.com/u/773264?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f5280825c48e", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-07T06:50:09Z", "archived": false, "topContributors": [ { "login": "decal", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/773264?v=4", "type": "User" } ] }, { "repo": "jxy-s/vfdynf", "name": "vfdynf", "owner": "jxy-s", "url": "https://github.com/jxy-s/vfdynf", "stars": 42, "language": "C", "description": "Application Verifier Dynamic Fault Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Johnny Shaw", "cardId": "db65269d7e82b1fd", "avatar": "https://avatars.githubusercontent.com/u/11687482?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "22ff3aea1a40", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-01-12T23:24:36Z", "archived": false, "topContributors": [ { "login": "jxy-s", "c": 113, "avatar": "https://avatars.githubusercontent.com/u/11687482?v=4", "type": "User" }, { "login": "pin113", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39570835?v=4", "type": "User" }, { "login": "ThFabba", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18138474?v=4", "type": "User" } ] }, { "repo": "forrest-orr/exploitdev", "name": "ExploitDev", "owner": "forrest-orr", "url": "https://github.com/forrest-orr/ExploitDev", "id": "10da729a2c08", "stars": 42, "language": "Assembly", "description": "Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/", "type": "tool", "pushedAt": "2021-07-22T21:50:57Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Forrest Orr", "cardId": "13dceaf312a0dbc2", "avatar": "https://avatars.githubusercontent.com/u/55118191?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "arizvisa/syringe", "name": "syringe", "owner": "arizvisa", "url": "https://github.com/arizvisa/syringe", "id": "aa7da10c5449", "stars": 42, "language": "Python", "description": "Random tools and things for creating+injecting complex organisms into a process on both the posix and windows platforms. Includes support for decomposing a ton of file formats and in-memory data struc", "type": "tool", "pushedAt": "2026-04-14T19:05:54Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ali Rizvi-Santiago", "cardId": "507e20e060bbc5a9", "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "arizvisa", "c": 1977, "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4", "type": "User" } ] }, { "repo": "nikolajschlej/hydroph0bia", "name": "hydroph0bia", "owner": "nikolajschlej", "url": "https://github.com/NikolajSchlej/Hydroph0bia", "stars": 41, "language": "C", "description": "Binaries, drivers, PoCs and other stuff on Hydroph0bia vulnerability (CVE-2025-4275)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nikolaj Schlej", "cardId": "2537608ef9153b86", "avatar": "https://avatars.githubusercontent.com/u/1845688?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d2b95a45cc03", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-20T05:47:21Z", "archived": false, "topContributors": [ { "login": "NikolajSchlej", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1845688?v=4", "type": "User" } ] }, { "repo": "whokilleddb/psi_bof", "name": "psi_bof", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/PSI_BOF", "stars": 40, "language": "C++", "description": " A BOF designed to inspect processes memory and addresses", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "322be06cb3f8", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-19T21:27:10Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "dancas93/ssrf-scanner", "name": "ssrf-scanner", "owner": "dancas93", "url": "https://github.com/Dancas93/SSRF-Scanner", "stars": 40, "language": "Python", "description": "A Complete SSRF (Server Side Request Forgery) Scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniele Castronovo", "cardId": "25a3c6dbebb180f1", "avatar": "https://avatars.githubusercontent.com/u/12494315?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e977c14b368", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-16T13:01:29Z", "archived": false, "topContributors": [ { "login": "Dancas93", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/12494315?v=4", "type": "User" }, { "login": "NeCr00", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/36794189?v=4", "type": "User" } ] }, { "repo": "sbousseaden/gluegate", "name": "gluegate", "owner": "sbousseaden", "url": "https://github.com/sbousseaden/gluegate", "stars": 40, "language": "C", "description": "Memory API proxy via signed mozglue.dll ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Samir", "cardId": "e4db282b511228b1", "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "306beadbb6a3", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-25T18:18:46Z", "archived": false, "topContributors": [ { "login": "sbousseaden", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/20989958?v=4", "type": "User" }, { "login": "Samirbous", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/64742097?v=4", "type": "User" } ] }, { "repo": "0vercl0k/inject", "name": "inject", "owner": "0vercl0k", "url": "https://github.com/0vercl0k/inject", "stars": 39, "language": "C++", "description": "Yet another Windows DLL injector.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Axel Souchet", "cardId": "63e0e22a3753917e", "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "21a8f942708e", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-11-17T16:54:31Z", "archived": false, "topContributors": [ { "login": "0vercl0k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1476421?v=4", "type": "User" }, { "login": "cube0x8", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5074505?v=4", "type": "User" } ] }, { "repo": "nixintel/sansosintsummit2023", "name": "sansosintsummit2023", "owner": "nixintel", "url": "https://github.com/nixintel/sansosintsummit2023", "stars": 39, "language": null, "description": "List of links and resources referred to in my SANS OSINT Summit 2023 Talk: \"Tips & Tricks For Digital Dumpster Diving\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nixintel (Nick Furneaux)", "cardId": "5c6363d58afa3660", "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "48e75042e04e", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-22T15:46:46Z", "archived": false, "topContributors": [ { "login": "nixintel", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4", "type": "User" } ] }, { "repo": "reecdeep/hollowise", "name": "hollowise", "owner": "reecdeep", "url": "https://github.com/reecdeep/hollowise", "stars": 39, "language": "C++", "description": "Hollowise is a tool that implements process hollowing and PPID (Parent Process ID) spoofing techniques for masking a legitimate analysis tool from malware detection", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReecDeep", "cardId": "bbeadf8a1da4ea51", "avatar": "https://avatars.githubusercontent.com/u/72123074?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "571c1212f472", "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-20T22:33:00Z", "archived": false, "topContributors": [ { "login": "reecdeep", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/72123074?v=4", "type": "User" } ] }, { "repo": "runzeroinc/vulns-2026-fatfs-chance", "name": "vulns-2026-fatfs-chance", "owner": "runZeroInc", "url": "https://github.com/runZeroInc/vulns-2026-fatfs-chance", "id": "3a047b839d9e", "stars": 39, "language": "C", "description": "", "type": "tool", "pushedAt": "2026-07-17T16:20:20Z", "archived": false, "lanes": [ "2" ], "author": { "name": "runZero, Inc.", "cardId": "c3b11d2dc7154a6f", "avatar": "https://avatars.githubusercontent.com/u/50307271?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Tod Beardsley", "cardId": "f6a300e6bf1ced9d", "avatar": "https://avatars.githubusercontent.com/u/24144?v=4", "login": "todb" } ], "adoptionOperators": 0, "score": 16, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hdm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1171392?v=4", "type": "User" }, { "login": "todb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24144?v=4", "type": "User" } ] }, { "repo": "ericzimmerman/mftecmd", "name": "mftecmd", "owner": "ericzimmerman", "url": "https://github.com/EricZimmerman/MFTECmd", "stars": 323, "language": "C#", "description": "Parses $MFT from NTFS file systems", "type": "tool", "lanes": [ "1" ], "author": { "name": "ericzimmerman", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2023/11/17/htb-sherlock-i-like-to.html", "title": "HTB Sherlock: i-like-to", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2023/12/14/htb-sherlock-tick-tock.html", "title": "HTB Sherlock: Tick Tock", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/04/17/htb-sherlock-bft.html", "title": "HTB Sherlock: BFT", "person": "0xdf" } ], "referencedCount": 3, "id": "ed324fabe321", "score": 15, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 6, "contributors": [], "pushedAt": "2026-05-10T13:45:26Z", "archived": false, "topContributors": [ { "login": "EricZimmerman", "c": 206, "avatar": "https://avatars.githubusercontent.com/u/4265254?v=4", "type": "User" }, { "login": "AndrewRathbun", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/36825567?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 9, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "frendsick", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44954973?v=4", "type": "User" }, { "login": "reece394", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31659691?v=4", "type": "User" }, { "login": "calilkhalil", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/89503421?v=4", "type": "User" } ] }, { "repo": "positivetechnologies/ghidra_nodejs", "name": "ghidra_nodejs", "owner": "positivetechnologies", "url": "https://github.com/PositiveTechnologies/ghidra_nodejs", "stars": 384, "language": "Java", "description": "GHIDRA plugin to parse, disassemble and decompile NodeJS Bytenode (JSC) binaries", "type": "tool", "lanes": [ "1" ], "author": { "name": "positivetechnologies", "cardId": null }, "referencedBy": [ { "url": "https://swarm.ptsecurity.com/decompiling-node-js-in-ghidra/", "title": "Decompiling Node.js in Ghidra", "person": "Mark Ermolov" }, { "url": "https://swarm.ptsecurity.com/creating-a-ghidra-processor-module-in-sleigh-using-v8-bytecode-as-an-example/", "title": "Creating a Ghidra processor module in SLEIGH using V8 bytecode as an example", "person": "Mark Ermolov" } ], "referencedCount": 2, "id": "cf98a5d43086", "score": 15, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-03-04T15:06:11Z", "archived": true, "topContributors": [ { "login": "lab313ru", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/7189309?v=4", "type": "User" }, { "login": "ntlyapova", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/44635190?v=4", "type": "User" } ] }, { "repo": "ericzimmerman/evtx", "name": "evtx", "owner": "ericzimmerman", "url": "https://github.com/EricZimmerman/evtx", "stars": 369, "language": "C#", "description": "C# based evtx parser with lots of extras", "type": "tool", "lanes": [ "1" ], "author": { "name": "ericzimmerman", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2024/05/16/htb-sherlock-logjammer.html", "title": "HTB Sherlock: Logjammer", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/07/23/htb-sherlock-tracer.html", "title": "HTB Sherlock: Tracer", "person": "0xdf" } ], "referencedCount": 2, "id": "5c442ac4685a", "score": 15, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 30, "contributors": [], "pushedAt": "2026-06-17T13:28:37Z", "archived": false, "topContributors": [ { "login": "AndrewRathbun", "c": 720, "avatar": "https://avatars.githubusercontent.com/u/36825567?v=4", "type": "User" }, { "login": "EricZimmerman", "c": 279, "avatar": "https://avatars.githubusercontent.com/u/4265254?v=4", "type": "User" }, { "login": "hyuunnn", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/15611739?v=4", "type": "User" }, { "login": "esecrpm", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/7072942?v=4", "type": "User" }, { "login": "RandyRandleman", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/24572808?v=4", "type": "User" }, { "login": "randomaccess3", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1241363?v=4", "type": "User" }, { "login": "forensenellanebbia", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/8271353?v=4", "type": "User" }, { "login": "CluelessAtCoding", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/66868868?v=4", "type": "User" }, { "login": "reece394", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/31659691?v=4", "type": "User" }, { "login": "Karneades", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/30265053?v=4", "type": "User" }, { "login": "dfirdetective", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/88520889?v=4", "type": "User" }, { "login": "bmackalicious", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/54725471?v=4", "type": "User" }, { "login": "Eran-YT", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50210019?v=4", "type": "User" }, { "login": "HSICFA", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/89138037?v=4", "type": "User" }, { "login": "mark-hallman", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16808320?v=4", "type": "User" }, { "login": "michealb401", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59740918?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "chadtilbury", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/8173694?v=4", "type": "User" }, { "login": "PJSnyder", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/92733537?v=4", "type": "User" }, { "login": "anelshaer", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4087461?v=4", "type": "User" }, { "login": "itsausting", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19922895?v=4", "type": "User" }, { "login": "barrie0482", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/65997?v=4", "type": "User" }, { "login": "fwacrtnty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/119591125?v=4", "type": "User" }, { "login": "stark4n6", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/48143894?v=4", "type": "User" }, { "login": "Lennaert89", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9073380?v=4", "type": "User" }, { "login": "mpilking", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5453480?v=4", "type": "User" }, { "login": "qlemaire", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29045289?v=4", "type": "User" }, { "login": "vikas891", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39370194?v=4", "type": "User" }, { "login": "Copilot", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/1143301?v=4", "type": "Bot" }, { "login": "scriptedstatement", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39844009?v=4", "type": "User" } ] }, { "repo": "ericzimmerman/pecmd", "name": "pecmd", "owner": "ericzimmerman", "url": "https://github.com/EricZimmerman/PECmd", "stars": 303, "language": "C#", "description": "Prefetch Explorer Command Line", "type": "tool", "lanes": [ "1" ], "author": { "name": "ericzimmerman", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2024/07/23/htb-sherlock-tracer.html", "title": "HTB Sherlock: Tracer", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2024/06/24/htb-sherlock-campfire-1.html", "title": "HTB Sherlock: Campfire-1", "person": "0xdf" } ], "referencedCount": 2, "id": "133fe909283b", "score": 15, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 4, "contributors": [], "pushedAt": "2026-04-29T17:48:41Z", "archived": false, "topContributors": [ { "login": "EricZimmerman", "c": 91, "avatar": "https://avatars.githubusercontent.com/u/4265254?v=4", "type": "User" }, { "login": "AndrewRathbun", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/36825567?v=4", "type": "User" }, { "login": "kowa1ski", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23742881?v=4", "type": "User" }, { "login": "reece394", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31659691?v=4", "type": "User" } ] }, { "repo": "nccgroup/idahunt", "name": "idahunt", "owner": "nccgroup", "url": "https://github.com/nccgroup/idahunt", "id": "16a1660cb588", "stars": 393, "language": "Python", "description": "idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro", "type": "tool", "pushedAt": "2023-09-21T14:59:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" }, { "name": "Cedric Halbronn", "cardId": "0e9cf6d9bec332e9", "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "login": "saidelike" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "fidgetingbits", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "saidelike", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "type": "User" }, { "login": "firmianay", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15265215?v=4", "type": "User" }, { "login": "uf0o", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24236867?v=4", "type": "User" } ] }, { "repo": "hoangprod/andrewspecial", "name": "AndrewSpecial", "owner": "hoangprod", "url": "https://github.com/hoangprod/AndrewSpecial", "id": "bb25323f92fb", "stars": 392, "language": "C++", "description": "AndrewSpecial, dumping lsass' memory stealthily and bypassing \"Cilence\" since 2019.", "type": "tool", "pushedAt": "2019-06-02T02:49:28Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "hoangprod", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hoangprod", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/41701929?v=4", "type": "User" }, { "login": "gabu-b", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37980500?v=4", "type": "User" } ] }, { "repo": "sensepost/frack", "name": "Frack", "owner": "sensepost", "url": "https://github.com/sensepost/Frack", "id": "b4aa58d98942", "stars": 386, "language": "Python", "description": "Frack - Keep and Maintain your breach data", "type": "tool", "pushedAt": "2024-09-01T17:29:35Z", "archived": true, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "StingraySA", "c": 154, "avatar": "https://avatars.githubusercontent.com/u/42263294?v=4", "type": "User" }, { "login": "idarlund", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3417634?v=4", "type": "User" }, { "login": "Reelix", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/289404?v=4", "type": "User" } ] }, { "repo": "cornerpirate/js2pdfinjector", "name": "JS2PDFInjector", "owner": "cornerpirate", "url": "https://github.com/cornerpirate/JS2PDFInjector", "id": "bcab7ead3298", "stars": 386, "language": "Java", "description": "Inject a JS file into a PDF file.", "type": "tool", "pushedAt": "2019-12-11T23:41:11Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Paul Ritchie", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "cornerpirate", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4266127?v=4", "type": "User" }, { "login": "rst0git", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9142901?v=4", "type": "User" } ] }, { "repo": "hightechsec/git-scanner", "name": "git-scanner", "owner": "HightechSec", "url": "https://github.com/HightechSec/git-scanner", "id": "69964b257b3e", "stars": 383, "language": "Shell", "description": "A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public", "type": "tool", "pushedAt": "2020-06-23T05:44:26Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "HightechSec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HightechSec", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/24645706?v=4", "type": "User" } ] }, { "repo": "nccgroup/cartographer", "name": "Cartographer", "owner": "nccgroup", "url": "https://github.com/nccgroup/Cartographer", "id": "267f7e4a29f4", "stars": 382, "language": "Java", "description": "Code Coverage Exploration Plugin for Ghidra", "type": "tool", "pushedAt": "2024-07-19T12:17:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "aus10pv", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/135560712?v=4", "type": "User" }, { "login": "chris-anley-ncc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/132996187?v=4", "type": "User" } ] }, { "repo": "nettitude/simplepeloader", "name": "SimplePELoader", "owner": "nettitude", "url": "https://github.com/nettitude/SimplePELoader", "id": "809a76e77501", "stars": 379, "language": "C++", "description": "In-Memory PE Loader", "type": "tool", "pushedAt": "2019-10-07T08:48:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Coder666", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/17981928?v=4", "type": "User" } ] }, { "repo": "improsec/sharpeventpersist", "name": "SharpEventPersist", "owner": "improsec", "url": "https://github.com/improsec/SharpEventPersist", "id": "b83c9cc84d38", "stars": 377, "language": "C#", "description": "Persistence by writing/reading shellcode from Event Log", "type": "tool", "pushedAt": "2022-05-27T14:52:02Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "improsec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nfp-improsec", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/72806600?v=4", "type": "User" } ] }, { "repo": "netspi/netblocktool", "name": "NetblockTool", "owner": "NetSPI", "url": "https://github.com/NetSPI/NetblockTool", "id": "d946400ab82c", "stars": 377, "language": "Python", "description": "Find netblocks owned by a company", "type": "tool", "pushedAt": "2023-08-03T16:28:15Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "venominfosec", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/46534629?v=4", "type": "User" }, { "login": "N7WEra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59871507?v=4", "type": "User" } ] }, { "repo": "synacktiv/gpoddity", "name": "GPOddity", "owner": "synacktiv", "url": "https://github.com/synacktiv/GPOddity", "id": "15905aa7bb07", "stars": 370, "language": "Python", "description": "The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).", "type": "tool", "pushedAt": "2025-12-13T14:33:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "q-roland", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "qu35t-code", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51704860?v=4", "type": "User" } ] }, { "repo": "synacktiv/nord-stream", "name": "nord-stream", "owner": "synacktiv", "url": "https://github.com/synacktiv/nord-stream", "id": "e8d9758d0b65", "stars": 367, "language": "Python", "description": "Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab.", "type": "tool", "pushedAt": "2026-07-10T10:15:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "hugo-syn", "c": 148, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "theol-syn", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/97730516?v=4", "type": "User" }, { "login": "aevy-syn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50951297?v=4", "type": "User" }, { "login": "jaybee-syn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/205203374?v=4", "type": "User" }, { "login": "lodelestra", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10141712?v=4", "type": "User" }, { "login": "BlWasp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35003340?v=4", "type": "User" }, { "login": "daddycocoaman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" }, { "login": "tetrillard-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52563961?v=4", "type": "User" } ] }, { "repo": "synacktiv/gpoparser", "name": "gpoParser", "owner": "synacktiv", "url": "https://github.com/synacktiv/gpoParser", "id": "26e8b524a34c", "stars": 366, "language": "Python", "description": "gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.", "type": "tool", "pushedAt": "2026-04-28T09:56:01Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Wilfried Bécard", "cardId": "06c1ff44c96993b0", "avatar": "https://avatars.githubusercontent.com/u/50197134?v=4", "login": "wilfried-becard" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "wilfried-becard", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/50197134?v=4", "type": "User" }, { "login": "Marshall-Hallenbeck", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1518719?v=4", "type": "User" }, { "login": "opabravo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21262207?v=4", "type": "User" }, { "login": "0xd6cb6d73", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/72226198?v=4", "type": "User" }, { "login": "realalexandergeorgiev", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/14885291?v=4", "type": "User" }, { "login": "Darktortue", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11302315?v=4", "type": "User" } ] }, { "repo": "synacktiv/eos", "name": "eos", "owner": "synacktiv", "url": "https://github.com/synacktiv/eos", "id": "e6e2e27454a2", "stars": 360, "language": "Python", "description": "Enemies Of Symfony - Debug mode Symfony looter", "type": "tool", "pushedAt": "2024-10-18T17:39:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "aevy-syn", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/50951297?v=4", "type": "User" }, { "login": "Dramelac", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10145128?v=4", "type": "User" }, { "login": "tetrillard-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/52563961?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2022-40684", "name": "CVE-2022-40684", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-40684", "id": "fd5744d518c1", "stars": 357, "language": "Python", "description": "A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager", "type": "tool", "pushedAt": "2022-10-13T15:25:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "outflanknl/ps-tools", "name": "Ps-Tools", "owner": "outflanknl", "url": "https://github.com/outflanknl/Ps-Tools", "id": "c55b2e3e7a4a", "stars": 355, "language": "C", "description": "Ps-Tools, an advanced process monitoring toolkit for offensive operations", "type": "tool", "pushedAt": "2020-12-01T13:51:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cn33liz", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" }, { "login": "stanhegt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/rdpinception", "name": "RDPInception", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/RDPInception", "id": "945877193973", "stars": 355, "language": "Batchfile", "description": "A proof of concept for the RDP Inception Attack", "type": "tool", "pushedAt": "2017-06-29T16:57:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "bishopfox/smogcloud", "name": "smogcloud", "owner": "BishopFox", "url": "https://github.com/BishopFox/smogcloud", "id": "357263103014", "stars": 351, "language": "Go", "description": "Find cloud assets that no one wants exposed 🔎 ☁️", "type": "tool", "pushedAt": "2020-07-20T20:26:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "basicScandal", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1747264?v=4", "type": "User" } ] }, { "repo": "netero1010/schedulerunner", "name": "ScheduleRunner", "owner": "netero1010", "url": "https://github.com/netero1010/ScheduleRunner", "id": "d7b94b230c60", "stars": 347, "language": "C#", "description": "A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation", "type": "tool", "pushedAt": "2025-01-22T02:06:59Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "netero1010", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "netero1010", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/81764307?v=4", "type": "User" } ] }, { "repo": "sensepost/pipetap", "name": "pipetap", "owner": "sensepost", "url": "https://github.com/sensepost/pipetap", "id": "bfa460680f3a", "stars": 342, "language": "C++", "description": "A Windows Named Pipe Multi-tool / Proxy", "type": "tool", "pushedAt": "2025-12-07T06:37:38Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "leonjza", "c": 32, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "PerfectlyFineCode", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/70201838?v=4", "type": "User" } ] }, { "repo": "optiv/registry-recon", "name": "Registry-Recon", "owner": "optiv", "url": "https://github.com/optiv/Registry-Recon", "id": "f7e2abfd68e1", "stars": 339, "language": null, "description": "Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon", "type": "tool", "pushedAt": "2022-06-06T14:39:12Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "eth3real", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19697331?v=4", "type": "User" }, { "login": "Tylous", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/linuxcatscale", "name": "LinuxCatScale", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/LinuxCatScale", "id": "199acbc83bbe", "stars": 337, "language": "Shell", "description": "Incident Response collection and processing scripts with automated reporting scripts", "type": "tool", "pushedAt": "2024-06-25T08:39:49Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "56616c6f72", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/57438904?v=4", "type": "User" }, { "login": "Mistr-R", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/19334716?v=4", "type": "User" }, { "login": "secjunkie", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/89091548?v=4", "type": "User" }, { "login": "weslambert", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/16829864?v=4", "type": "User" }, { "login": "arthomas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/247599?v=4", "type": "User" }, { "login": "NozyZy", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/60878689?v=4", "type": "User" } ] }, { "repo": "synacktiv/php_filter_chains_oracle_exploit", "name": "php_filter_chains_oracle_exploit", "owner": "synacktiv", "url": "https://github.com/synacktiv/php_filter_chains_oracle_exploit", "id": "ce96923cd30a", "stars": 335, "language": "Python", "description": "A CLI to exploit parameters vulnerable to PHP filter chain error based oracle.", "type": "tool", "pushedAt": "2024-06-02T14:19:14Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "remsio-syn", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/110113034?v=4", "type": "User" }, { "login": "cfreal", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/29797456?v=4", "type": "User" } ] }, { "repo": "outflanknl/recon-ad", "name": "Recon-AD", "owner": "outflanknl", "url": "https://github.com/outflanknl/Recon-AD", "id": "a25442ef3c83", "stars": 333, "language": "C++", "description": "Recon-AD, an AD recon tool based on ADSI and reflective DLL’s", "type": "tool", "pushedAt": "2019-10-20T21:49:39Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "outflanknl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "wavvs/nanorobeus", "name": "nanorobeus", "owner": "wavvs", "url": "https://github.com/wavvs/nanorobeus", "id": "665d091ffe30", "stars": 328, "language": "C", "description": "COFF file (BOF) for managing Kerberos tickets.", "type": "tool", "pushedAt": "2023-07-02T12:56:27Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "wavvs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "wavvs", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/30052411?v=4", "type": "User" }, { "login": "nheiniger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20835344?v=4", "type": "User" } ] }, { "repo": "improsec/improhound", "name": "ImproHound", "owner": "improsec", "url": "https://github.com/improsec/ImproHound", "id": "aa12f33c247a", "stars": 328, "language": "C#", "description": "Identify the attack paths in BloodHound breaking your AD tiering", "type": "tool", "pushedAt": "2022-11-06T19:59:08Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "improsec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Jonas Bülow Knudsen", "cardId": "321f6917880db66b", "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "login": "JonasBK" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JonasBK", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12843299?v=4", "type": "User" } ] }, { "repo": "nccgroup/shocker", "name": "shocker", "owner": "nccgroup", "url": "https://github.com/nccgroup/shocker", "id": "85e1e96a0b8e", "stars": 327, "language": "Python", "description": "A tool to find and exploit servers vulnerable to Shellshock", "type": "tool", "pushedAt": "2023-04-23T08:34:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "tfwiii", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/877400?v=4", "type": "User" }, { "login": "bcoles", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/434827?v=4", "type": "User" } ] }, { "repo": "outflanknl/excel4-dcom", "name": "Excel4-DCOM", "owner": "outflanknl", "url": "https://github.com/outflanknl/Excel4-DCOM", "id": "525a6b950db4", "stars": 326, "language": "PowerShell", "description": "PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)", "type": "tool", "pushedAt": "2019-03-26T16:01:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "stanhegt", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "sensepost/impersonate", "name": "impersonate", "owner": "sensepost", "url": "https://github.com/sensepost/impersonate", "id": "a8f70b5bff3e", "stars": 326, "language": "Python", "description": "A windows token impersonation tool", "type": "tool", "pushedAt": "2023-04-19T12:53:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Dfte", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/23189983?v=4", "type": "User" }, { "login": "leonjza", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" } ] }, { "repo": "n0kovo/fb_friend_list_scraper", "name": "fb_friend_list_scraper", "owner": "n0kovo", "url": "https://github.com/n0kovo/fb_friend_list_scraper", "id": "80aa9d16a0af", "stars": 325, "language": "Python", "description": "OSINT tool to scrape names and usernames from large friend lists on Facebook, without being rate limited.", "type": "tool", "pushedAt": "2022-12-15T15:51:31Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "n0kovo", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "n0kovo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/16690056?v=4", "type": "User" } ] }, { "repo": "outflanknl/inlinewhispers", "name": "InlineWhispers", "owner": "outflanknl", "url": "https://github.com/outflanknl/InlineWhispers", "id": "3ff7d560759b", "stars": 321, "language": "Assembly", "description": "Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)", "type": "tool", "pushedAt": "2021-11-09T15:39:27Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "outflanknl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "DaWouw", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1709023?v=4", "type": "User" }, { "login": "stanhegt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/nerva", "name": "nerva", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/nerva", "id": "1b001946eadb", "stars": 316, "language": "Go", "description": "Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian", "type": "tool", "pushedAt": "2026-07-17T15:47:58Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" }, { "name": "Matthew Jackoski", "cardId": "48359776e3d7d716", "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "login": "DS-KoolAid" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 23, "topContributors": [ { "login": "anushkavirgaonkar", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/41755334?v=4", "type": "User" }, { "login": "nsportsman", "c": 77, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "tk-praet", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/188894168?v=4", "type": "User" }, { "login": "Icarus7337", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/29873236?v=4", "type": "User" }, { "login": "maurodelossantos-praetorian", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/173078822?v=4", "type": "User" }, { "login": "aarushidwi", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/135048681?v=4", "type": "User" }, { "login": "Toreburn", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/7943612?v=4", "type": "User" }, { "login": "ryderdaniel", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/67907352?v=4", "type": "User" }, { "login": "CCushing-Praetorian", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/187333157?v=4", "type": "User" }, { "login": "carterross", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/164905970?v=4", "type": "User" }, { "login": "praetorian-rang", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/263791006?v=4", "type": "User" }, { "login": "frosales-pra", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/184157184?v=4", "type": "User" }, { "login": "gitoso", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2094672?v=4", "type": "User" }, { "login": "praetorian-peter-mueller", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/45581135?v=4", "type": "User" }, { "login": "treburn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/97044356?v=4", "type": "User" }, { "login": "hdm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1171392?v=4", "type": "User" }, { "login": "mikepiotrowski2", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/198971315?v=4", "type": "User" }, { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "rtfmkiesel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79413747?v=4", "type": "User" }, { "login": "DS-KoolAid", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "type": "User" }, { "login": "noah-tutt-praetorian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69209160?v=4", "type": "User" }, { "login": "drwtsn95", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55363177?v=4", "type": "User" }, { "login": "kost", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/68575?v=4", "type": "User" } ] }, { "repo": "osandamalith/lfifreak", "name": "LFiFreak", "owner": "OsandaMalith", "url": "https://github.com/OsandaMalith/LFiFreak", "id": "46479bf74dd0", "stars": 314, "language": "Python", "description": "A unique automated LFi Exploiter with Bind/Reverse Shells", "type": "tool", "pushedAt": "2026-07-11T21:11:11Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "OsandaMalith", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "OsandaMalith", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/4497190?v=4", "type": "User" } ] }, { "repo": "synacktiv/grouppolicybackdoor", "name": "GroupPolicyBackdoor", "owner": "synacktiv", "url": "https://github.com/synacktiv/GroupPolicyBackdoor", "id": "9359a322d797", "stars": 314, "language": "Python", "description": "Group Policy Objects manipulation and exploitation framework", "type": "tool", "pushedAt": "2025-12-07T18:05:54Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "q-roland", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "opabravo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21262207?v=4", "type": "User" } ] }, { "repo": "nccgroup/susanrtti", "name": "SusanRTTI", "owner": "nccgroup", "url": "https://github.com/nccgroup/SusanRTTI", "id": "e2342ec4c87c", "stars": 312, "language": "Python", "description": "Another RTTI Parsing IDA plugin", "type": "tool", "pushedAt": "2023-07-22T20:09:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "nguigo", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/7172387?v=4", "type": "User" }, { "login": "dyoniz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19339409?v=4", "type": "User" }, { "login": "assarbad", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3238620?v=4", "type": "User" } ] }, { "repo": "sensepost/susinternals", "name": "susinternals", "owner": "sensepost", "url": "https://github.com/sensepost/susinternals", "id": "a4c780422b78", "stars": 308, "language": "Python", "description": "psexecsvc - a python implementation of PSExec's native service implementation", "type": "tool", "pushedAt": "2026-03-24T11:42:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "Dfte", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/23189983?v=4", "type": "User" }, { "login": "singe", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "Hackndo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" }, { "login": "azoxlpf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/213314124?v=4", "type": "User" } ] }, { "repo": "bishopfox/dufflebag", "name": "dufflebag", "owner": "BishopFox", "url": "https://github.com/BishopFox/dufflebag", "id": "1c86c54c38e2", "stars": 307, "language": "Go", "description": "Search exposed EBS volumes for secrets", "type": "tool", "pushedAt": "2023-04-24T18:33:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "dan-bishopfox", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/43555923?v=4", "type": "User" } ] }, { "repo": "netspi/esc", "name": "ESC", "owner": "NetSPI", "url": "https://github.com/NetSPI/ESC", "id": "46d9910006da", "stars": 306, "language": "C#", "description": "Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was ", "type": "tool", "pushedAt": "2023-04-25T14:39:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nullbind", "c": 251, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/dragoncastle", "name": "DragonCastle", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/DragonCastle", "id": "1bd8a4f30db8", "stars": 306, "language": "C++", "description": "A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process.", "type": "tool", "pushedAt": "2022-10-26T10:19:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "dmchell", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/9010884?v=4", "type": "User" } ] }, { "repo": "netspi/gcpwn", "name": "gcpwn", "owner": "NetSPI", "url": "https://github.com/NetSPI/gcpwn", "id": "c80c87685711", "stars": 305, "language": "Python", "description": "Pentesting framework for GCP & Google Workspace that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes credential management, workspace management, exploit scripts, etc.", "type": "tool", "pushedAt": "2026-07-17T00:58:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "WebbinRoot", "c": 152, "avatar": "https://avatars.githubusercontent.com/u/74038921?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 67, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "0xBruno", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/59654121?v=4", "type": "User" } ] }, { "repo": "outflanknl/scripts", "name": "Scripts", "owner": "outflanknl", "url": "https://github.com/outflanknl/Scripts", "id": "2c3f7de2d1ca", "stars": 301, "language": "Python", "description": "Small scripts that make life better", "type": "tool", "pushedAt": "2025-01-31T14:52:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "stanhegt", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" }, { "login": "pieterceelen", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/14231759?v=4", "type": "User" }, { "login": "MarcOverIP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" }, { "login": "xychix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/307655?v=4", "type": "User" } ] }, { "repo": "fox-it/cve-2019-1040-scanner", "name": "cve-2019-1040-scanner", "owner": "fox-it", "url": "https://github.com/fox-it/cve-2019-1040-scanner", "id": "be24a38a3aaa", "stars": 301, "language": "Python", "description": "", "type": "tool", "pushedAt": "2020-11-09T07:33:12Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dirkjanm", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "dtrizna", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15322061?v=4", "type": "User" } ] }, { "repo": "initstring/uptux", "name": "uptux", "owner": "initstring", "url": "https://github.com/initstring/uptux", "id": "9ef6c99dc932", "stars": 300, "language": "Python", "description": "Linux privilege escalation checks (systemd, dbus, socket fun, etc)", "type": "tool", "pushedAt": "2019-10-02T22:11:16Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "initstring", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "initstring", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/26131150?v=4", "type": "User" } ] }, { "repo": "sensepost/wiresocks", "name": "wiresocks", "owner": "sensepost", "url": "https://github.com/sensepost/wiresocks", "id": "86daeaad34c2", "stars": 300, "language": "Shell", "description": "A sock, with a wire, so you can tunnel all you desire.", "type": "tool", "pushedAt": "2024-01-19T10:58:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "cablethief", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/7942469?v=4", "type": "User" }, { "login": "leonjza", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "nurfed1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8027846?v=4", "type": "User" } ] }, { "repo": "bishopfox/zigdiggity", "name": "zigdiggity", "owner": "BishopFox", "url": "https://github.com/BishopFox/zigdiggity", "id": "48447391cbd1", "stars": 299, "language": "Python", "description": "A ZigBee hacking toolkit by Bishop Fox", "type": "tool", "pushedAt": "2021-09-13T19:18:14Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "tastic1", "c": 24, "avatar": "https://avatars.githubusercontent.com/u/913683?v=4", "type": "User" }, { "login": "mgleason-bishopfox", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/8261165?v=4", "type": "User" }, { "login": "matt-gleason", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/70912078?v=4", "type": "User" }, { "login": "ColdBrewed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22483040?v=4", "type": "User" }, { "login": "dan-bishopfox", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/43555923?v=4", "type": "User" } ] }, { "repo": "optiv/dent", "name": "Dent", "owner": "optiv", "url": "https://github.com/optiv/Dent", "id": "0f3d9ab9be26", "stars": 297, "language": "Go", "description": "A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors. ", "type": "tool", "pushedAt": "2023-08-18T17:28:54Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Tylous", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" }, { "login": "tweathers-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/59842250?v=4", "type": "User" } ] }, { "repo": "mostaphabahadou/postenum", "name": "postenum", "owner": "mostaphabahadou", "url": "https://github.com/mostaphabahadou/postenum", "id": "7401b09b44f7", "stars": 295, "language": "Shell", "description": "A lightweight, portable, and modular tool for Linux enumeration and privilege escalation.", "type": "tool", "pushedAt": "2026-01-05T18:48:32Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "mostaphabahadou", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mostaphabahadou", "c": 125, "avatar": "https://avatars.githubusercontent.com/u/44349505?v=4", "type": "User" }, { "login": "darkcyber", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6040969?v=4", "type": "User" } ] }, { "repo": "sensepost/mallet", "name": "mallet", "owner": "sensepost", "url": "https://github.com/sensepost/mallet", "id": "c22698407eea", "stars": 292, "language": "Java", "description": "Mallet is an intercepting proxy for arbitrary protocols", "type": "tool", "pushedAt": "2025-04-14T16:58:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "RoganDawes", "c": 322, "avatar": "https://avatars.githubusercontent.com/u/159883?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 8, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "nccgroup/gtfoblookup", "name": "GTFOBLookup", "owner": "nccgroup", "url": "https://github.com/nccgroup/GTFOBLookup", "id": "162cdbac2c65", "stars": 289, "language": "Python", "description": "Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and HijackLib", "type": "tool", "pushedAt": "2023-06-16T22:01:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "NCCJC", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/144432577?v=4", "type": "User" }, { "login": "JamesConlan96", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/10931523?v=4", "type": "User" }, { "login": "lapolis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57040859?v=4", "type": "User" } ] }, { "repo": "hlldz/pickl3", "name": "pickl3", "owner": "hlldz", "url": "https://github.com/hlldz/pickl3", "id": "2e5f1162e632", "stars": 286, "language": "C++", "description": "Windows active user credential phishing tool", "type": "tool", "pushedAt": "2020-03-10T18:04:13Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "hlldz", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hlldz", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/16455559?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/brutus", "name": "brutus", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/brutus", "id": "12224a63b2d5", "stars": 286, "language": "Go", "description": "Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.", "type": "tool", "pushedAt": "2026-07-17T09:29:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "UNC1739", "c": 312, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "nsportsman", "c": 119, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 61, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "mikepiotrowski2", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/198971315?v=4", "type": "User" }, { "login": "noah-tutt-praetorian", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/69209160?v=4", "type": "User" }, { "login": "ChrisJr404", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11917633?v=4", "type": "User" }, { "login": "michaelweber", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "aashish-sec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/135348127?v=4", "type": "User" }, { "login": "jasonhernandez", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7144515?v=4", "type": "User" }, { "login": "LunaLynx12", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56796801?v=4", "type": "User" }, { "login": "ryderdaniel", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/67907352?v=4", "type": "User" }, { "login": "Ameston", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25017069?v=4", "type": "User" } ] }, { "repo": "nccgroup/depthcharge", "name": "depthcharge", "owner": "nccgroup", "url": "https://github.com/nccgroup/depthcharge", "id": "0129a996faee", "stars": 285, "language": "Python", "description": "A U-Boot hacking toolkit for security researchers and tinkerers", "type": "tool", "pushedAt": "2023-04-11T20:32:23Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jynik", "c": 174, "avatar": "https://avatars.githubusercontent.com/u/3046210?v=4", "type": "User" }, { "login": "youssefms", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35443602?v=4", "type": "User" } ] }, { "repo": "sensepost/spartan", "name": "SPartan", "owner": "sensepost", "url": "https://github.com/sensepost/SPartan", "id": "9e83157ec061", "stars": 285, "language": "Python", "description": "Frontpage and Sharepoint fingerprinting and attack tool.", "type": "tool", "pushedAt": "2021-08-08T18:45:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "TestingPens", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/11089758?v=4", "type": "User" }, { "login": "ahmedsherif", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4347574?v=4", "type": "User" }, { "login": "singe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "blackhillsinfosec/skyhook", "name": "skyhook", "owner": "blackhillsinfosec", "url": "https://github.com/blackhillsinfosec/skyhook", "id": "3a38bc6c77e0", "stars": 283, "language": "JavaScript", "description": "A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.", "type": "tool", "pushedAt": "2024-05-10T16:37:58Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "blackhillsinfosec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ImpostorKeanu", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/11574161?v=4", "type": "User" }, { "login": "0x6d6f7468", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25512187?v=4", "type": "User" } ] }, { "repo": "netspi/wsdler", "name": "Wsdler", "owner": "NetSPI", "url": "https://github.com/NetSPI/Wsdler", "id": "13ae3ebe7b94", "stars": 282, "language": "Java", "description": "WSDL Parser extension for Burp", "type": "tool", "pushedAt": "2018-06-25T21:25:36Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "egru", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/goffloader", "name": "goffloader", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/goffloader", "id": "f903f0c50faf", "stars": 278, "language": "Go", "description": "A Go implementation of Cobalt Strike style BOF/COFF loaders.", "type": "tool", "pushedAt": "2026-06-24T20:21:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Cas van Cooten", "cardId": "b91b1832c32965dc", "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "login": "chvancooten" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "michaelweber", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "chvancooten", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25614522?v=4", "type": "User" } ] }, { "repo": "outflanknl/edr-internals", "name": "edr-internals", "owner": "outflanknl", "url": "https://github.com/outflanknl/edr-internals", "id": "aec4802cb3d5", "stars": 278, "language": "C++", "description": "Tools for analyzing EDR agents", "type": "tool", "pushedAt": "2024-06-10T10:59:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "nettitude/prowl", "name": "Prowl", "owner": "nettitude", "url": "https://github.com/nettitude/Prowl", "id": "9b9b72fb455d", "stars": 278, "language": "Python", "description": "", "type": "tool", "pushedAt": "2020-06-01T17:03:13Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "Pickfordmatt", "c": 163, "avatar": "https://avatars.githubusercontent.com/u/3343862?v=4", "type": "User" }, { "login": "MattPickford", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/7015277?v=4", "type": "User" }, { "login": "exploitprotocol", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4075832?v=4", "type": "User" }, { "login": "sudosammy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18524051?v=4", "type": "User" }, { "login": "strawp", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/548565?v=4", "type": "User" }, { "login": "Green-Wolf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13748150?v=4", "type": "User" }, { "login": "asadciit015", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19165270?v=4", "type": "User" }, { "login": "west-wind", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32312003?v=4", "type": "User" }, { "login": "daleruane", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5051102?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/trudy", "name": "trudy", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/trudy", "id": "e72532320e7b", "stars": 277, "language": "Go", "description": "A transparent proxy that can modify and drop traffic for arbitrary TCP connections.", "type": "tool", "pushedAt": "2019-09-16T19:26:11Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "kelbyludwig", "c": 130, "avatar": "https://avatars.githubusercontent.com/u/3527248?v=4", "type": "User" }, { "login": "willnix", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/807270?v=4", "type": "User" } ] }, { "repo": "outflanknl/findobjects-bof", "name": "FindObjects-BOF", "owner": "outflanknl", "url": "https://github.com/outflanknl/FindObjects-BOF", "id": "fea102dc3345", "stars": 274, "language": null, "description": "A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.", "type": "tool", "pushedAt": "2023-05-03T19:52:08Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "outflanknl", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "synacktiv/sccmsecrets", "name": "SCCMSecrets", "owner": "synacktiv", "url": "https://github.com/synacktiv/SCCMSecrets", "id": "817a41e66e26", "stars": 273, "language": "Python", "description": "SCCMSecrets.py aims at exploiting SCCM policies distribution for credentials harvesting, initial access and lateral movement.", "type": "tool", "pushedAt": "2025-11-22T16:38:11Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "q-roland", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" }, { "login": "idem-s1n", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/99683413?v=4", "type": "User" } ] }, { "repo": "synacktiv/dcomillusionist", "name": "DCOMIllusionist", "owner": "synacktiv", "url": "https://github.com/synacktiv/DCOMIllusionist", "id": "939c4ecb76f8", "stars": 272, "language": "C#", "description": "DCOM in memory and fileless lateral movement techniques through .Net deserilization", "type": "tool", "pushedAt": "2026-06-22T11:09:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hugo-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "Jah-yee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/166608075?v=4", "type": "User" } ] }, { "repo": "synacktiv/octoscan", "name": "octoscan", "owner": "synacktiv", "url": "https://github.com/synacktiv/octoscan", "id": "18fa1a3a6330", "stars": 271, "language": "Go", "description": "Octoscan is a static vulnerability scanner for GitHub action workflows.", "type": "tool", "pushedAt": "2026-03-30T08:24:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "hugo-syn", "c": 114, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "bboilot-ledger", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/159285987?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 3, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "Hug0Vincent", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24389392?v=4", "type": "User" }, { "login": "johnbillion", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/208434?v=4", "type": "User" }, { "login": "szepeviktor", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/952007?v=4", "type": "User" } ] }, { "repo": "boku7/x64win-addrdpadminshellcode", "name": "x64win-addrdpadminshellcode", "owner": "boku7", "url": "https://github.com/boku7/x64win-AddRdpAdminShellcode", "stars": 38, "language": "Assembly", "description": "64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & \"Remote Desktop Users\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "894e11511b19", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-05-03T03:48:50Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "ropnop/pentest_charts", "name": "pentest_charts", "owner": "ropnop", "url": "https://github.com/ropnop/pentest_charts", "id": "5b034566d6d1", "stars": 38, "language": "Smarty", "description": "Some helpful Helm Charts for pentesters", "type": "tool", "pushedAt": "2019-01-28T04:25:17Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Ronnie Flathers", "cardId": "f5fc66d044c33b69", "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ropnop", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/2555506?v=4", "type": "User" } ] }, { "repo": "struppigel/jwscan", "name": "jwscan", "owner": "struppigel", "url": "https://github.com/struppigel/JWScan", "stars": 37, "language": "Scala", "description": "Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karsten Hahn", "cardId": "2c4963b333ad77b5", "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec25effc8be8", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2015-06-16T15:52:07Z", "archived": false, "topContributors": [] }, { "repo": "pry0cc/nahamcon-axiom-demo-2021", "name": "nahamcon-axiom-demo-2021", "owner": "pry0cc", "url": "https://github.com/pry0cc/nahamcon-axiom-demo-2021", "stars": 37, "language": "Shell", "description": "The commands and scripts I used in the Live Recon Village talks", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0d8b06ebc8ed", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-03-14T20:44:15Z", "archived": false, "topContributors": [] }, { "repo": "seifreed/curlwright", "name": "curlwright", "owner": "seifreed", "url": "https://github.com/seifreed/Curlwright", "stars": 37, "language": "Python", "description": "CurlWright is a Cloudflare bypass tool that leverages Playwright to execute curl commands with full browser capabilities, allowing you to access protected websites seamlessly.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8d34723e96b0", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-28T11:44:19Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 83, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "datalux/esp8266-deauther", "name": "esp8266-deauther", "owner": "Datalux", "url": "https://github.com/Datalux/esp8266-deauther", "id": "3db20e44d8b9", "stars": 37, "language": "C++", "description": "A simple WiFi deauther for ESP8266", "type": "tool", "pushedAt": "2020-10-26T08:25:27Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Giuseppe Criscione", "cardId": "26e85b3e45120301", "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Datalux", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4", "type": "User" } ] }, { "repo": "pry0cc/gorgo", "name": "gorgo", "owner": "pry0cc", "url": "https://github.com/pry0cc/gorgo", "id": "c17f684d0328", "stars": 37, "language": "Python", "description": "A multi-threaded password sprayer based on Medusa, built for distributed spraying.", "type": "tool", "pushedAt": "2021-10-17T16:02:44Z", "archived": false, "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "pry0cc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" } ] }, { "repo": "x90skysn3k/rdpscraper", "name": "rdpscraper", "owner": "x90skysn3k", "url": "https://github.com/x90skysn3k/rdpscraper", "id": "9aa451f5b5d3", "stars": 37, "language": "Python", "description": "Enumerates users based off RDP Screenshots", "type": "tool", "pushedAt": "2023-10-25T21:17:52Z", "archived": false, "lanes": [ "2" ], "author": { "name": "x90sky", "cardId": "806ba40e989ce0b0", "avatar": "https://avatars.githubusercontent.com/u/22178125?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "wh1t3rh1n0/slackenum", "name": "SlackEnum", "owner": "Wh1t3Rh1n0", "url": "https://github.com/Wh1t3Rh1n0/SlackEnum", "id": "bd17f8e40df1", "stars": 37, "language": "Python", "description": "A user enumeration tool for Slack.", "type": "tool", "pushedAt": "2024-06-10T13:54:28Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Wh1t3Rh1n0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4", "type": "User" } ] }, { "repo": "joasasantos/phishletgenerator-evilginx", "name": "PhishletGenerator-Evilginx", "owner": "JoasASantos", "url": "https://github.com/JoasASantos/PhishletGenerator-Evilginx", "id": "a5e831484de5", "stars": 37, "language": "Python", "description": "", "type": "tool", "pushedAt": "2026-02-09T22:20:18Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JoasASantos", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "soxoj/commipiste", "name": "commipiste", "owner": "soxoj", "url": "https://github.com/soxoj/CommiPiste", "stars": 35, "language": "Python", "description": "OSINT tool for precise version fingerprinting of open-source web software", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6f73beb28e09", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-13T12:39:37Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" } ] }, { "repo": "epi052/rustdsplit", "name": "rustdsplit", "owner": "epi052", "url": "https://github.com/epi052/rustdsplit", "stars": 35, "language": "Rust", "description": "At some point, I learned about a method to perform a binary search on a file in order to identify its AV signature and change it to bypass signature-based AV. The tool I used back then is gone, so I ", "type": "tool", "lanes": [ "2" ], "author": { "name": "epi", "cardId": "1a8123600b5d19dd", "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fa6fde1bd7d0", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-03T01:10:55Z", "archived": false, "topContributors": [ { "login": "epi052", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/43392618?v=4", "type": "User" } ] }, { "repo": "hacksysteam/exploitreliabilitytestingsystem", "name": "exploitreliabilitytestingsystem", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/ExploitReliabilityTestingSystem", "stars": 35, "language": "Python", "description": "Exploit Reliability Testing System", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "28253d22a8d8", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-04-24T13:35:21Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "x86matthew/instrumentationcallbacksyscalllogger", "name": "instrumentationcallbacksyscalllogger", "owner": "x86matthew", "url": "https://github.com/x86matthew/InstrumentationCallbackSyscallLogger", "stars": 35, "language": "C++", "description": "A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.", "type": "tool", "lanes": [ "2" ], "author": { "name": "x86matthew", "cardId": "778d86f63e000c60", "avatar": "https://avatars.githubusercontent.com/u/111854665?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "da7413209379", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-06T17:26:31Z", "archived": false, "topContributors": [ { "login": "x86matthew", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/111854665?v=4", "type": "User" } ] }, { "repo": "win3zz/cve-2026-1731", "name": "cve-2026-1731", "owner": "win3zz", "url": "https://github.com/win3zz/CVE-2026-1731", "stars": 35, "language": "Python", "description": "CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash arithmetic evaluation in a WebSocket-reachable script", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "81f9c292f296", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-11T12:46:15Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "herrcore/cmddesktopswitch", "name": "cmddesktopswitch", "owner": "herrcore", "url": "https://github.com/herrcore/CmdDesktopSwitch", "stars": 35, "language": "C++", "description": "CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.", "type": "tool", "lanes": [ "2" ], "author": { "name": "herrcore", "cardId": "d49bf53a4d35af6a", "avatar": "https://avatars.githubusercontent.com/u/5906222?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f1b3070eb2d", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-27T19:44:45Z", "archived": false, "topContributors": [ { "login": "herrcore", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5906222?v=4", "type": "User" } ] }, { "repo": "octoberfest7/proxy_egress_persistence", "name": "Proxy_Egress_Persistence", "owner": "Octoberfest7", "url": "https://github.com/Octoberfest7/Proxy_Egress_Persistence", "id": "93a768ce0b58", "stars": 35, "language": null, "description": "A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies", "type": "tool", "pushedAt": "2022-09-15T20:07:48Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Octoberfest7", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "xdrew87/echos", "name": "echos", "owner": "xdrew87", "url": "https://github.com/xdrew87/Echos", "stars": 34, "language": "Rust", "description": "Echos is a stealthy C2 traffic emulator built in Rust for Red Teamers. It simulates adversarial beaconing patterns and custom jitter to test EDR/NDR detection logic. Ideal for validating network secur", "type": "tool", "lanes": [ "2" ], "author": { "name": "galmx", "cardId": "ae042dfcf13309bc", "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b0ee17c8734a", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 91, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-02T15:32:28Z", "archived": false, "topContributors": [ { "login": "xdrew87", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "zigoo0/ms15-034", "name": "ms15-034", "owner": "zigoo0", "url": "https://github.com/zigoo0/MS15-034", "stars": 34, "language": "Python", "description": "POC MS15-034", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ahmed Zayed (Zigoo0)", "cardId": "76eca05f315563a7", "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a328701e5b2b", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2015-04-28T20:18:47Z", "archived": false, "topContributors": [ { "login": "zigoo0", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4", "type": "User" } ] }, { "repo": "0x0smilex/smilex-eye", "name": "smilex-eye", "owner": "0x0smilex", "url": "https://github.com/0x0smilex/Smilex-Eye", "stars": 34, "language": "Python", "description": "Smilex-Eye is a high-speed, advanced OSINT suite that bridges the gap between raw global internet data and actionable security intelligence. Designed for Red Teams and professional researchers, the Ul", "type": "tool", "lanes": [ "2" ], "author": { "name": "0x0smilex", "cardId": "9ba8f9d467dec4c4", "avatar": "https://avatars.githubusercontent.com/u/125183111?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "091371d7b505", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-25T14:26:32Z", "archived": false, "topContributors": [ { "login": "0x0smilex", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/125183111?v=4", "type": "User" } ] }, { "repo": "hacksysteam/android-injector", "name": "android-injector", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/android-injector", "id": "425c03a92ab8", "stars": 34, "language": "C", "description": "Android Shared Object Injector", "type": "tool", "pushedAt": "2021-01-07T13:38:46Z", "archived": false, "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hacksysteam", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "rek7/madlib", "name": "madlib", "owner": "rek7", "url": "https://github.com/rek7/madlib", "stars": 33, "language": "Python", "description": "PAM Backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a5edbe8444f4", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2023-03-29T03:54:31Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" }, { "login": "Pascal-0x90", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35417308?v=4", "type": "User" } ] }, { "repo": "frkngksl/exporthider", "name": "exporthider", "owner": "frkngksl", "url": "https://github.com/frkngksl/ExportHider", "stars": 33, "language": "C++", "description": "ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "981d047fa39f", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-12T16:54:49Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/brothervulnerabilities", "name": "brothervulnerabilities", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/BrotherVulnerabilities", "stars": 31, "language": "Ruby", "description": "Multiple Brother Devices: Multiple Vulnerabilities (CVE-2024-51977, CVE-2024-51978, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51983, CVE-2024-51984)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6cd26e1d8fbe", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-30T10:25:19Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "soxoj/information-disclosure-writeups-and-pocs", "name": "information-disclosure-writeups-and-pocs", "owner": "soxoj", "url": "https://github.com/soxoj/information-disclosure-writeups-and-pocs", "stars": 31, "language": "PHP", "description": "The list of write-ups, articles, and PoC of various interesting in context of OSINT", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4ea787e3bcae", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-13T10:48:56Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" } ] }, { "repo": "timmisiak/condbgx", "name": "condbgx", "owner": "timmisiak", "url": "https://github.com/TimMisiak/ConDbgX", "stars": 31, "language": "C#", "description": "A console debugger using DbgX and Terminal.Gui", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Misiak", "cardId": "65b09d2324bf2680", "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "873eb86d3fea", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2022-10-12T05:49:38Z", "archived": false, "topContributors": [] }, { "repo": "wh04m1001/zonealarmlpe", "name": "zonealarmlpe", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/ZoneAlarmLPE", "stars": 31, "language": "C++", "description": "Exploit for LPE in ZoneAlarm Antivirus/Firewall", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "585ee8d6bbc9", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-25T20:24:53Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "azeria-labs/arm-firmware-emulation", "name": "arm-firmware-emulation", "owner": "azeria-labs", "url": "https://github.com/azeria-labs/Arm-firmware-emulation", "stars": 31, "language": "Shell", "description": "Script for emulating Arm firmware in QEMU, including a binary for hooking functions for certain Tenda firmware versions that are not straight-forward to emulate.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Azeria Labs", "cardId": "aa8e352b7d703f13", "avatar": "https://avatars.githubusercontent.com/u/26645463?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cc8cf579f71e", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-23T22:52:57Z", "archived": false, "topContributors": [ { "login": "azeria-labs", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26645463?v=4", "type": "User" } ] }, { "repo": "joasasantos/phishing-opsec", "name": "Phishing-OpSec", "owner": "JoasASantos", "url": "https://github.com/JoasASantos/Phishing-OpSec", "id": "8bd2565a0afe", "stars": 31, "language": null, "description": "", "type": "tool", "pushedAt": "2025-06-18T15:54:14Z", "archived": false, "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JoasASantos", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "1zrr4h/cve-2021-26084", "name": "cve-2021-26084", "owner": "1zrr4h", "url": "https://github.com/1ZRR4H/CVE-2021-26084", "stars": 30, "language": null, "description": "Atlassian Confluence CVE-2021-26084 one-liner mass checker", "type": "tool", "lanes": [ "2" ], "author": { "name": "Germán Fernández", "cardId": "4ed6194fa94d83bb", "avatar": "https://avatars.githubusercontent.com/u/42696639?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b49a77b9aa92", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-07T12:59:45Z", "archived": false, "topContributors": [ { "login": "1ZRR4H", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/42696639?v=4", "type": "User" } ] }, { "repo": "rek7/ddoor", "name": "ddoor", "owner": "rek7", "url": "https://github.com/rek7/ddoor", "stars": 30, "language": "C++", "description": "DDoor - cross platform backdoor using dns txt records", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4b98e9b69238", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-27T15:30:27Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2022-3368", "name": "cve-2022-3368", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2022-3368", "stars": 29, "language": "C", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "990f02a82a5d", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-18T09:30:55Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "zigoo0/fortigate-rce-backdoor", "name": "fortigate-rce-backdoor", "owner": "zigoo0", "url": "https://github.com/zigoo0/Fortigate-RCE-Backdoor", "stars": 28, "language": "Python", "description": "This is a POC for the Fortigate OS Backdoor found in version 4.x up to 5.0.7", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ahmed Zayed (Zigoo0)", "cardId": "76eca05f315563a7", "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d44bd174da9", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-01-13T11:27:46Z", "archived": false, "topContributors": [ { "login": "zigoo0", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7282081?v=4", "type": "User" } ] }, { "repo": "0xsha/zombievpn", "name": "zombievpn", "owner": "0xsha", "url": "https://github.com/0xsha/ZombieVPN", "stars": 28, "language": "Python", "description": "CVE-2020-12828 PoC and Analysis. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsha", "cardId": "df2469ad581b3713", "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5ebfa88eb125", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-06-30T16:03:35Z", "archived": false, "topContributors": [ { "login": "0xsha", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4", "type": "User" } ] }, { "repo": "m4yfly/0bscan", "name": "0bscan", "owner": "m4yfly", "url": "https://github.com/m4yfly/0bscan", "stars": 27, "language": "Python", "description": "A custom web vulnerability scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cyril Servières", "cardId": "48ea7a2ab975e911", "avatar": "https://avatars.githubusercontent.com/u/39006839?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ef5c36472a9", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-11-17T10:05:51Z", "archived": false, "topContributors": [ { "login": "m4yfly", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39006839?v=4", "type": "User" } ] }, { "repo": "rek7/zimbra-rce", "name": "zimbra-rce", "owner": "rek7", "url": "https://github.com/rek7/Zimbra-RCE", "stars": 27, "language": "Python", "description": "Zimbra RCE PoC - CVE-2019-9670 XXE/SSRF", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8db783eeb0e4", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-08-16T05:54:16Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "joasasantos/imgpayload", "name": "imgpayload", "owner": "joasasantos", "url": "https://github.com/JoasASantos/ImgPayload", "stars": 27, "language": "Python", "description": "Advanced shellcode injector for images supports BMP, GIF, EXIF (JPEG), and LSB (PNG) techniques. Includes XOR encoding, offset indexing, and stealth payload delivery.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5cbcd4b810b5", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-11T01:02:54Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "joasasantos/offensive-mcp-ai", "name": "offensive-mcp-ai", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Offensive-MCP-AI", "stars": 27, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64851dc1c236", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-12T19:14:30Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/cve-2026-0257", "name": "cve-2026-0257", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2026-0257", "stars": 26, "language": "Python", "description": "Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1912a68044b6", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-29T14:29:53Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "citizenlab/vuln-disclosures", "name": "vuln-disclosures", "owner": "citizenlab", "url": "https://github.com/citizenlab/vuln-disclosures", "stars": 26, "language": null, "description": "This repository contains information related to vulnerability disclosures done by the Citizen Lab.", "type": "tool", "lanes": [ "2" ], "author": { "name": "The Citizen Lab", "cardId": "6142637c21dfc0ad", "avatar": "https://avatars.githubusercontent.com/u/5658700?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3f37ecd0cd7c", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-19T15:59:47Z", "archived": false, "topContributors": [ { "login": "jakubd", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6005010?v=4", "type": "User" } ] }, { "repo": "4osp3l/redirh4x", "name": "redirh4x", "owner": "4osp3l", "url": "https://github.com/4osp3l/RedirH4x", "stars": 26, "language": "Python", "description": "A python-based vulnerability scanner designed to identify open redirect flaws in website applications.", "type": "tool", "lanes": [ "2" ], "author": { "name": "4osp3l", "cardId": "6612479a39124d6e", "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7d5a04a30f01", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-15T01:25:39Z", "archived": false, "topContributors": [ { "login": "4osp3l", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4", "type": "User" } ] }, { "repo": "wh04m1001/zonealarmeop", "name": "zonealarmeop", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/ZoneAlarmEoP", "stars": 26, "language": "C++", "description": "Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "aababcebda0a", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-26T11:21:42Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "reversinglabs/rl-protect-skills", "name": "rl-protect-skills", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/rl-protect-skills", "stars": 26, "language": "Python", "description": "Claude Code skills for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violations before they enter your project.", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "32e37a82e4e3", "score": 15, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-21T09:37:11Z", "archived": false, "topContributors": [ { "login": "rl-maartenb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/131449090?v=4", "type": "User" } ] }, { "repo": "hoto/jenkins-credentials-decryptor", "name": "jenkins-credentials-decryptor", "owner": "hoto", "url": "https://github.com/hoto/jenkins-credentials-decryptor", "stars": 208, "language": "Go", "description": "Command line tool for dumping Jenkins credentials.", "type": "tool", "lanes": [ "1" ], "author": { "name": "hoto", "cardId": null }, "referencedBy": [ { "url": "https://0xdf.gitlab.io/2025/08/05/htb-build.html", "title": "HTB: Build", "person": "0xdf" }, { "url": "https://0xdf.gitlab.io/2022/02/28/htb-object.html", "title": "HTB: Object", "person": "0xdf" } ], "referencedCount": 2, "id": "9cec78ded444", "score": 14, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2024-08-17T10:52:10Z", "archived": false, "topContributors": [ { "login": "hoto", "c": 80, "avatar": "https://avatars.githubusercontent.com/u/3105832?v=4", "type": "User" }, { "login": "rbjorklin", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1704798?v=4", "type": "User" }, { "login": "Alvaro-Campesino", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/57360851?v=4", "type": "User" }, { "login": "lafrenierejm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11155300?v=4", "type": "User" }, { "login": "Mikopet", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4664202?v=4", "type": "User" }, { "login": "graygnuorg", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6972979?v=4", "type": "User" } ] }, { "repo": "betrusted-io/betrusted-wiki", "name": "betrusted-wiki", "owner": "betrusted-io", "url": "https://github.com/betrusted-io/betrusted-wiki", "stars": 189, "language": null, "description": "Looking for docs on Precursor/Betrusted? Start here.", "type": "tool", "lanes": [ "1" ], "author": { "name": "betrusted-io", "cardId": null }, "referencedBy": [ { "url": "https://www.bunniestudios.com/blog/2020/introducing-precursor/", "title": "Introducing Precursor « bunnie's blog", "person": "bunnie Huang" }, { "url": "https://www.bunniestudios.com/blog/2022/the-plausibly-deniable-database-pddb/", "title": "The Plausibly Deniable DataBase (PDDB) « bunnie's blog", "person": "bunnie Huang" } ], "referencedCount": 2, "id": "79b27c1f4047", "score": 14, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "bunnie Huang", "cardId": "1c63f6fc164aff29", "avatar": "https://avatars.githubusercontent.com/u/1168375?v=4", "login": "bunnie" } ], "pushedAt": "2021-04-22T08:37:08Z", "archived": false, "topContributors": [ { "login": "bunnie", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1168375?v=4", "type": "User" }, { "login": "obra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45416?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2021-21972", "name": "CVE-2021-21972", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2021-21972", "id": "2bfbdec2106f", "stars": 270, "language": "Python", "description": "Proof of Concept Exploit for vCenter CVE-2021-21972", "type": "tool", "pushedAt": "2021-02-25T16:05:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mr-sparkles-h3", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "tonyph3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/79593883?v=4", "type": "User" } ] }, { "repo": "nccgroup/keimpx", "name": "keimpx", "owner": "nccgroup", "url": "https://github.com/nccgroup/keimpx", "id": "04cba99c0216", "stars": 268, "language": "Python", "description": "Check for valid credentials across a network over SMB", "type": "tool", "pushedAt": "2024-01-05T17:59:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "bdamele", "c": 165, "avatar": "https://avatars.githubusercontent.com/u/675322?v=4", "type": "User" }, { "login": "NEXUS2345", "c": 126, "avatar": "https://avatars.githubusercontent.com/u/4030870?v=4", "type": "User" }, { "login": "stamparm", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/921555?v=4", "type": "User" }, { "login": "deed02392", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3536087?v=4", "type": "User" }, { "login": "dependabot-preview[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/2141?v=4", "type": "Bot" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "horizon3ai/cve-2022-39952", "name": "CVE-2022-39952", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-39952", "id": "910b38c66c01", "stars": 265, "language": "Python", "description": "POC for CVE-2022-39952", "type": "tool", "pushedAt": "2023-02-25T08:52:03Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "ztgrace/sticky_keys_hunter", "name": "sticky_keys_hunter", "owner": "ztgrace", "url": "https://github.com/ztgrace/sticky_keys_hunter", "id": "619d251a6836", "stars": 263, "language": "Shell", "description": "A script to test an RDP host for sticky keys and utilman backdoor.", "type": "tool", "pushedAt": "2016-09-12T02:12:30Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "ztgrace", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ztgrace", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/2554037?v=4", "type": "User" }, { "login": "linuz", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1454676?v=4", "type": "User" } ] }, { "repo": "netspi/aws_consoler", "name": "aws_consoler", "owner": "NetSPI", "url": "https://github.com/NetSPI/aws_consoler", "id": "a4f2dce1cfd9", "stars": 262, "language": "Python", "description": "A utility to convert your AWS CLI credentials into AWS console access.", "type": "tool", "pushedAt": "2020-05-07T21:50:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "aph3rson", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/838916?v=4", "type": "User" } ] }, { "repo": "nettitude/etwhash", "name": "ETWHash", "owner": "nettitude", "url": "https://github.com/nettitude/ETWHash", "id": "3a16e982a414", "stars": 262, "language": "C#", "description": "C# POC to extract NetNTLMv1/v2 hashes from ETW provider", "type": "tool", "pushedAt": "2023-05-10T06:45:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "leftp", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9055652?v=4", "type": "User" } ] }, { "repo": "b4rtik/sharpminidump", "name": "SharpMiniDump", "owner": "b4rtik", "url": "https://github.com/b4rtik/SharpMiniDump", "id": "100e24e6f68e", "stars": 260, "language": "C#", "description": "Create a minidump of the LSASS process from memory", "type": "tool", "pushedAt": "2022-11-02T15:47:30Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "b4rtik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "b4rtik", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/2039307?v=4", "type": "User" } ] }, { "repo": "tarlogicsecurity/tickey", "name": "tickey", "owner": "TarlogicSecurity", "url": "https://github.com/TarlogicSecurity/tickey", "id": "377d9e828373", "stars": 259, "language": "C", "description": "Tool to extract Kerberos tickets from Linux kernel keys.", "type": "tool", "pushedAt": "2019-05-28T15:08:06Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "TarlogicSecurity", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "TarlogicSecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6975054?v=4", "type": "User" } ] }, { "repo": "optiv/insecureshop", "name": "InsecureShop", "owner": "optiv", "url": "https://github.com/optiv/InsecureShop", "id": "4e4713abc4c7", "stars": 259, "language": "Kotlin", "description": "An Intentionally designed Vulnerable Android Application built in Kotlin.", "type": "tool", "pushedAt": "2022-03-02T07:35:32Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hax0rgb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13043764?v=4", "type": "User" }, { "login": "Tylous", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/augustus", "name": "augustus", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/augustus", "id": "8279da9eb26e", "stars": 258, "language": "Go", "description": "LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary", "type": "tool", "pushedAt": "2026-07-17T17:22:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 13, "topContributors": [ { "login": "nsportsman", "c": 81, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 47, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "praetorian-farida", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/160550853?v=4", "type": "User" }, { "login": "anushkavirgaonkar", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/41755334?v=4", "type": "User" }, { "login": "maurodelossantos-praetorian", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/173078822?v=4", "type": "User" }, { "login": "mikepiotrowski2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/198971315?v=4", "type": "User" }, { "login": "blayne", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/133942?v=4", "type": "User" }, { "login": "EvanLeleux", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/85642615?v=4", "type": "User" }, { "login": "maneelmodi", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/22002990?v=4", "type": "User" }, { "login": "realslimsud0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105659843?v=4", "type": "User" }, { "login": "hunterverhelst", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/30808586?v=4", "type": "User" }, { "login": "Tanq16", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37408906?v=4", "type": "User" }, { "login": "winston-praetorian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/215516060?v=4", "type": "User" } ] }, { "repo": "b4rtik/atpminidump", "name": "ATPMiniDump", "owner": "b4rtik", "url": "https://github.com/b4rtik/ATPMiniDump", "id": "925ded3ae7f2", "stars": 257, "language": "C", "description": "Evading WinDefender ATP credential-theft", "type": "tool", "pushedAt": "2019-12-02T15:01:22Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "b4rtik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "uf0o", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24236867?v=4", "type": "User" }, { "login": "b4rtik", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/2039307?v=4", "type": "User" } ] }, { "repo": "redteampentesting/keycred", "name": "keycred", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/keycred", "id": "c07a42033c62", "stars": 257, "language": "Go", "description": "Generate and Manage KeyCredentialLinks", "type": "tool", "pushedAt": "2026-07-17T12:09:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rtpt-erikgeiser", "c": 45, "avatar": "https://avatars.githubusercontent.com/u/70747329?v=4", "type": "User" }, { "login": "rtpt-romankarwacik", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" } ] }, { "repo": "ghostpack/lockless", "name": "Lockless", "owner": "GhostPack", "url": "https://github.com/GhostPack/Lockless", "id": "cadf0e45954f", "stars": 256, "language": "C#", "description": "Lockless allows for the copying of locked files.", "type": "tool", "pushedAt": "2021-04-30T17:51:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "nettitude/malsccm", "name": "MalSCCM", "owner": "nettitude", "url": "https://github.com/nettitude/MalSCCM", "id": "1231f9221dcf", "stars": 256, "language": "C#", "description": "", "type": "tool", "pushedAt": "2023-09-28T17:29:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "praetorian-inc/pyshell", "name": "pyshell", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/pyshell", "id": "3b2c09116693", "stars": 255, "language": "Python", "description": "PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.", "type": "tool", "pushedAt": "2017-03-30T05:33:37Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ojensen5115", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2729228?v=4", "type": "User" } ] }, { "repo": "spiderlabs/malware-analysis", "name": "malware-analysis", "owner": "SpiderLabs", "url": "https://github.com/SpiderLabs/malware-analysis", "id": "f0349ad70714", "stars": 254, "language": "Ruby", "description": "A repository of tools and scripts related to malware analysis", "type": "tool", "pushedAt": "2016-07-29T21:08:09Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "SpiderLabs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jgrunzweig", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/492768?v=4", "type": "User" }, { "login": "shazar14", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/768586?v=4", "type": "User" } ] }, { "repo": "flangvik/cobaltbus", "name": "CobaltBus", "owner": "Flangvik", "url": "https://github.com/Flangvik/CobaltBus", "id": "92fbb3f2ae5c", "stars": 248, "language": "C#", "description": "Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus", "type": "tool", "pushedAt": "2022-02-23T20:10:04Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Flangvik", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Flangvik", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/23613997?v=4", "type": "User" }, { "login": "FlangvikOld", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19530801?v=4", "type": "User" } ] }, { "repo": "nettitude/scrounger", "name": "scrounger", "owner": "nettitude", "url": "https://github.com/nettitude/scrounger", "id": "b8a6bde727e8", "stars": 247, "language": "Python", "description": "Mobile application testing toolkit", "type": "tool", "pushedAt": "2018-11-08T15:59:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "login": "noraj" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "rdc-nettitude", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/35304167?v=4", "type": "User" }, { "login": "noraj", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" }, { "login": "iam1980", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/101062?v=4", "type": "User" } ] }, { "repo": "nettitude/shellcodemutator", "name": "ShellcodeMutator", "owner": "nettitude", "url": "https://github.com/nettitude/ShellcodeMutator", "id": "6935d4c3e3f7", "stars": 246, "language": "Python", "description": "", "type": "tool", "pushedAt": "2022-12-16T11:56:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "riskydissonance", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/regpwn", "name": "RegPwn", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/RegPwn", "id": "b71fac937bc1", "stars": 245, "language": "C#", "description": "", "type": "tool", "pushedAt": "2026-03-13T15:26:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "bishopfox/deephack", "name": "deephack", "owner": "BishopFox", "url": "https://github.com/BishopFox/deephack", "id": "192a5845c3fb", "stars": 243, "language": "Python", "description": "PoC code from DEF CON 25 presentation", "type": "tool", "pushedAt": "2018-04-18T10:08:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bmoar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5111807?v=4", "type": "User" } ] }, { "repo": "nccgroup/steppingstones", "name": "SteppingStones", "owner": "nccgroup", "url": "https://github.com/nccgroup/SteppingStones", "id": "9fd0290f2c9e", "stars": 241, "language": "Python", "description": "A Red Team Activity Hub", "type": "tool", "pushedAt": "2026-07-16T09:05:10Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "neonbunny", "c": 236, "avatar": "https://avatars.githubusercontent.com/u/6201399?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 17, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "acap4z", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12718585?v=4", "type": "User" } ] }, { "repo": "und3rf10w/external_c2_framework", "name": "external_c2_framework", "owner": "Und3rf10w", "url": "https://github.com/Und3rf10w/external_c2_framework", "id": "f84ae4004458", "stars": 240, "language": "Python", "description": "Python api for usage with cobalt strike's External C2 specification ", "type": "tool", "pushedAt": "2023-03-22T08:13:03Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Und3rf10w", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Und3rf10w", "c": 140, "avatar": "https://avatars.githubusercontent.com/u/3812012?v=4", "type": "User" }, { "login": "paralax", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5619153?v=4", "type": "User" } ] }, { "repo": "fox-it/dissect.cstruct_legacy", "name": "dissect.cstruct_legacy", "owner": "fox-it", "url": "https://github.com/fox-it/dissect.cstruct_legacy", "id": "201d487dd14d", "stars": 240, "language": "Python", "description": "A no-nonsense c-like structure parsing library for Python", "type": "tool", "pushedAt": "2022-07-14T08:52:36Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "Schamper", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1254028?v=4", "type": "User" }, { "login": "fox-srt", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9809789?v=4", "type": "User" }, { "login": "Beercow", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10360919?v=4", "type": "User" }, { "login": "talhaHavadar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6908462?v=4", "type": "User" }, { "login": "pyrco", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105293448?v=4", "type": "User" } ] }, { "repo": "cerbersec/killdefenderbof", "name": "KillDefenderBOF", "owner": "Cerbersec", "url": "https://github.com/Cerbersec/KillDefenderBOF", "id": "1a0d11576f06", "stars": 236, "language": "C", "description": "Beacon Object File PoC implementation of KillDefender", "type": "tool", "pushedAt": "2022-04-12T17:45:50Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Cerbersec", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cerbersec", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/58052983?v=4", "type": "User" }, { "login": "ScriptIdiot", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/21979646?v=4", "type": "User" } ] }, { "repo": "belane/linux-soft-exploit-suggester", "name": "linux-soft-exploit-suggester", "owner": "belane", "url": "https://github.com/belane/linux-soft-exploit-suggester", "id": "f941c89a4d14", "stars": 236, "language": "Python", "description": "Search Exploitable Software on Linux", "type": "tool", "pushedAt": "2023-04-14T16:36:05Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "belane", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "belane", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/17031267?v=4", "type": "User" }, { "login": "davidtavarez", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/337107?v=4", "type": "User" }, { "login": "72Zn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/767771?v=4", "type": "User" } ] }, { "repo": "netspi/bof-pe", "name": "BOF-PE", "owner": "NetSPI", "url": "https://github.com/NetSPI/BOF-PE", "id": "92f06f5bfd58", "stars": 234, "language": "C++", "description": "An example reference design for a proposed BOF PE", "type": "tool", "pushedAt": "2026-01-23T13:31:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ceri Coburn", "cardId": "7a7966876581f34b", "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "login": "CCob" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "CCob", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3064210?v=4", "type": "User" }, { "login": "chryzsh", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2836099?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2021-38647", "name": "CVE-2021-38647", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2021-38647", "id": "8ffb63ea971e", "stars": 233, "language": "Python", "description": "Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)", "type": "tool", "pushedAt": "2021-09-16T10:39:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "scopedsecurity", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2022-1388", "name": "CVE-2022-1388", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-1388", "id": "37c4a06ce3be", "stars": 230, "language": "Python", "description": "POC for CVE-2022-1388", "type": "tool", "pushedAt": "2022-05-09T20:52:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "signorrayan", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/40915850?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "bishopfox/cve-2023-3519", "name": "CVE-2023-3519", "owner": "BishopFox", "url": "https://github.com/BishopFox/CVE-2023-3519", "id": "2748a3fbf195", "stars": 228, "language": "Python", "description": "RCE exploit for CVE-2023-3519", "type": "tool", "pushedAt": "2023-08-23T16:27:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bf-ryan", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/132302799?v=4", "type": "User" } ] }, { "repo": "cillian-collins/dirscraper", "name": "dirscraper", "owner": "Cillian-Collins", "url": "https://github.com/Cillian-Collins/dirscraper", "id": "799dff5b2828", "stars": 227, "language": "Python", "description": "OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website.", "type": "tool", "pushedAt": "2019-02-24T12:22:47Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "Cillian-Collins", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cillian-Collins", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/25750542?v=4", "type": "User" }, { "login": "Tuhinshubhra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/28696468?v=4", "type": "User" } ] }, { "repo": "nettitude/aladdin", "name": "Aladdin", "owner": "nettitude", "url": "https://github.com/nettitude/Aladdin", "id": "1a8d836ee405", "stars": 226, "language": "C#", "description": "", "type": "tool", "pushedAt": "2023-10-22T09:15:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "leftp", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/9055652?v=4", "type": "User" }, { "login": "benpturner", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "GKNSB", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1114924?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/doublepulsar-c2-traffic-decryptor", "name": "doublepulsar-c2-traffic-decryptor", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/doublepulsar-c2-traffic-decryptor", "id": "d81b42a45e45", "stars": 225, "language": "Python", "description": "A python2 script for processing a PCAP file to decrypt C2 traffic sent to DOUBLEPULSAR implant", "type": "tool", "pushedAt": "2017-04-17T21:08:34Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "bishopfox/rickmote", "name": "rickmote", "owner": "BishopFox", "url": "https://github.com/BishopFox/rickmote", "id": "e4c1a6eae787", "stars": 224, "language": "Python", "description": "The Rickmote Controller: Hijack TVs using Google Chromecast", "type": "tool", "pushedAt": "2020-02-04T18:10:27Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dan-bishopfox", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/43555923?v=4", "type": "User" }, { "login": "mb1689", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1440576?v=4", "type": "User" } ] }, { "repo": "netspi/sshkey-grab", "name": "sshkey-grab", "owner": "NetSPI", "url": "https://github.com/NetSPI/sshkey-grab", "id": "6a61277be6cb", "stars": 223, "language": "Python", "description": "Grab ssh keys from ssh-agent", "type": "tool", "pushedAt": "2020-03-22T00:00:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "outflanknl/zipper", "name": "Zipper", "owner": "outflanknl", "url": "https://github.com/outflanknl/Zipper", "id": "62c6947e636b", "stars": 223, "language": "C", "description": "Zipper, a CobaltStrike file and folder compression utility.", "type": "tool", "pushedAt": "2020-01-18T18:47:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Cn33liz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" } ] }, { "repo": "fox-it/mkyara", "name": "mkYARA", "owner": "fox-it", "url": "https://github.com/fox-it/mkYARA", "id": "f57828c81d9a", "stars": 220, "language": "Python", "description": "Generating YARA rules based on binary code", "type": "tool", "pushedAt": "2021-10-07T08:45:57Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jellever", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3390439?v=4", "type": "User" }, { "login": "adamprescott91", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3738889?v=4", "type": "User" } ] }, { "repo": "sensepost/wpa_sycophant", "name": "wpa_sycophant", "owner": "sensepost", "url": "https://github.com/sensepost/wpa_sycophant", "id": "e1b05202db3a", "stars": 219, "language": "C", "description": "Evil client portion of EAP relay attack", "type": "tool", "pushedAt": "2023-07-05T13:48:49Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "cablethief", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/7942469?v=4", "type": "User" }, { "login": "singe", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "netspi/javaserialkiller", "name": "JavaSerialKiller", "owner": "NetSPI", "url": "https://github.com/NetSPI/JavaSerialKiller", "id": "a21538f086f7", "stars": 218, "language": "Java", "description": "Burp extension to perform Java Deserialization Attacks", "type": "tool", "pushedAt": "2024-02-02T20:35:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "egru", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" } ] }, { "repo": "med0x2e/noamci", "name": "NoAmci", "owner": "med0x2e", "url": "https://github.com/med0x2e/NoAmci", "id": "1df2228a0f61", "stars": 217, "language": "C#", "description": "Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().", "type": "tool", "pushedAt": "2020-03-05T11:15:07Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "med0x2e", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "med0x2e", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/3585128?v=4", "type": "User" } ] }, { "repo": "sensepost/userenum", "name": "UserEnum", "owner": "sensepost", "url": "https://github.com/sensepost/UserEnum", "id": "34cab4a65bb3", "stars": 217, "language": "Python", "description": "Domain user enumeration tool", "type": "tool", "pushedAt": "2023-11-02T12:55:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "randomwalksp", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/34685656?v=4", "type": "User" }, { "login": "singe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "magnusstubman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1965241?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/snake", "name": "snake", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/snake", "id": "ed3ec64aecce", "stars": 217, "language": "Shell", "description": "snake - a malware storage zoo", "type": "tool", "pushedAt": "2023-07-11T16:12:15Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "alexkornitzer", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/2750747?v=4", "type": "User" }, { "login": "kennethklee", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/838810?v=4", "type": "User" } ] }, { "repo": "c0r0n3r/dheater", "name": "dheater", "owner": "c0r0n3r", "url": "https://github.com/c0r0n3r/dheater", "id": "3a5ce4b906e5", "stars": 216, "language": "Python", "description": "D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone o", "type": "tool", "pushedAt": "2026-06-13T19:43:42Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "c0r0n3r", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "c0r0n3r", "c": 74, "avatar": "https://avatars.githubusercontent.com/u/979146?v=4", "type": "User" }, { "login": "domdom82", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1755853?v=4", "type": "User" }, { "login": "ristomcgehee", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8961650?v=4", "type": "User" }, { "login": "Dmole", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1793802?v=4", "type": "User" } ] }, { "repo": "outflanknl/helpcolor", "name": "HelpColor", "owner": "outflanknl", "url": "https://github.com/outflanknl/HelpColor", "id": "849627f45a92", "stars": 215, "language": null, "description": "Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type", "type": "tool", "pushedAt": "2024-03-18T08:33:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Gill", "cardId": "e23fe7fb2b4ce7cc", "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "login": "ZephrFish" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "jmoosdijk", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/15887879?v=4", "type": "User" }, { "login": "leebaird", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/4013039?v=4", "type": "User" }, { "login": "ZephrFish", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5783068?v=4", "type": "User" }, { "login": "ImgBotApp", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31427850?v=4", "type": "User" }, { "login": "fastlorenzo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/768639?v=4", "type": "User" } ] }, { "repo": "ghostpack/restrictedadmin", "name": "RestrictedAdmin", "owner": "GhostPack", "url": "https://github.com/GhostPack/RestrictedAdmin", "id": "426f9e1b0f92", "stars": 214, "language": "C#", "description": "Remotely enables Restricted Admin Mode", "type": "tool", "pushedAt": "2021-09-03T15:58:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "fox-it/quantuminsert", "name": "quantuminsert", "owner": "fox-it", "url": "https://github.com/fox-it/quantuminsert", "id": "170e041c666d", "stars": 214, "language": "HTML", "description": "Quantum Insert", "type": "tool", "pushedAt": "2019-01-02T11:19:51Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "fox-srt", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/9809789?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/com_inject", "name": "com_inject", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/com_inject", "id": "418a0bd445c2", "stars": 212, "language": "C++", "description": "", "type": "tool", "pushedAt": "2022-04-05T14:18:56Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "dmchell", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/9010884?v=4", "type": "User" }, { "login": "mdsecactivebreach", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" } ] }, { "repo": "nettitude/tartarus-tpallocinject", "name": "Tartarus-TpAllocInject", "owner": "nettitude", "url": "https://github.com/nettitude/Tartarus-TpAllocInject", "id": "0d0f6b4d871d", "stars": 212, "language": "C++", "description": "", "type": "tool", "pushedAt": "2023-11-28T15:09:59Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "crisp0r", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2241137?v=4", "type": "User" }, { "login": "trickster0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20028117?v=4", "type": "User" } ] }, { "repo": "b3rito/yodo", "name": "yodo", "owner": "b3rito", "url": "https://github.com/b3rito/yodo", "id": "4d939a826dd0", "stars": 210, "language": "Shell", "description": "Local Privilege Escalation ", "type": "tool", "pushedAt": "2017-02-28T15:38:13Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "b3rito", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "b3rito", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/6888423?v=4", "type": "User" }, { "login": "arxenix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1356005?v=4", "type": "User" } ] }, { "repo": "bishopfox/json-interop-vuln-labs", "name": "json-interop-vuln-labs", "owner": "BishopFox", "url": "https://github.com/BishopFox/json-interop-vuln-labs", "id": "705acc0a798b", "stars": 210, "language": "Python", "description": "Companion labs to \"An Exploration of JSON Interoperability Vulnerabilities\"", "type": "tool", "pushedAt": "2023-03-09T20:41:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "the-bumble", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1927215?v=4", "type": "User" } ] }, { "repo": "netspi/django.nv", "name": "django.nV", "owner": "NetSPI", "url": "https://github.com/NetSPI/django.nV", "id": "c4a732bee270", "stars": 208, "language": "JavaScript", "description": "Vulnerable Django Application", "type": "tool", "pushedAt": "2021-11-12T07:55:33Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Ken Johnson", "cardId": "ecc8dfea4be8a0e9", "avatar": "https://avatars.githubusercontent.com/u/544667?v=4", "login": "cktricky" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 8, "topContributors": [ { "login": "cktricky", "c": 95, "avatar": "https://avatars.githubusercontent.com/u/544667?v=4", "type": "User" }, { "login": "nVisium-seth-law", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/26070531?v=4", "type": "User" }, { "login": "nafod", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/1168854?v=4", "type": "User" }, { "login": "czawora", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8885571?v=4", "type": "User" }, { "login": "spookylukey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/62745?v=4", "type": "User" }, { "login": "iffnty", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3046432?v=4", "type": "User" }, { "login": "cdorward", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8922548?v=4", "type": "User" }, { "login": "nVisium-ken-johnson", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26069405?v=4", "type": "User" } ] }, { "repo": "fortra/hw-call-stack", "name": "hw-call-stack", "owner": "fortra", "url": "https://github.com/fortra/hw-call-stack", "id": "fcc596b72b10", "stars": 206, "language": "C", "description": "Use hardware breakpoints to spoof the call stack for both syscalls and API calls", "type": "tool", "pushedAt": "2024-06-06T14:28:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "S4ntiagoP", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/93993799?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/mitm-vm", "name": "mitm-vm", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/mitm-vm", "id": "f12f07b9514f", "stars": 204, "language": "Shell", "description": "An easy-to-deploy virtual machine that can provide flexible man-in-the-middle capabilities.", "type": "tool", "pushedAt": "2016-08-29T23:34:56Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kelbyludwig", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/3527248?v=4", "type": "User" } ] }, { "repo": "synacktiv/bip", "name": "bip", "owner": "synacktiv", "url": "https://github.com/synacktiv/bip", "id": "4397a03e4011", "stars": 204, "language": "Python", "description": "", "type": "tool", "pushedAt": "2022-03-28T16:17:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Bruno Pujos", "cardId": "f1815371a798ef13", "avatar": "https://avatars.githubusercontent.com/u/28804193?v=4", "login": "BrunoPujos" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "saph-syn", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/69578600?v=4", "type": "User" }, { "login": "BrunoPujos", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/28804193?v=4", "type": "User" }, { "login": "cbayet", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8035388?v=4", "type": "User" }, { "login": "cbayet-synacktiv", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/65668981?v=4", "type": "User" }, { "login": "synacktiv-tp", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/50146304?v=4", "type": "User" }, { "login": "khiemdoan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15646249?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/gitphish", "name": "GitPhish", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/GitPhish", "id": "771ded3bcee2", "stars": 203, "language": "Python", "description": "", "type": "tool", "pushedAt": "2025-11-13T00:48:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Mason Davis", "cardId": "9e3d8baec8bf2c7e", "avatar": "https://avatars.githubusercontent.com/u/31484153?v=4", "login": "mas0nd" }, { "name": "Matthew Jackoski", "cardId": "48359776e3d7d716", "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "login": "DS-KoolAid" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "ajm4n", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/60402150?v=4", "type": "User" }, { "login": "mas0nd", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/31484153?v=4", "type": "User" }, { "login": "DS-KoolAid", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/43562993?v=4", "type": "User" } ] }, { "repo": "pkb1s/sharpallowedtoact", "name": "SharpAllowedToAct", "owner": "pkb1s", "url": "https://github.com/pkb1s/SharpAllowedToAct", "id": "f070dfe63405", "stars": 198, "language": "C#", "description": "Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)", "type": "tool", "pushedAt": "2021-02-01T10:31:43Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "pkb1s", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "pkb1s", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/25517393?v=4", "type": "User" } ] }, { "repo": "fox-it/ldapfragger", "name": "LDAPFragger", "owner": "fox-it", "url": "https://github.com/fox-it/LDAPFragger", "id": "b8654a0fc522", "stars": 198, "language": "C#", "description": "", "type": "tool", "pushedAt": "2020-03-19T10:13:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rindert-fox", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/24459322?v=4", "type": "User" }, { "login": "chravtacque", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16238257?v=4", "type": "User" } ] }, { "repo": "sensepost/jack", "name": "jack", "owner": "sensepost", "url": "https://github.com/sensepost/jack", "id": "8d043571845a", "stars": 197, "language": "CSS", "description": "Drag and Drop ClickJacking PoC development assistance tool.", "type": "tool", "pushedAt": "2020-10-01T05:29:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "jnqpblc/sharpspray", "name": "SharpSpray", "owner": "jnqpblc", "url": "https://github.com/jnqpblc/SharpSpray", "id": "ef8c2c575db4", "stars": 196, "language": "C#", "description": "SharpSpray a simple code set to perform a password spraying attack against all users of a domain using LDAP and is compatible with Cobalt Strike.", "type": "tool", "pushedAt": "2019-06-30T03:10:52Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "jnqpblc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jnqpblc", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/10349141?v=4", "type": "User" } ] }, { "repo": "belane/cloudhunter", "name": "CloudHunter", "owner": "belane", "url": "https://github.com/belane/CloudHunter", "id": "f565131c785b", "stars": 196, "language": "Python", "description": "AWS, Azure, Alibaba and Google bucket scanner", "type": "tool", "pushedAt": "2023-08-25T13:23:10Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "belane", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "belane", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/17031267?v=4", "type": "User" }, { "login": "k4u5h1k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/59250093?v=4", "type": "User" }, { "login": "0n1shi", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41312202?v=4", "type": "User" }, { "login": "zeinlol", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56702121?v=4", "type": "User" } ] }, { "repo": "lexfo/rpc2socks", "name": "rpc2socks", "owner": "lexfo", "url": "https://github.com/lexfo/rpc2socks", "id": "6b1e99c8dcf3", "stars": 193, "language": "Python", "description": "Post-exploit tool that enables a SOCKS tunnel via a Windows host using an extensible custom RPC proto over SMB through a named pipe.", "type": "tool", "pushedAt": "2021-03-04T10:01:46Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "lexfo", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "bishopfox/aimap", "name": "aimap", "owner": "BishopFox", "url": "https://github.com/BishopFox/aimap", "id": "0934e48be426", "stars": 193, "language": "Python", "description": "Discover Exposed AI Services", "type": "tool", "pushedAt": "2026-04-28T20:44:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mseelye-bishopfox", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/201645006?v=4", "type": "User" } ] }, { "repo": "outflanknl/tamperetw", "name": "TamperETW", "owner": "outflanknl", "url": "https://github.com/outflanknl/TamperETW", "id": "72a49cdd15c2", "stars": 193, "language": "C", "description": "PoC to demonstrate how CLR ETW events can be tampered.", "type": "tool", "pushedAt": "2020-03-26T20:46:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "Cn33liz", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/3835878?v=4", "type": "User" }, { "login": "stanhegt", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "fox-it/dissect.cobaltstrike", "name": "dissect.cobaltstrike", "owner": "fox-it", "url": "https://github.com/fox-it/dissect.cobaltstrike", "id": "944feeb0fa68", "stars": 190, "language": "Python", "description": "Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles", "type": "tool", "pushedAt": "2026-07-17T16:15:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "yunzheng", "c": 76, "avatar": "https://avatars.githubusercontent.com/u/468612?v=4", "type": "User" }, { "login": "drb-ra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3165532?v=4", "type": "User" }, { "login": "twiggler", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12800443?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/adfsrelay", "name": "ADFSRelay", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/ADFSRelay", "id": "3d29abc387c3", "stars": 188, "language": "Go", "description": "Proof of Concept Utilities Developed to Research NTLM Relaying Attacks Targeting ADFS", "type": "tool", "pushedAt": "2022-06-22T03:01:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "nccgroup/libslub", "name": "libslub", "owner": "nccgroup", "url": "https://github.com/nccgroup/libslub", "id": "a8824a0eb21d", "stars": 188, "language": "Python", "description": "", "type": "tool", "pushedAt": "2025-02-08T15:20:49Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "fidgetingbits", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "AntoineBlaud", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/15014470?v=4", "type": "User" }, { "login": "tesuji", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15225902?v=4", "type": "User" }, { "login": "tin-z", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32848129?v=4", "type": "User" } ] }, { "repo": "synacktiv/qlinspector", "name": "QLinspector", "owner": "synacktiv", "url": "https://github.com/synacktiv/QLinspector", "id": "14fc99d0aff3", "stars": 188, "language": "C#", "description": "Finding Java/C# gadget chains with CodeQL", "type": "tool", "pushedAt": "2026-06-22T11:08:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "Hug0Vincent", "c": 86, "avatar": "https://avatars.githubusercontent.com/u/24389392?v=4", "type": "User" }, { "login": "hugo-syn", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/61210734?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "nopnoping", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39485696?v=4", "type": "User" } ] }, { "repo": "optiv/osint_encyclopedia", "name": "OSINT_Encyclopedia", "owner": "optiv", "url": "https://github.com/optiv/OSINT_Encyclopedia", "id": "e6789331798d", "stars": 188, "language": null, "description": "Your go-to resource for all things OSINT", "type": "tool", "pushedAt": "2024-03-28T06:08:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Tylous", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/15052743?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/gladius", "name": "gladius", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/gladius", "id": "6f20ec1044d0", "stars": 187, "language": "Python", "description": "Automated Responder/secretsdump.py cracking", "type": "tool", "pushedAt": "2016-05-16T13:48:49Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ctfhacker", "c": 68, "avatar": "https://avatars.githubusercontent.com/u/7690115?v=4", "type": "User" } ] }, { "repo": "fox-it/linux-luks-tpm-boot", "name": "linux-luks-tpm-boot", "owner": "fox-it", "url": "https://github.com/fox-it/linux-luks-tpm-boot", "id": "a8d620099ac8", "stars": 185, "language": "Shell", "description": "A guide for setting up LUKS boot with a key from TPM in Linux", "type": "tool", "pushedAt": "2018-10-04T07:46:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" } ], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "dirkjanm", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "morbitzer", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/13377683?v=4", "type": "User" }, { "login": "ClemPi", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1401705?v=4", "type": "User" }, { "login": "srwalter", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/79127?v=4", "type": "User" }, { "login": "Lordcorvin1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38600235?v=4", "type": "User" } ] }, { "repo": "netspi/daft", "name": "DAFT", "owner": "NetSPI", "url": "https://github.com/NetSPI/DAFT", "id": "e0a2b7fdaad6", "stars": 184, "language": "C#", "description": "DAFT: Database Audit Framework & Toolkit", "type": "tool", "pushedAt": "2021-08-11T21:29:57Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "nullbind", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1179731?v=4", "type": "User" }, { "login": "monoxgas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1223016?v=4", "type": "User" } ] }, { "repo": "outflanknl/netshhelperbeacon", "name": "NetshHelperBeacon", "owner": "outflanknl", "url": "https://github.com/outflanknl/NetshHelperBeacon", "id": "1bc96bff312f", "stars": 184, "language": "C++", "description": "Example DLL to load from Windows NetShell", "type": "tool", "pushedAt": "2016-09-26T19:57:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "fortra/cve-2023-28252", "name": "CVE-2023-28252", "owner": "fortra", "url": "https://github.com/fortra/CVE-2023-28252", "id": "4889177ce54e", "stars": 184, "language": "C", "description": "", "type": "tool", "pushedAt": "2023-07-10T16:57:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ricnar456", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/8556494?v=4", "type": "User" } ] }, { "repo": "malvuln/viruscreds", "name": "viruscreds", "owner": "malvuln", "url": "https://github.com/malvuln/viruscreds", "stars": 25, "language": null, "description": "Database of backdoor passwords used by Malware, uncovered by the Malvuln project.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Malvuln (aka hyp3rlinx)", "cardId": "68d2b7258663f41f", "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9fc8c377a0c8", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-19T00:38:33Z", "archived": false, "topContributors": [ { "login": "malvuln", "c": 43, "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4", "type": "User" } ] }, { "repo": "boku7/tailorms-rxss-keylogger", "name": "tailorms-rxss-keylogger", "owner": "boku7", "url": "https://github.com/boku7/tailorMS-rXSS-Keylogger", "stars": 25, "language": "Python", "description": "Reflected Cross-Site Scripting (XSS) vulnerability in 'index.php' login-portal webpage of SourceCodesters Tailor Management System v1.0 allows remote attackers to harvest keys pressed via unauthentica", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59b6a618b488", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-02T15:11:00Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "mordavid/hashcat-mcp", "name": "hashcat-mcp", "owner": "mordavid", "url": "https://github.com/MorDavid/Hashcat-MCP", "stars": 25, "language": "Python", "description": "MCP wrapper for Hashcat – automate hash cracking with natural language", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fd91e3ebc5cc", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-05T23:53:13Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/cve-2026-20127", "name": "cve-2026-20127", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/CVE-2026-20127", "stars": 24, "language": "Ruby", "description": "An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ddd4fa1245e6", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-09T15:17:31Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "taksec/xss-pocs", "name": "xss-pocs", "owner": "taksec", "url": "https://github.com/TakSec/XSS-PoCs", "stars": 24, "language": "JavaScript", "description": "XSS PoCs to elevate your alert()", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mike Takahashi", "cardId": "6b4cebd7323e9607", "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "58dfd9b326b3", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-18T22:16:32Z", "archived": false, "topContributors": [ { "login": "TakSec", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/27094033?v=4", "type": "User" } ] }, { "repo": "joasasantos/process-stacking-injection", "name": "process-stacking-injection", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Process-Stacking-Injection", "stars": 24, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "99ff10dd82f9", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-04T13:47:51Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "joasasantos/probabilistic-call-stack-poc", "name": "probabilistic-call-stack-poc", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Probabilistic-Call-Stack-PoC", "stars": 24, "language": "C++", "description": "A proof-of-concept to demonstrate randomized execution paths and their impact on call stack signatures — ideal for EDR testing, behavior-based detection research, and evasion analysis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "32fd19ea505c", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-17T14:39:11Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/ludus_adcs", "name": "ludus_adcs", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/ludus_adcs", "stars": 23, "language": "PowerShell", "description": "An Ansible Role that installs ADCS on Windows Server and optionally configures Certified Preowned templates.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ca2410951aea", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 7, "contributors": [], "pushedAt": "2026-03-20T14:38:31Z", "archived": false, "topContributors": [ { "login": "bradyjmcl", "c": 23, "avatar": "https://avatars.githubusercontent.com/u/78229080?v=4", "type": "User" }, { "login": "kernel-sanders", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" }, { "login": "compass-dexter", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/145257008?v=4", "type": "User" }, { "login": "ar0dd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42455358?v=4", "type": "User" }, { "login": "benji1000", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2243199?v=4", "type": "User" }, { "login": "cftong", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3760023?v=4", "type": "User" }, { "login": "mojeda101", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/131988047?v=4", "type": "User" } ] }, { "repo": "soxoj/castreaper", "name": "castreaper", "owner": "soxoj", "url": "https://github.com/soxoj/castreaper", "stars": 23, "language": "Python", "description": "Reaper of screencast videos for OSINT purposes", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c6abe652a086", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-05T16:39:17Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" } ] }, { "repo": "hacksysteam/cve-2021-45067", "name": "cve-2021-45067", "owner": "hacksysteam", "url": "https://github.com/hacksysteam/CVE-2021-45067", "stars": 23, "language": "Python", "description": "Adobe Reader DC Information Leak Exploit ", "type": "tool", "lanes": [ "2" ], "author": { "name": "HackSys Team", "cardId": "43be73ee78489c25", "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c12d54121f4d", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-13T17:00:50Z", "archived": false, "topContributors": [ { "login": "hacksysteam", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4098538?v=4", "type": "User" } ] }, { "repo": "bug-vs-me/wpml-xss", "name": "wpml-xss", "owner": "bug-vs-me", "url": "https://github.com/bug-vs-me/WPML-XSS", "stars": 23, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bug vs Me", "cardId": "9328ed1c4112c5d0", "avatar": "https://avatars.githubusercontent.com/u/57610657?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1766c147d34b", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-30T21:48:36Z", "archived": false, "topContributors": [ { "login": "bug-vs-me", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57610657?v=4", "type": "User" } ] }, { "repo": "calebstewart/pwncat-windows-c2", "name": "pwncat-windows-c2", "owner": "calebstewart", "url": "https://github.com/calebstewart/pwncat-windows-c2", "stars": 23, "language": "C#", "description": "pwncat windows c2 components", "type": "tool", "lanes": [ "2" ], "author": { "name": "Caleb Stewart", "cardId": "ba74cf38708a6351", "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a7ef7cfa38bf", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "John Hammond", "cardId": "a464a6a436b1d7c8", "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "login": "JohnHammond" } ], "pushedAt": "2021-06-21T01:10:25Z", "archived": false, "topContributors": [ { "login": "calebstewart", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4", "type": "User" }, { "login": "JohnHammond", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6288722?v=4", "type": "User" } ] }, { "repo": "ferreirasc/redteam-arsenal", "name": "redteam-arsenal", "owner": "ferreirasc", "url": "https://github.com/ferreirasc/redteam-arsenal", "stars": 22, "language": "PowerShell", "description": "Some binaries/scripts that may be useful in red team/pentest exercises", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leonardo Ferreira", "cardId": "7aa866a407068c0a", "avatar": "https://avatars.githubusercontent.com/u/4137088?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2a1d2c18ee2a", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-29T17:47:07Z", "archived": false, "topContributors": [ { "login": "ferreirasc", "c": 289, "avatar": "https://avatars.githubusercontent.com/u/4137088?v=4", "type": "User" }, { "login": "hackufes", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32970939?v=4", "type": "User" } ] }, { "repo": "repnz/autoit-analysis", "name": "autoit-analysis", "owner": "repnz", "url": "https://github.com/repnz/autoit-analysis", "stars": 22, "language": "Python", "description": "AutoIt Analysis Library: Parser & Emulator For Malware Researchers", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d502eeaa2042", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-04-27T09:48:26Z", "archived": false, "topContributors": [ { "login": "repnz", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "wrongbaud/replicant", "name": "replicant", "owner": "wrongbaud", "url": "https://github.com/wrongbaud/replicant", "stars": 21, "language": "Python", "description": "Fault Injection Research and Resources", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Alt (wrongbaud)", "cardId": "066df27f625958c1", "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "969b7cdd6628", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 83, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-06T19:22:08Z", "archived": false, "topContributors": [ { "login": "wrongbaud", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4", "type": "User" } ] }, { "repo": "sfewer-r7/lorexexploit", "name": "lorexexploit", "owner": "sfewer-r7", "url": "https://github.com/sfewer-r7/LorexExploit", "stars": 21, "language": "Ruby", "description": "Lorex 2K Indoor Wi-Fi Security Camera: RCE Exploit Chain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Stephen Fewer", "cardId": "0cb6499c41e39074", "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2632bf0bc4ac", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-03T17:43:29Z", "archived": false, "topContributors": [ { "login": "sfewer-r7", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/122022313?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/naabu-action", "name": "naabu-action", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/naabu-action", "stars": 21, "language": null, "description": "A fast port scanner written in go with a focus on reliability and simplicity.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "82fa25e036be", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2024-10-21T08:23:32Z", "archived": false, "topContributors": [ { "login": "ehsandeep", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "forgedhallpass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "thomasmerz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18568381?v=4", "type": "User" } ] }, { "repo": "boku7/stockmanagement-xss-login-credharvester", "name": "stockmanagement-xss-login-credharvester", "owner": "boku7", "url": "https://github.com/boku7/StockManagement-XSS-Login-CredHarvester", "stars": 21, "language": "Python", "description": "Reflected Cross-Site Scripting (XSS) vulnerability in 'index.php' login-portal webpage of SourceCodesters Stock Management System v1.0 allows remote attackers to harvest login credentials & session co", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "43e58b4d78c1", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-30T00:47:30Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "joasasantos/webaudit", "name": "webaudit", "owner": "joasasantos", "url": "https://github.com/JoasASantos/WebAudit", "stars": 21, "language": "JavaScript", "description": "Secret Key Scanner, Sensitive Directory Finder, Security Headers Analyzer, Risk Scoring, Exportable HTML Reports.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "39c2bb9afc31", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-30T16:30:08Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "hasherezade/loaderine", "name": "loaderine", "owner": "hasherezade", "url": "https://github.com/hasherezade/loaderine", "stars": 20, "language": "C", "description": "A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.", "type": "tool", "lanes": [ "2" ], "author": { "name": "hasherezade", "cardId": "95b9f1e73924a85c", "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "536e90f89c6b", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-13T21:17:48Z", "archived": false, "topContributors": [ { "login": "hasherezade", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3115348?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/create_thread_inline_assembly_x86", "name": "create_thread_inline_assembly_x86", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Create_Thread_Inline_Assembly_x86", "stars": 20, "language": "C++", "description": "This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a29ea4840bfd", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-17T03:44:30Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "raskolnikov90/osint-witch", "name": "osint-witch", "owner": "raskolnikov90", "url": "https://github.com/raskolnikov90/OSINT-Witch", "stars": 20, "language": "Python", "description": "OSINT Google search automation to find emails, names, locations and past breaches information", "type": "tool", "lanes": [ "2" ], "author": { "name": "LainKusanagi", "cardId": "0b8f90ebec1aef9e", "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7b3f4b321d9f", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-03T02:39:40Z", "archived": false, "topContributors": [ { "login": "raskolnikov90", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4", "type": "User" } ] }, { "repo": "noraj/adassault", "name": "adassault", "owner": "noraj", "url": "https://github.com/noraj/ADAssault", "stars": 20, "language": "Ruby", "description": "Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25e606ec57d9", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-07-15T09:53:08Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 65, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "noraj", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" } ] }, { "repo": "bartblaze/dccwuacbypass", "name": "dccwuacbypass", "owner": "bartblaze", "url": "https://github.com/bartblaze/dccwUACBypass", "stars": 20, "language": "PowerShell", "description": "PowerShell script to bypass UAC using DCCW", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bart", "cardId": "9b82391c60e5a30e", "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "423fb8bb5ee5", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2017-07-29T12:23:23Z", "archived": false, "topContributors": [ { "login": "bartblaze", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4", "type": "User" } ] }, { "repo": "seifreed/cipherrun", "name": "cipherrun", "owner": "seifreed", "url": "https://github.com/seifreed/CipherRun", "stars": 20, "language": "Rust", "description": "A Fast, Modular, and Scalable TLS/SSL Security Scanner Written in Rust", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1f88c19cd650", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-10T15:58:51Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 1284, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "timmisiak/runwithdll", "name": "runwithdll", "owner": "timmisiak", "url": "https://github.com/TimMisiak/RunWithDll", "stars": 19, "language": "C++", "description": "A utility that can be used to launch an executable with a DLL injected", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tim Misiak", "cardId": "65b09d2324bf2680", "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f0936029f3ab", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-20T23:44:47Z", "archived": false, "topContributors": [ { "login": "TimMisiak", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/18180596?v=4", "type": "User" } ] }, { "repo": "blowdart/idunno.security.ssrf", "name": "idunno.security.ssrf", "owner": "blowdart", "url": "https://github.com/blowdart/idunno.Security.Ssrf", "stars": 19, "language": "C#", "description": "An SSRF Handler for C# HttpClient and ClientWebSocket", "type": "tool", "lanes": [ "2" ], "author": { "name": "Barry Dorrans", "cardId": "7b1a66f028276450", "avatar": "https://avatars.githubusercontent.com/u/796298?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "19e3c7bb333c", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 5, "contributors": [], "pushedAt": "2026-07-15T18:26:22Z", "archived": false, "topContributors": [ { "login": "blowdart", "c": 114, "avatar": "https://avatars.githubusercontent.com/u/796298?v=4", "type": "User" }, { "login": "josephdecock", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1145533?v=4", "type": "User" }, { "login": "vcsjones", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/361677?v=4", "type": "User" }, { "login": "MihaZupan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25307628?v=4", "type": "User" }, { "login": "ctyar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1432648?v=4", "type": "User" } ] }, { "repo": "crypto-cat/cryptocat-gitbook", "name": "cryptocat-gitbook", "owner": "crypto-cat", "url": "https://github.com/Crypto-Cat/cryptocat-gitbook", "stars": 18, "language": null, "description": "OLD repo for my GitBook (CTF writeups / vuln research / bugbounty) - please check out cryptocat.me/blog for the updated content!", "type": "tool", "lanes": [ "2" ], "author": { "name": "CryptoCat", "cardId": "00e85c78fc24cc93", "avatar": "https://avatars.githubusercontent.com/u/12751872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3e547acf65f6", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-30T21:56:15Z", "archived": false, "topContributors": [ { "login": "Crypto-Cat", "c": 117, "avatar": "https://avatars.githubusercontent.com/u/12751872?v=4", "type": "User" } ] }, { "repo": "maleick/cobalt-docker", "name": "cobalt-docker", "owner": "maleick", "url": "https://github.com/Maleick/Cobalt-Docker", "stars": 18, "language": "Shell", "description": "Builds and runs Cobalt Strike 4.12 in Docker with automatic REST API startup. Production-ready, one-command deploy.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Miles", "cardId": "2a9c52cd630bb1c2", "avatar": "https://avatars.githubusercontent.com/u/20830605?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7a01860a7daf", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-03-20T20:12:23Z", "archived": false, "topContributors": [] }, { "repo": "joasasantos/offensive-security-quantum-computing", "name": "offensive-security-quantum-computing", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Offensive-Security-Quantum-Computing", "stars": 18, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3bb2fd5bd550", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-25T19:17:23Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "eversinc33/nimnightmare", "name": "nimnightmare", "owner": "eversinc33", "url": "https://github.com/eversinc33/NimNightmare", "stars": 18, "language": "Nim", "description": "CVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)", "type": "tool", "lanes": [ "2" ], "author": { "name": "eversinc33", "cardId": "fa66756f5ce5e437", "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "31b874dbe3b4", "score": 14, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-05T14:51:28Z", "archived": false, "topContributors": [ { "login": "eversinc33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51821028?v=4", "type": "User" } ] }, { "repo": "synacktiv/ntdissector", "name": "ntdissector", "owner": "synacktiv", "url": "https://github.com/synacktiv/ntdissector", "id": "6d907726e60f", "stars": 183, "language": "Python", "description": "", "type": "tool", "pushedAt": "2026-03-31T13:08:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "idem-s1n", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/99683413?v=4", "type": "User" }, { "login": "hypn0s", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1299578?v=4", "type": "User" }, { "login": "Lapin-droide", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/85881552?v=4", "type": "User" }, { "login": "william-billaud", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23636016?v=4", "type": "User" }, { "login": "theol-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/97730516?v=4", "type": "User" } ] }, { "repo": "fox-it/invoke-credentialphisher", "name": "Invoke-CredentialPhisher", "owner": "fox-it", "url": "https://github.com/fox-it/Invoke-CredentialPhisher", "id": "a07511db9c60", "stars": 183, "language": "PowerShell", "description": "", "type": "tool", "pushedAt": "2018-12-18T17:47:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rindert-fox", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/24459322?v=4", "type": "User" }, { "login": "quickbreach", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19368856?v=4", "type": "User" } ] }, { "repo": "jagracey/regex-dos", "name": "RegEx-DoS", "owner": "jagracey", "url": "https://github.com/jagracey/RegEx-DoS", "id": "7a525b0aaaf4", "stars": 182, "language": "JavaScript", "description": ":cop: :punch: RegEx Denial of Service (ReDos) Scanner", "type": "tool", "pushedAt": "2017-10-25T18:20:14Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "jagracey", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jagracey", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3309526?v=4", "type": "User" } ] }, { "repo": "ghostpack/invoke-evasion", "name": "Invoke-Evasion", "owner": "GhostPack", "url": "https://github.com/GhostPack/Invoke-Evasion", "id": "ddb533c82f0c", "stars": 181, "language": "Jupyter Notebook", "description": "PowerShell Obfuscation and Data Science", "type": "tool", "pushedAt": "2022-05-04T17:02:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "HarmJ0y", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" } ] }, { "repo": "netspi/powershell-modules", "name": "Powershell-Modules", "owner": "NetSPI", "url": "https://github.com/NetSPI/Powershell-Modules", "id": "c258ce68c30a", "stars": 179, "language": "PowerShell", "description": "", "type": "tool", "pushedAt": "2019-06-06T15:54:47Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "arantasa", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4070883?v=4", "type": "User" }, { "login": "egru", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" }, { "login": "TEH30P", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/15148944?v=4", "type": "User" } ] }, { "repo": "netspi/swift.nv", "name": "Swift.nV", "owner": "NetSPI", "url": "https://github.com/NetSPI/Swift.nV", "id": "168ba0d4bae5", "stars": 179, "language": "Swift", "description": "Security Training Tool that demonstrates common mobile application vulnerabilities using Swift in iOS", "type": "tool", "pushedAt": "2018-03-08T18:10:45Z", "archived": true, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "nVisium-seth-law", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/26070531?v=4", "type": "User" }, { "login": "forced-request", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/961246?v=4", "type": "User" }, { "login": "nvisium-john-poulin", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/26073088?v=4", "type": "User" }, { "login": "nVisium-David-Lindner", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/26092265?v=4", "type": "User" }, { "login": "mccabe615", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1463253?v=4", "type": "User" } ] }, { "repo": "nccgroup/triforcelinuxsyscallfuzzer", "name": "TriforceLinuxSyscallFuzzer", "owner": "nccgroup", "url": "https://github.com/nccgroup/TriforceLinuxSyscallFuzzer", "id": "bb7115dc04b5", "stars": 179, "language": "C", "description": "A linux system call fuzzer using TriforceAFL", "type": "tool", "pushedAt": "2024-02-28T15:14:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "timnewsham", "c": 41, "avatar": "https://avatars.githubusercontent.com/u/19916352?v=4", "type": "User" }, { "login": "jessemtso", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6402482?v=4", "type": "User" } ] }, { "repo": "sensepost/routopsy", "name": "routopsy", "owner": "sensepost", "url": "https://github.com/sensepost/routopsy", "id": "5d40b509466b", "stars": 179, "language": "Python", "description": "Routopsy - Hacking Routers with Routers", "type": "tool", "pushedAt": "2021-07-30T18:59:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "GOAT-FARM3R", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/28618286?v=4", "type": "User" }, { "login": "tkempheks", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/43970129?v=4", "type": "User" }, { "login": "Siphelele-SP", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25168871?v=4", "type": "User" } ] }, { "repo": "synacktiv/invoke-runaswithcert", "name": "Invoke-RunAsWithCert", "owner": "synacktiv", "url": "https://github.com/synacktiv/Invoke-RunAsWithCert", "id": "b87af7587ac0", "stars": 178, "language": "PowerShell", "description": "A PowerShell script to perform PKINIT authentication with the Windows API from a non domain-joined machine.", "type": "tool", "pushedAt": "2024-05-13T08:26:56Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "yaumn-synacktiv", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/88383464?v=4", "type": "User" } ] }, { "repo": "bishopfox/raink", "name": "raink", "owner": "BishopFox", "url": "https://github.com/BishopFox/raink", "id": "0f916cc06d0b", "stars": 177, "language": "Go", "description": "Use LLMs for document ranking", "type": "tool", "pushedAt": "2025-04-17T15:58:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Somdev Sangwan", "cardId": "e36425da74b60f78", "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "login": "s0md3v" }, { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "login": "noperator" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "noperator-bf", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/51375324?v=4", "type": "User" }, { "login": "s0md3v", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26716802?v=4", "type": "User" }, { "login": "noperator", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" }, { "login": "braindead-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53441721?v=4", "type": "User" } ] }, { "repo": "outflanknl/net-gpppassword", "name": "Net-GPPPassword", "owner": "outflanknl", "url": "https://github.com/outflanknl/Net-GPPPassword", "id": "edb75165a48f", "stars": 177, "language": "C#", "description": ".NET implementation of Get-GPPPassword. Retrieves the plaintext password and other information for accounts pushed through Group Policy Preferences.", "type": "tool", "pushedAt": "2019-12-18T10:14:32Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "stanhegt", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" } ] }, { "repo": "nccgroup/binproxy", "name": "BinProxy", "owner": "nccgroup", "url": "https://github.com/nccgroup/BinProxy", "id": "fbff0e0b9055", "stars": 176, "language": "Ruby", "description": "BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.", "type": "tool", "pushedAt": "2022-12-01T00:56:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "RyanKoppenhaver-NCC", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/5150207?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/oauthseeker", "name": "oauthseeker", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/oauthseeker", "id": "7a1036b4c0bd", "stars": 174, "language": "HTML", "description": "A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users.", "type": "tool", "pushedAt": "2025-07-31T20:05:32Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "synacktiv/shh", "name": "shh", "owner": "synacktiv", "url": "https://github.com/synacktiv/shh", "id": "1a4bca351f74", "stars": 174, "language": "Rust", "description": "Systemd Hardening Helper - Mirror of https://github.com/desbma/shh", "type": "tool", "pushedAt": "2026-05-21T16:02:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "desbma", "c": 313, "avatar": "https://avatars.githubusercontent.com/u/1145175?v=4", "type": "User" }, { "login": "desbma-s1n", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/62935004?v=4", "type": "User" }, { "login": "kuflierl", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/41301536?v=4", "type": "User" }, { "login": "ZetaTwo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/870392?v=4", "type": "User" } ] }, { "repo": "synacktiv/dlhell", "name": "DLHell", "owner": "synacktiv", "url": "https://github.com/synacktiv/DLHell", "id": "d590c0acbef2", "stars": 173, "language": "Python", "description": "Local & remote Windows DLL Proxying", "type": "tool", "pushedAt": "2024-06-17T16:20:10Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "flashlam", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/148257077?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/vulcan", "name": "vulcan", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/vulcan", "id": "af6a99fbbc52", "stars": 171, "language": "C++", "description": "a tool to make it easy and fast to test various forms of injection", "type": "tool", "pushedAt": "2019-05-02T16:22:50Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "jabra-", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/585965?v=4", "type": "User" } ] }, { "repo": "violentlydave/mkhtaccess_red", "name": "mkhtaccess_red", "owner": "violentlydave", "url": "https://github.com/violentlydave/mkhtaccess_red", "id": "a408718bae06", "stars": 170, "language": "Shell", "description": "Auto-generate an HTaccess for payload delivery -- automatically pulls ips/nets/etc from known sandbox companies/sources that have been seen before, and redirects them to a benign payload.", "type": "tool", "pushedAt": "2020-08-10T14:16:50Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "violentlydave", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "violentlydave", "c": 28, "avatar": "https://avatars.githubusercontent.com/u/10800825?v=4", "type": "User" }, { "login": "aconite33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" } ] }, { "repo": "bishopfox/brokenhill", "name": "BrokenHill", "owner": "BishopFox", "url": "https://github.com/BishopFox/BrokenHill", "id": "00bb05c75858", "stars": 170, "language": "Python", "description": "A productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)", "type": "tool", "pushedAt": "2024-12-18T20:03:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "blincoln-bf", "c": 195, "avatar": "https://avatars.githubusercontent.com/u/57911293?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/parallelsyscalls", "name": "ParallelSyscalls", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/ParallelSyscalls", "id": "ae562751133b", "stars": 170, "language": "C++", "description": "", "type": "tool", "pushedAt": "2022-01-07T13:15:40Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mdsecactivebreach", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/29373540?v=4", "type": "User" } ] }, { "repo": "bishopfox/imperva_gzip_waf_bypass", "name": "Imperva_gzip_WAF_Bypass", "owner": "BishopFox", "url": "https://github.com/BishopFox/Imperva_gzip_WAF_Bypass", "id": "bced8b4caf0b", "stars": 169, "language": "Python", "description": "", "type": "tool", "pushedAt": "2022-01-07T17:39:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xhaggis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6735009?v=4", "type": "User" } ] }, { "repo": "synacktiv/cve-2023-35001", "name": "CVE-2023-35001", "owner": "synacktiv", "url": "https://github.com/synacktiv/CVE-2023-35001", "id": "b6811b23bcbd", "stars": 169, "language": "Go", "description": "Pwn2Own Vancouver 2023 Ubuntu LPE exploit", "type": "tool", "pushedAt": "2023-11-12T00:42:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "sideway-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/142903429?v=4", "type": "User" } ] }, { "repo": "nullarray/mida-multitool", "name": "MIDA-Multitool", "owner": "NullArray", "url": "https://github.com/NullArray/MIDA-Multitool", "id": "0d8d01942f6e", "stars": 168, "language": "Shell", "description": "Bash script purposed for system enumeration, vulnerability identification and privilege escalation.", "type": "tool", "pushedAt": "2019-08-23T13:12:41Z", "archived": false, "lanes": [ "listed" ], "author": { "name": "NullArray", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "NullArray", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/13443322?v=4", "type": "User" }, { "login": "thehappydinoa", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/30162978?v=4", "type": "User" } ] }, { "repo": "redteampentesting/cve-2020-13935", "name": "CVE-2020-13935", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/CVE-2020-13935", "id": "b809208977d4", "stars": 168, "language": "Go", "description": "Exploit for WebSocket Vulnerability in Apache Tomcat", "type": "tool", "pushedAt": "2020-11-02T14:51:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "nccgroup/typofinder", "name": "typofinder", "owner": "nccgroup", "url": "https://github.com/nccgroup/typofinder", "id": "1b40e8f8cca3", "stars": 166, "language": "Python", "description": "A finder of domain typos showing country of IP address", "type": "tool", "pushedAt": "2023-11-15T15:13:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "neonbunny", "c": 75, "avatar": "https://avatars.githubusercontent.com/u/6201399?v=4", "type": "User" }, { "login": "hannahefm", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/8436533?v=4", "type": "User" }, { "login": "tomncc", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23642929?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/trajan", "name": "trajan", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/trajan", "id": "3e620f31422e", "stars": 165, "language": "Go", "description": "A multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.", "type": "tool", "pushedAt": "2026-07-17T20:27:56Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 9, "topContributors": [ { "login": "nsportsman", "c": 63, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "Tanq16", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/37408906?v=4", "type": "User" }, { "login": "praetorian-rang", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/263791006?v=4", "type": "User" }, { "login": "hunterverhelst", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/30808586?v=4", "type": "User" }, { "login": "Icarus7337", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/29873236?v=4", "type": "User" }, { "login": "MarioBartolome", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/23175380?v=4", "type": "User" }, { "login": "dashingDragon", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/92374676?v=4", "type": "User" }, { "login": "mikepiotrowski2", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/198971315?v=4", "type": "User" }, { "login": "norman-yeo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/127473573?v=4", "type": "User" } ] }, { "repo": "nccgroup/requests-racer", "name": "requests-racer", "owner": "nccgroup", "url": "https://github.com/nccgroup/requests-racer", "id": "74260b1d0d2f", "stars": 163, "language": "Python", "description": " Small Python library that makes it easy to exploit race conditions in web apps with Requests.", "type": "tool", "pushedAt": "2023-05-22T22:30:23Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "aleksejs-ncc", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/51177168?v=4", "type": "User" } ] }, { "repo": "bishopfox/forticrack", "name": "forticrack", "owner": "BishopFox", "url": "https://github.com/BishopFox/forticrack", "id": "0e8eada92862", "stars": 160, "language": "Python", "description": "Decrypt encrypted Fortienet FortiOS firmware images", "type": "tool", "pushedAt": "2023-08-02T15:41:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "braindead-bf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/53441721?v=4", "type": "User" } ] }, { "repo": "nccgroup/conscrypttrustusercerts", "name": "ConscryptTrustUserCerts", "owner": "nccgroup", "url": "https://github.com/nccgroup/ConscryptTrustUserCerts", "id": "cbc61fe048ee", "stars": 160, "language": "Shell", "description": "", "type": "tool", "pushedAt": "2023-11-08T14:27:31Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "xcervillancc", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/88440085?v=4", "type": "User" }, { "login": "neonbunny", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6201399?v=4", "type": "User" } ] }, { "repo": "synacktiv/ouned", "name": "OUned", "owner": "synacktiv", "url": "https://github.com/synacktiv/OUned", "id": "b50cfccbda12", "stars": 160, "language": "Python", "description": "The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning", "type": "tool", "pushedAt": "2025-11-02T14:26:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "q-roland", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" } ] }, { "repo": "merces/aleph", "name": "aleph", "owner": "merces", "url": "https://github.com/merces/aleph", "id": "4950e6cc323f", "stars": 158, "language": "CSS", "description": "An Open Source Malware Analysis Pipeline System", "type": "tool", "pushedAt": "2021-06-01T21:52:30Z", "archived": true, "lanes": [ "listed" ], "author": { "name": "merces", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "Pr0teus", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/459487?v=4", "type": "User" }, { "login": "merces", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/1429647?v=4", "type": "User" }, { "login": "turicas", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/186126?v=4", "type": "User" }, { "login": "m4dw0lf", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3607625?v=4", "type": "User" }, { "login": "gitter-badger", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8518239?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "nccgroup/whalescan", "name": "whalescan", "owner": "nccgroup", "url": "https://github.com/nccgroup/whalescan", "id": "fa792afae9b1", "stars": 157, "language": "Python", "description": "Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container", "type": "tool", "pushedAt": "2023-06-09T17:30:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "saira-h", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/30358249?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/sharppack", "name": "SharpPack", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/SharpPack", "id": "f89e87eb57ef", "stars": 157, "language": "Batchfile", "description": "An Insider Threat Toolkit", "type": "tool", "pushedAt": "2018-12-17T11:55:12Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "sensepost/dwn", "name": "dwn", "owner": "sensepost", "url": "https://github.com/sensepost/dwn", "id": "674ece14718b", "stars": 156, "language": "Python", "description": "d(ockerp)wn - a docker pwn tool manager", "type": "tool", "pushedAt": "2021-06-08T16:38:47Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dylan Makowski", "cardId": "32827bc9451d9cd2", "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4", "login": "AnubisSec" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "leonjza", "c": 52, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "AnubisSec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38790814?v=4", "type": "User" } ] }, { "repo": "cornerpirate/socat-shell", "name": "socat-shell", "owner": "cornerpirate", "url": "https://github.com/cornerpirate/socat-shell", "id": "0af6ba12f46f", "stars": 154, "language": "Shell", "description": "Socat can be used to establish a reverse shell with bash tab completion and full shell functionality", "type": "tool", "pushedAt": "2016-02-04T16:35:31Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Paul Ritchie", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "nettitude/runof", "name": "RunOF", "owner": "nettitude", "url": "https://github.com/nettitude/RunOF", "id": "36ff6939649f", "stars": 153, "language": "C#", "description": "", "type": "tool", "pushedAt": "2023-01-06T15:30:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "jdsnape", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/376205?v=4", "type": "User" }, { "login": "benpturner", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" }, { "login": "aconite33", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3675886?v=4", "type": "User" }, { "login": "riskydissonance", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/20513519?v=4", "type": "User" } ] }, { "repo": "netspi/burp-extensions", "name": "Burp-Extensions", "owner": "NetSPI", "url": "https://github.com/NetSPI/Burp-Extensions", "id": "cb957d28dee0", "stars": 152, "language": "Java", "description": "Central Repo for Burp extensions", "type": "tool", "pushedAt": "2021-11-18T10:49:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "egru", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/381117?v=4", "type": "User" }, { "login": "khai-tran", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1809888?v=4", "type": "User" } ] }, { "repo": "fox-it/bloodhound-import", "name": "bloodhound-import", "owner": "fox-it", "url": "https://github.com/fox-it/bloodhound-import", "id": "fc59f778ddbf", "stars": 151, "language": "Python", "description": "Python based BloodHound data importer", "type": "tool", "pushedAt": "2023-07-05T09:32:46Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Dirk-jan Mollema", "cardId": "b248ae8e4969522e", "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "login": "dirkjanm" }, { "name": "Jeff McJunkin", "cardId": "80ef43e826e3a98b", "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "login": "jeffmcjunkin" }, { "name": "Leron Gray", "cardId": "3e9601fa2537229d", "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "login": "daddycocoaman" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 10, "topContributors": [ { "login": "mwgielen", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/4816201?v=4", "type": "User" }, { "login": "arvchristos", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/1295367?v=4", "type": "User" }, { "login": "dirkjanm", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/1773762?v=4", "type": "User" }, { "login": "wh1tenoise", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/41084105?v=4", "type": "User" }, { "login": "vruello", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5345986?v=4", "type": "User" }, { "login": "jazofra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/33320493?v=4", "type": "User" }, { "login": "jeffmcjunkin", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1383363?v=4", "type": "User" }, { "login": "daddycocoaman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/21189155?v=4", "type": "User" }, { "login": "Paradoxis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6770124?v=4", "type": "User" }, { "login": "jarilaos", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/32414258?v=4", "type": "User" } ] }, { "repo": "fox-it/danderspritz-evtx", "name": "danderspritz-evtx", "owner": "fox-it", "url": "https://github.com/fox-it/danderspritz-evtx", "id": "f8bea5d4dc21", "stars": 151, "language": "Python", "description": "Parse evtx files and detect use of the DanderSpritz eventlogedit module", "type": "tool", "pushedAt": "2017-12-15T14:10:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "fox-srt", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/9809789?v=4", "type": "User" } ] }, { "repo": "bloodhoundad/legacy-azurehound.ps1", "name": "Legacy-AzureHound.ps1", "owner": "BloodHoundAD", "url": "https://github.com/BloodHoundAD/Legacy-AzureHound.ps1", "id": "3d76611f93fd", "stars": 150, "language": "PowerShell", "description": "", "type": "tool", "pushedAt": "2021-07-22T08:18:29Z", "archived": true, "lanes": [ "org" ], "author": { "name": "BloodHound Legacy Account (Deprecated)", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Andy Robbins", "cardId": "11471e260ab3dd11", "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "login": "andyrobbins" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 5, "topContributors": [ { "login": "andyrobbins", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/842644?v=4", "type": "User" }, { "login": "hausec", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/33264718?v=4", "type": "User" }, { "login": "smy1es", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/6192668?v=4", "type": "User" }, { "login": "rvazarkar", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5720446?v=4", "type": "User" }, { "login": "Hackndo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11051803?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2022-22972", "name": "CVE-2022-22972", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-22972", "id": "472829f40c04", "stars": 150, "language": "Python", "description": "", "type": "tool", "pushedAt": "2022-05-26T16:07:18Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "hrsman1", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/trident", "name": "trident", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/trident", "id": "f83afa3f8d91", "stars": 148, "language": "Go", "description": "automated password spraying tool", "type": "tool", "pushedAt": "2021-06-15T14:39:59Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 6, "topContributors": [ { "login": "amlweems", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/117625?v=4", "type": "User" }, { "login": "michaelweber", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/39742080?v=4", "type": "User" }, { "login": "jessesomerville", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/41651270?v=4", "type": "User" }, { "login": "jfish7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13988128?v=4", "type": "User" }, { "login": "thardt-praetorian", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/61030729?v=4", "type": "User" }, { "login": "praetorian-rleonard", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/71141116?v=4", "type": "User" } ] }, { "repo": "synacktiv/livepyre", "name": "Livepyre", "owner": "synacktiv", "url": "https://github.com/synacktiv/Livepyre", "id": "11af28aded84", "stars": 148, "language": "Python", "description": "A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.", "type": "tool", "pushedAt": "2026-07-16T13:09:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "worty-syn", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/157044705?v=4", "type": "User" }, { "login": "remsio-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/110113034?v=4", "type": "User" }, { "login": "Khara-bb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/170971560?v=4", "type": "User" } ] }, { "repo": "bishopfox/asminject", "name": "asminject", "owner": "BishopFox", "url": "https://github.com/BishopFox/asminject", "id": "c0e9bc8142db", "stars": 147, "language": "Python", "description": "Heavily-modified fork of David Buchanan's dlinject project. Injects arbitrary assembly (or precompiled binary) payloads directly into x86-64, x86, and ARM32 Linux processes without the use of ptrace b", "type": "tool", "pushedAt": "2022-11-01T18:27:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "blincoln-bf", "c": 107, "avatar": "https://avatars.githubusercontent.com/u/57911293?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/ppid-spoofing", "name": "ppid-spoofing", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/ppid-spoofing", "id": "7b362d192396", "stars": 147, "language": "PowerShell", "description": "Scripts for performing and detecting parent PID spoofing", "type": "tool", "pushedAt": "2020-05-16T19:03:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "horizon3ai/vrealizeloginsightrce", "name": "vRealizeLogInsightRCE", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/vRealizeLogInsightRCE", "id": "8dacb8d2a7ec", "stars": 147, "language": "Python", "description": "POC for RCE using vulnerabilities described in VMSA-2023-0001", "type": "tool", "pushedAt": "2023-01-31T11:41:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hrsman1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "nccgroup/gitpwnd", "name": "gitpwnd", "owner": "nccgroup", "url": "https://github.com/nccgroup/gitpwnd", "id": "114aed719b8c", "stars": 146, "language": "Python", "description": "GitPwnd is a network penetration tool that lets you use a git repo for command and control of compromised machines", "type": "tool", "pushedAt": "2023-02-02T06:13:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Clint Gibler", "cardId": "ae4a6371666ee907", "avatar": "https://avatars.githubusercontent.com/u/767449?v=4", "login": "clintgibler" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "kishorbhat", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/7105012?v=4", "type": "User" }, { "login": "clintgibler", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/767449?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "synacktiv/laravel-crypto-killer", "name": "laravel-crypto-killer", "owner": "synacktiv", "url": "https://github.com/synacktiv/laravel-crypto-killer", "id": "c85e3a5b9531", "stars": 145, "language": "Python", "description": "A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.", "type": "tool", "pushedAt": "2025-12-23T14:04:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "remsio-syn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/110113034?v=4", "type": "User" }, { "login": "gg-gvaladon", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/177236162?v=4", "type": "User" } ] }, { "repo": "sensepost/gdi-palettes-exp", "name": "gdi-palettes-exp", "owner": "sensepost", "url": "https://github.com/sensepost/gdi-palettes-exp", "id": "3d4b79c02bb0", "stars": 145, "language": "C++", "description": "DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects", "type": "tool", "pushedAt": "2017-07-30T05:13:57Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "5A1F", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/35032883?v=4", "type": "User" } ] }, { "repo": "outflanknl/external_c2", "name": "external_c2", "owner": "outflanknl", "url": "https://github.com/outflanknl/external_c2", "id": "5403987a976b", "stars": 143, "language": "C", "description": "POC for Cobalt Strike external C2", "type": "tool", "pushedAt": "2021-09-06T09:39:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "xychix", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/307655?v=4", "type": "User" } ] }, { "repo": "redteampentesting/wspcoerce", "name": "wspcoerce", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/wspcoerce", "id": "e451ae9b81b7", "stars": 141, "language": "Python", "description": "wspcoerce coerces a Windows computer account via SMB to an arbitrary target using MS-WSP", "type": "tool", "pushedAt": "2025-11-24T10:46:33Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "rtpt-romankarwacik", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/108284286?v=4", "type": "User" } ] }, { "repo": "synacktiv/captaincredz", "name": "captaincredz", "owner": "synacktiv", "url": "https://github.com/synacktiv/captaincredz", "id": "4fc8ec2b7213", "stars": 139, "language": "Python", "description": "CaptainCredz is a modular and discreet password-spraying tool.", "type": "tool", "pushedAt": "2026-07-17T09:02:03Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "synacktiv-antoineg", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/102024014?v=4", "type": "User" }, { "login": "0xdsm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50470310?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-34362", "name": "CVE-2023-34362", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-34362", "id": "634d3c3bec0c", "stars": 139, "language": "Python", "description": "MOVEit CVE-2023-34362", "type": "tool", "pushedAt": "2023-06-26T20:24:32Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "fsecurelabs/viridianfuzzer", "name": "ViridianFuzzer", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/ViridianFuzzer", "id": "11724fa7c97d", "stars": 138, "language": "C++", "description": "Kernel driver to fuzz Hyper-V hypercalls ", "type": "tool", "pushedAt": "2019-02-15T13:15:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "fox-it/cobaltstrike-beacon-data", "name": "cobaltstrike-beacon-data", "owner": "fox-it", "url": "https://github.com/fox-it/cobaltstrike-beacon-data", "id": "a53e69f1654c", "stars": 136, "language": "Jupyter Notebook", "description": "Open Dataset of Cobalt Strike Beacon metadata (2018-2022)", "type": "tool", "pushedAt": "2022-03-28T15:45:33Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "yunzheng", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/468612?v=4", "type": "User" } ] }, { "repo": "fortra/cve-2022-37969", "name": "CVE-2022-37969", "owner": "fortra", "url": "https://github.com/fortra/CVE-2022-37969", "id": "227d1f15d1ac", "stars": 135, "language": "C++", "description": "Windows LPE exploit for CVE-2022-37969", "type": "tool", "pushedAt": "2023-07-11T16:50:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "zurro", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/52583?v=4", "type": "User" }, { "login": "solidcls", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/65661347?v=4", "type": "User" }, { "login": "ricnar456", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8556494?v=4", "type": "User" } ] }, { "repo": "bishopfox/cve-2023-27997-check", "name": "CVE-2023-27997-check", "owner": "BishopFox", "url": "https://github.com/BishopFox/CVE-2023-27997-check", "id": "7fbd408936ce", "stars": 134, "language": "Python", "description": "Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing", "type": "tool", "pushedAt": "2024-05-08T16:17:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "login": "noperator" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "noperator", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" }, { "login": "bf-ryan", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/132302799?v=4", "type": "User" } ] }, { "repo": "bishopfox/pwn-pulse", "name": "pwn-pulse", "owner": "BishopFox", "url": "https://github.com/BishopFox/pwn-pulse", "id": "9b7ccfa47f8c", "stars": 134, "language": "Shell", "description": "Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)", "type": "tool", "pushedAt": "2020-01-15T17:01:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾", "cardId": "0869f5308adc4387", "avatar": "https://avatars.githubusercontent.com/u/8762278?v=4", "login": "bl4ckh0l3z" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "bl4ckh0l3z", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/8762278?v=4", "type": "User" }, { "login": "braindead-bf", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/53441721?v=4", "type": "User" } ] }, { "repo": "bishopfox/firecat", "name": "firecat", "owner": "BishopFox", "url": "https://github.com/BishopFox/firecat", "id": "96db21b9c923", "stars": 134, "language": "C", "description": "Firecat is a penetration testing tool that allows you to punch reverse TCP tunnels out of a compromised network.", "type": "tool", "pushedAt": "2016-01-11T17:56:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "tastic1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/913683?v=4", "type": "User" } ] }, { "repo": "outflanknl/macho-loader", "name": "macho-loader", "owner": "outflanknl", "url": "https://github.com/outflanknl/macho-loader", "id": "e748efc720d4", "stars": 131, "language": "C++", "description": "Position-independent Reflective Loader for macOS", "type": "tool", "pushedAt": "2026-02-19T16:09:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "nccgroup/scomdecrypt", "name": "SCOMDecrypt", "owner": "nccgroup", "url": "https://github.com/nccgroup/SCOMDecrypt", "id": "5f16529724a7", "stars": 130, "language": "C#", "description": "SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers", "type": "tool", "pushedAt": "2023-11-10T07:04:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "blakedrumm", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/63755224?v=4", "type": "User" }, { "login": "rxwx", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/2202542?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2022-47966", "name": "CVE-2022-47966", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-47966", "id": "dfdf12cc7427", "stars": 129, "language": "Python", "description": "POC for CVE-2022-47966 affecting multiple ManageEngine products", "type": "tool", "pushedAt": "2023-01-19T13:10:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hrsman1", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "nettitude/invoke-powerthief", "name": "Invoke-PowerThIEf", "owner": "nettitude", "url": "https://github.com/nettitude/Invoke-PowerThIEf", "id": "cd863af0b34d", "stars": 128, "language": "PowerShell", "description": "The PowerThIEf, an Internet Explorer Post Exploitation library", "type": "tool", "pushedAt": "2025-02-27T23:17:17Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rolen", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1428801?v=4", "type": "User" }, { "login": "benpturner", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/2518196?v=4", "type": "User" } ] }, { "repo": "sensepost/birp", "name": "birp", "owner": "sensepost", "url": "https://github.com/sensepost/birp", "id": "fa70943f97c6", "stars": 126, "language": "Python", "description": "Big Iron Recon & Pwnage", "type": "tool", "pushedAt": "2021-11-08T09:42:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "singe", "c": 62, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" }, { "login": "mainframed", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1973519?v=4", "type": "User" } ] }, { "repo": "fortra/cve-2024-30051", "name": "CVE-2024-30051", "owner": "fortra", "url": "https://github.com/fortra/CVE-2024-30051", "id": "70b5540d11ce", "stars": 126, "language": "C++", "description": "", "type": "tool", "pushedAt": "2024-09-05T23:21:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ricnar456", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/8556494?v=4", "type": "User" } ] }, { "repo": "crypto-cat/redirekt", "name": "redirekt", "owner": "crypto-cat", "url": "https://github.com/Crypto-Cat/REdiREKT", "stars": 17, "language": "Jupyter Notebook", "description": "Code-base to go with academic paper \"REdiREKT: Extracting Malicious Redirections from Exploit Kit Traffic\" available @ https://pure.qub.ac.uk/en/publications/redirekt-extracting-malicious-redirections", "type": "tool", "lanes": [ "2" ], "author": { "name": "CryptoCat", "cardId": "00e85c78fc24cc93", "avatar": "https://avatars.githubusercontent.com/u/12751872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "12d4af515ce7", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-10T11:15:07Z", "archived": false, "topContributors": [ { "login": "Crypto-Cat", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/12751872?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/shell-we-assembly", "name": "shell-we-assembly", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Shell-we-Assembly", "stars": 17, "language": "C++", "description": "Shellcode execution via x86 inline assembly based on MSVC syntax", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "82aac8d1542e", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-26T10:56:23Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "win3zz/cve-2017-5638", "name": "cve-2017-5638", "owner": "win3zz", "url": "https://github.com/win3zz/CVE-2017-5638", "stars": 16, "language": "Shell", "description": "Apache Struts 2.3.5 < 2.3.31 / 2.5 < 2.5.10 - Remote Code Execution - Shell Script", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b5f08564beb", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-05-13T16:14:53Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "rek7/patchy", "name": "patchy", "owner": "rek7", "url": "https://github.com/rek7/patchy", "stars": 16, "language": "Go", "description": "Automated Persistence and Lateral Movement using GCP Patch Management", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8603af73be6b", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-08-11T06:01:29Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "kashalls/openterface-viewer", "name": "openterface-viewer", "owner": "kashalls", "url": "https://github.com/kashalls/openterface-viewer", "stars": 16, "language": "TypeScript", "description": "Proof of Concept Viewer for the browser", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jordan Jones", "cardId": "15bfb227e1bbb3da", "avatar": "https://avatars.githubusercontent.com/u/17620516?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9229fb961ba", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2026-07-08T20:36:52Z", "archived": false, "topContributors": [ { "login": "kashalls", "c": 60, "avatar": "https://avatars.githubusercontent.com/u/17620516?v=4", "type": "User" }, { "login": "renovate[bot]", "c": 9, "avatar": "https://avatars.githubusercontent.com/in/2740?v=4", "type": "Bot" }, { "login": "whc2001", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16266909?v=4", "type": "User" } ] }, { "repo": "struppigel/wisdomforhedgehogs", "name": "wisdomforhedgehogs", "owner": "struppigel", "url": "https://github.com/struppigel/WisdomForHedgehogs", "stars": 16, "language": "HTML", "description": "Knowledge base for reverse engineering and malware analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "Karsten Hahn", "cardId": "2c4963b333ad77b5", "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eafb5ae2c567", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-11T10:16:32Z", "archived": false, "topContributors": [ { "login": "struppigel", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/4398909?v=4", "type": "User" } ] }, { "repo": "c-h4ck-0/kubernetes-dns-spoofing-poc", "name": "kubernetes-dns-spoofing-poc", "owner": "c-h4ck-0", "url": "https://github.com/C-h4ck-0/Kubernetes-DNS-spoofing-POC", "stars": 15, "language": "Python", "description": "Proof-of-Concept python script that implements DNS spoofing attack in Kubernetes environment from a pod located on a Worker server", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nir Chako", "cardId": "4d455bdfd959fb26", "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0cc822550052", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-02-04T19:56:00Z", "archived": false, "topContributors": [ { "login": "C-h4ck-0", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4", "type": "User" } ] }, { "repo": "0xpugal/bugbounty_profile", "name": "bugbounty_profile", "owner": "0xpugal", "url": "https://github.com/0xPugal/bugbounty_profile", "stars": 15, "language": "Shell", "description": "Automate bug bounty recon using bash alias", "type": "tool", "lanes": [ "2" ], "author": { "name": "Pugalarasan", "cardId": "697fe36354f625da", "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4c0405a96b06", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-06T04:34:24Z", "archived": false, "topContributors": [ { "login": "0xPugal", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/75373225?v=4", "type": "User" } ] }, { "repo": "daffainfo/nuclei-malware", "name": "nuclei-malware", "owner": "daffainfo", "url": "https://github.com/daffainfo/nuclei-malware", "stars": 15, "language": null, "description": "Template to detect some malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Muhammad Daffa", "cardId": "6e6b6c585fcb159b", "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "762c578fb38a", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-07T17:32:48Z", "archived": false, "topContributors": [ { "login": "daffainfo", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/36522826?v=4", "type": "User" } ] }, { "repo": "octoberfest7/backstab_bof", "name": "backstab_bof", "owner": "octoberfest7", "url": "https://github.com/Octoberfest7/Backstab_BOF", "stars": 15, "language": "C", "description": "Beacon Object File implementation of Yaxser's Backstab", "type": "tool", "lanes": [ "2" ], "author": { "name": "Octoberfest7", "cardId": "8ac1bac84f42df82", "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "31a75fa79462", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-03-09T21:41:54Z", "archived": false, "topContributors": [ { "login": "Octoberfest7", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/91164728?v=4", "type": "User" } ] }, { "repo": "zer0x64/shellcide", "name": "shellcide", "owner": "zer0x64", "url": "https://github.com/zer0x64/shellcide", "stars": 15, "language": "Rust", "description": "Shellcode IDE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Philippe Dugre", "cardId": "936bcc469125be85", "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2a3ee4707023", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-29T20:48:33Z", "archived": false, "topContributors": [ { "login": "zer0x64", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "type": "User" } ] }, { "repo": "dinosn/ghost-cve-2026-26980", "name": "ghost-cve-2026-26980", "owner": "dinosn", "url": "https://github.com/dinosn/ghost-cve-2026-26980", "stars": 15, "language": "Python", "description": "CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1988f5f3c6ae", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-18T02:55:16Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "mukul975/malware-sandbox-mcp", "name": "malware-sandbox-mcp", "owner": "mukul975", "url": "https://github.com/mukul975/Malware-Sandbox-mcp", "stars": 14, "language": "Python", "description": "Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK,", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mahipal", "cardId": "8653a26074607efd", "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7848fb667894", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-16T20:56:42Z", "archived": false, "topContributors": [ { "login": "mukul975", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4", "type": "User" } ] }, { "repo": "repnz/pe", "name": "pe", "owner": "repnz", "url": "https://github.com/repnz/PE", "stars": 14, "language": "C++", "description": "PE.Parser, PE.Dumper, PE.Loader", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1834322fbb35", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-09T08:43:22Z", "archived": false, "topContributors": [ { "login": "repnz", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "bartblaze/messageboxtests", "name": "messageboxtests", "owner": "bartblaze", "url": "https://github.com/bartblaze/MessageBoxTests", "stars": 14, "language": "C++", "description": "MessageBox files (EXE, DLL) for testing purposes.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bart", "cardId": "9b82391c60e5a30e", "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9e89a8344b1e", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-09T10:38:02Z", "archived": false, "topContributors": [ { "login": "bartblaze", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/3075118?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-32710", "name": "cve-2026-32710", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2026-32710", "stars": 14, "language": "Python", "description": "Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "10f6994c0b2f", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-06T11:41:57Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-protobufjs-ghsa-xq3m-2v4x-88gg", "name": "cve-protobufjs-ghsa-xq3m-2v4x-88gg", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-protobufjs-GHSA-xq3m-2v4x-88gg", "stars": 14, "language": "JavaScript", "description": "PoC for GHSA-xq3m-2v4x-88gg: Critical RCE in protobuf.js via code injection (CVSS 9.4)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e2bced00a65", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-18T16:23:49Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "fdzdev/subdomain-takeover-checker", "name": "subdomain-takeover-checker", "owner": "fdzdev", "url": "https://github.com/fdzdev/Subdomain-Takeover-Checker", "stars": 14, "language": "Python", "description": "Python tool for detecting subdomain takeover vulnerabilities by resolving CNAME records and checking for known error messages. It supports bulk domain scanning and logs detailed results for analysis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2d7e60b25780", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-02T07:23:40Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "th3xace/genavatar", "name": "genavatar", "owner": "th3xace", "url": "https://github.com/TH3xACE/genAvatar", "stars": 13, "language": "Shell", "description": "This script was developped to assist in SpearPhishing campaign during Red Team operations. It can be used to generate random name based on country of origin, sex and how common the combination of surn", "type": "tool", "lanes": [ "2" ], "author": { "name": "David B.", "cardId": "03d8b7e3e9fc8e79", "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7b7261784af6", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-02-06T18:10:45Z", "archived": false, "topContributors": [ { "login": "TH3xACE", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/44925796?v=4", "type": "User" } ] }, { "repo": "whokilleddb/cve-2022-26134-confluence-rce", "name": "cve-2022-26134-confluence-rce", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/CVE-2022-26134-Confluence-RCE", "stars": 13, "language": "Python", "description": "Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Execution via OGNL Injection ", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ecc38946bcfd", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-07-24T06:12:44Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" }, { "login": "royweisfeld", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35576623?v=4", "type": "User" } ] }, { "repo": "nshalabi/protectvss", "name": "protectvss", "owner": "nshalabi", "url": "https://github.com/nshalabi/ProtectVSS", "stars": 13, "language": "C++", "description": "PoC to protect volume shadow copies", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nader Shallabi", "cardId": "203fbcd5a6dd8cad", "avatar": "https://avatars.githubusercontent.com/u/8732745?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ab25cbb5a6f", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-19T14:15:19Z", "archived": false, "topContributors": [ { "login": "nshalabi", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/8732745?v=4", "type": "User" } ] }, { "repo": "pry0cc/lazy", "name": "lazy", "owner": "pry0cc", "url": "https://github.com/pry0cc/lazy", "stars": 13, "language": "Shell", "description": "This is a lazy enumeration script made to make bug bounty enum & pentest flyovers easy as cake!", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0639e35030aa", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-06-13T21:24:33Z", "archived": false, "topContributors": [] }, { "repo": "pry0cc/gitslap", "name": "gitslap", "owner": "pry0cc", "url": "https://github.com/pry0cc/GitSlap", "stars": 13, "language": "Ruby", "description": "Slap the hell outta GitHub by harvesting emails by crunching through commits. The Dope OSINT tool.", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "69ee61eeccc1", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-08-17T17:33:47Z", "archived": false, "topContributors": [ { "login": "pry0cc", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" } ] }, { "repo": "himanshudas/raap", "name": "raap", "owner": "himanshudas", "url": "https://github.com/himanshudas/RaaP", "stars": 13, "language": null, "description": "Recon as a Platform", "type": "tool", "lanes": [ "2" ], "author": { "name": "Himanshu Kumar Das", "cardId": "9ade21341bd3052f", "avatar": "https://avatars.githubusercontent.com/u/1238723?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3b865c741662", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-08-25T15:24:05Z", "archived": false, "topContributors": [ { "login": "himanshudas", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1238723?v=4", "type": "User" } ] }, { "repo": "mordavid/cve-2023-38831-winrar-exploit-generator-poc", "name": "cve-2023-38831-winrar-exploit-generator-poc", "owner": "mordavid", "url": "https://github.com/MorDavid/CVE-2023-38831-Winrar-Exploit-Generator-POC", "stars": 13, "language": "Python", "description": "This is a POC for the CVE-2023-3883 exploit targeting WinRAR up to 6.22. Modified some existing internet-sourced POCs by introducing greater dynamism and incorporated additional try-except blocks with", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6331e18d8c3c", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-31T15:07:51Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "wh1t3rh1n0/propecia.py", "name": "propecia.py", "owner": "wh1t3rh1n0", "url": "https://github.com/Wh1t3Rh1n0/propecia.py", "stars": 12, "language": "Python", "description": "A multi-threaded class C network scanner. Loosely based on propecia.c by Bind.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "82ec5d0eeb6e", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 1, "contributors": [], "pushedAt": "2014-06-17T18:46:06Z", "archived": false, "topContributors": [ { "login": "Michael-Allen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/26517004?v=4", "type": "User" } ] }, { "repo": "defparam/win_shellcode_builder", "name": "win_shellcode_builder", "owner": "defparam", "url": "https://github.com/defparam/win_shellcode_builder", "stars": 12, "language": "Dockerfile", "description": "Building Windows Shellcode in Linux", "type": "tool", "lanes": [ "2" ], "author": { "name": "Evan Custodio", "cardId": "83d3c70e2b0c9046", "avatar": "https://avatars.githubusercontent.com/u/6956742?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5be96bb923ee", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-23T17:38:49Z", "archived": false, "topContributors": [ { "login": "defparam", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/6956742?v=4", "type": "User" } ] }, { "repo": "boku7/librehealth-authrce", "name": "librehealth-authrce", "owner": "boku7", "url": "https://github.com/boku7/LibreHealth-authRCE", "stars": 12, "language": "Python", "description": "LibreHealth v2.0.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the hosting webserver via uploading a maliciously crafted im", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2787bbfae21e", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-19T07:47:01Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "calebstewart/offsec-exam", "name": "offsec-exam", "owner": "calebstewart", "url": "https://github.com/calebstewart/offsec-exam", "stars": 12, "language": "TeX", "description": "Template project for Offensive Security Exam Documentation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Caleb Stewart", "cardId": "ba74cf38708a6351", "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6f6863f31e88", "score": 13, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-02-25T19:09:19Z", "archived": false, "topContributors": [ { "login": "calebstewart", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/7529189?v=4", "type": "User" }, { "login": "trevorbryant", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11650184?v=4", "type": "User" } ] }, { "repo": "mattifestation/deviceguardbypassmitigationrules", "name": "deviceguardbypassmitigationrules", "owner": "mattifestation", "url": "https://github.com/mattifestation/DeviceGuardBypassMitigationRules", "stars": 116, "language": null, "description": "A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses", "type": "tool", "lanes": [ "1" ], "author": { "name": "mattifestation", "cardId": null }, "referencedBy": [ { "url": "https://oddvar.moe/2017/05/18/bypassing-application-whitelisting-with-bginfo/", "title": "Bypassing Application Whitelisting with BGInfo", "person": "Oddvar Moe" }, { "url": "https://oddvar.moe/2017/05/22/clarification-bginfo-4-22-applocker-still-vulnerable/", "title": "Clarification – BGInfo 4.22 – AppLocker still vulnerable", "person": "Oddvar Moe" } ], "referencedCount": 2, "id": "b01b117b07eb", "score": 12, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [ { "name": "Matt Nelson", "cardId": "7b09206035dfa59b", "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "login": "enigma0x3" } ], "pushedAt": "2017-05-27T16:26:49Z", "archived": false, "topContributors": [ { "login": "mattifestation", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1781087?v=4", "type": "User" }, { "login": "enigma0x3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6264733?v=4", "type": "User" } ] }, { "repo": "farazsth98/poc-cve-2025-38352", "name": "poc-cve-2025-38352", "owner": "farazsth98", "url": "https://github.com/farazsth98/poc-CVE-2025-38352", "stars": 114, "language": "C", "description": "This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used", "type": "tool", "lanes": [ "1" ], "author": { "name": "farazsth98", "cardId": null }, "referencedBy": [ { "url": "https://faith2dxy.xyz/2025-12-22/cve_2025_38352_analysis/", "title": "CVE-2025-38352 (Part 1) - In-the-wild Android Kernel Vulnerability Analysis + PoC", "person": "faith2dxy" }, { "url": "https://faith2dxy.xyz/2025-12-24/cve_2025_38352_analysis_part_2/", "title": "CVE-2025-38352 (Part 2) - Extending The Race Window Without a Kernel Patch", "person": "faith2dxy" } ], "referencedCount": 2, "id": "09b6e243d648", "score": 12, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-01-05T15:41:23Z", "archived": false, "topContributors": [ { "login": "farazsth98", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/25904081?v=4", "type": "User" }, { "login": "faith-zellic", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/152535693?v=4", "type": "User" } ] }, { "repo": "gmbnomis/uboot-mdb-dump", "name": "uboot-mdb-dump", "owner": "gmbnomis", "url": "https://github.com/gmbnomis/uboot-mdb-dump", "stars": 108, "language": "Python", "description": "", "type": "tool", "lanes": [ "1" ], "author": { "name": "gmbnomis", "cardId": null }, "referencedBy": [ { "url": "https://boschko.ca/hardware_hacking_yo_male_fertility/", "title": "Thanks Fo' Nut'in - Hacking YO's Medical IoT Sperm Tester", "person": "Boschko" }, { "url": "https://boredpentester.com/smart-doorbell-security-part-5-liteos-analysis/", "title": "Smart Doorbell Security (Part 5) (LiteOS analysis) - BoredPentester", "person": "boredpentester" } ], "referencedCount": 2, "id": "38936017c1f2", "score": 12, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-29T18:21:45Z", "archived": false, "topContributors": [ { "login": "gmbnomis", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6278695?v=4", "type": "User" } ] }, { "repo": "fox-it/acquire", "name": "acquire", "owner": "fox-it", "url": "https://github.com/fox-it/acquire", "id": "48a01b71100c", "stars": 123, "language": "Python", "description": "acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.", "type": "tool", "pushedAt": "2026-05-11T09:39:27Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 29, "topContributors": [ { "login": "Miauwkeru", "c": 42, "avatar": "https://avatars.githubusercontent.com/u/2276622?v=4", "type": "User" }, { "login": "pyrco", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/105293448?v=4", "type": "User" }, { "login": "cecinestpasunepipe", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/110607403?v=4", "type": "User" }, { "login": "Schamper", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/1254028?v=4", "type": "User" }, { "login": "Poeloe", "c": 16, "avatar": "https://avatars.githubusercontent.com/u/22234727?v=4", "type": "User" }, { "login": "twiggler", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/12800443?v=4", "type": "User" }, { "login": "qmadev", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/190383216?v=4", "type": "User" }, { "login": "Horofic", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/9864602?v=4", "type": "User" }, { "login": "Zawadidone", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/21525407?v=4", "type": "User" }, { "login": "lhaagsma", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/6630974?v=4", "type": "User" }, { "login": "Matthijsy", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/5302372?v=4", "type": "User" }, { "login": "JSCU-CNI", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/121175071?v=4", "type": "User" }, { "login": "raverburg", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/177830423?v=4", "type": "User" }, { "login": "respondersGY", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/218940752?v=4", "type": "User" }, { "login": "william-billaud", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23636016?v=4", "type": "User" }, { "login": "reece394", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31659691?v=4", "type": "User" }, { "login": "otnxSl", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/171164394?v=4", "type": "User" }, { "login": "michoebey", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/169364167?v=4", "type": "User" }, { "login": "larsbehrens1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/157381144?v=4", "type": "User" }, { "login": "Wouter-Jansen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/113423245?v=4", "type": "User" }, { "login": "tobraha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/37032081?v=4", "type": "User" }, { "login": "rickvandreunen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117085693?v=4", "type": "User" }, { "login": "OlafHaalstra", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6420723?v=4", "type": "User" }, { "login": "ruzzle", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3183991?v=4", "type": "User" }, { "login": "Paradoxis", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6770124?v=4", "type": "User" }, { "login": "joost-j", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12032793?v=4", "type": "User" }, { "login": "janstarke", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/7724055?v=4", "type": "User" }, { "login": "DevJoost", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/105648585?v=4", "type": "User" }, { "login": "0xAlcidius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/89665332?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/doublepulsar-usermode-injector", "name": "doublepulsar-usermode-injector", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/doublepulsar-usermode-injector", "id": "e4112295d6e4", "stars": 123, "language": "C", "description": "A utility to use the usermode shellcode from the DOUBLEPULSAR payload to reflectively load an arbitrary DLL into another process, for use in testing detection techniques or other security research.", "type": "tool", "pushedAt": "2017-06-27T15:32:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "fox-it/cobaltstrike-extraneous-space", "name": "cobaltstrike-extraneous-space", "owner": "fox-it", "url": "https://github.com/fox-it/cobaltstrike-extraneous-space", "id": "bd88dd5bfc0f", "stars": 121, "language": null, "description": "Historical list of {Cobalt Strike,NanoHTTPD} servers", "type": "tool", "pushedAt": "2019-04-30T09:08:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "fox-srt", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/9809789?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/cve-2018-4121", "name": "CVE-2018-4121", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/CVE-2018-4121", "id": "d1011a56515d", "stars": 120, "language": "JavaScript", "description": "macOS 10.13.3 (17D47) Safari Wasm Exploit ", "type": "tool", "pushedAt": "2018-04-19T11:20:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mwruser", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/38528263?v=4", "type": "User" } ] }, { "repo": "horizon3ai/proxyshell", "name": "proxyshell", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/proxyshell", "id": "1b6a7590b66a", "stars": 120, "language": "Python", "description": "Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207", "type": "tool", "pushedAt": "2023-08-25T22:42:24Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "scopedsecurity", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" }, { "login": "ALfY", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5733189?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/ntlmrecon", "name": "NTLMRecon", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/NTLMRecon", "id": "5dcc53f972a0", "stars": 118, "language": "Go", "description": "A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.", "type": "tool", "pushedAt": "2026-03-31T08:50:43Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "UNC1739", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" }, { "login": "TheRealXaiL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/5483544?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/wmipersistence", "name": "WMIPersistence", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/WMIPersistence", "id": "d32eff6720e0", "stars": 113, "language": "C#", "description": "WMI Event Subscription Persistence in C#", "type": "tool", "pushedAt": "2019-05-29T09:48:46Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "horizon3ai/cve-2023-27524", "name": "CVE-2023-27524", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-27524", "id": "6764cab11f04", "stars": 112, "language": "Python", "description": "Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset", "type": "tool", "pushedAt": "2023-09-09T01:20:49Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nvn1729", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/348774?v=4", "type": "User" } ] }, { "repo": "cornerpirate/java-stager", "name": "java-stager", "owner": "cornerpirate", "url": "https://github.com/cornerpirate/java-stager", "id": "6e1754971fee", "stars": 108, "language": "Java", "description": "A PoC Java Stager which can download, compile, and execute a Java file in memory.", "type": "tool", "pushedAt": "2018-08-06T21:36:12Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Paul Ritchie", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "cornerpirate", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4266127?v=4", "type": "User" } ] }, { "repo": "netspi/betafast", "name": "BetaFast", "owner": "NetSPI", "url": "https://github.com/NetSPI/BetaFast", "id": "5fecc0516324", "stars": 107, "language": "C#", "description": "Vulnerable thick client applications used as examples in the Introduction to Hacking Desktop Applications blog series", "type": "tool", "pushedAt": "2024-01-09T19:06:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Austin-Altmann", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/38371172?v=4", "type": "User" } ] }, { "repo": "bishopfox/cve-2024-21762-check", "name": "cve-2024-21762-check", "owner": "BishopFox", "url": "https://github.com/BishopFox/cve-2024-21762-check", "id": "496fdd5a7c7d", "stars": 107, "language": "Python", "description": "Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762", "type": "tool", "pushedAt": "2024-07-05T09:37:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bf-ryan", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/132302799?v=4", "type": "User" } ] }, { "repo": "nccgroup/berserko", "name": "Berserko", "owner": "nccgroup", "url": "https://github.com/nccgroup/Berserko", "id": "83ac910e78fa", "stars": 107, "language": "Java", "description": "Burp Suite extension to perform Kerberos authentication", "type": "tool", "pushedAt": "2024-06-28T10:43:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rtt-ncc", "c": 66, "avatar": "https://avatars.githubusercontent.com/u/8929248?v=4", "type": "User" }, { "login": "rt98654321", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/39307470?v=4", "type": "User" } ] }, { "repo": "nccgroup/asafw", "name": "asafw", "owner": "nccgroup", "url": "https://github.com/nccgroup/asafw", "id": "b24213c169c2", "stars": 107, "language": "Shell", "description": "Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]", "type": "tool", "pushedAt": "2022-06-13T03:25:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Aaron Adams", "cardId": "daa23f5862faae02", "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "login": "fidgetingbits" }, { "name": "Cedric Halbronn", "cardId": "0e9cf6d9bec332e9", "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "login": "saidelike" } ], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "fidgetingbits", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/13679876?v=4", "type": "User" }, { "login": "saidelike", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/387346?v=4", "type": "User" }, { "login": "cq674350529", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/13868458?v=4", "type": "User" }, { "login": "joe-graham", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11893346?v=4", "type": "User" } ] }, { "repo": "optiv/microsoft365_devicephish", "name": "Microsoft365_devicePhish", "owner": "optiv", "url": "https://github.com/optiv/Microsoft365_devicePhish", "id": "e312b5c324f6", "stars": 106, "language": "Python", "description": "A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow ", "type": "tool", "pushedAt": "2021-08-17T16:09:34Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "bigb0sss", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/49355913?v=4", "type": "User" } ] }, { "repo": "nccgroup/hashcrack", "name": "hashcrack", "owner": "nccgroup", "url": "https://github.com/nccgroup/hashcrack", "id": "846bf02f1824", "stars": 101, "language": "Python", "description": "Guesses hash types, picks some sensible dictionaries and rules for hashcat", "type": "tool", "pushedAt": "2023-10-26T12:43:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "blacktraffic", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/40890169?v=4", "type": "User" }, { "login": "lllama", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/598411?v=4", "type": "User" }, { "login": "mpettitt", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/373181?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/browser-externalc2", "name": "Browser-ExternalC2", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/Browser-ExternalC2", "id": "1c4afc7a21d3", "stars": 100, "language": "C#", "description": "External C2 Using IE COM Objects", "type": "tool", "pushedAt": "2019-02-24T02:10:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Rio Sherri", "cardId": "2f203c5ba8837f03", "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "login": "0x09AL" } ], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x09AL", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/25826294?v=4", "type": "User" } ] }, { "repo": "synacktiv/cve-2024-43468", "name": "CVE-2024-43468", "owner": "synacktiv", "url": "https://github.com/synacktiv/CVE-2024-43468", "id": "db1043e216e9", "stars": 96, "language": "Python", "description": "", "type": "tool", "pushedAt": "2026-04-07T09:32:47Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "idem-s1n", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/99683413?v=4", "type": "User" } ] }, { "repo": "outflanknl/seccomp-notify-injection", "name": "seccomp-notify-injection", "owner": "outflanknl", "url": "https://github.com/outflanknl/seccomp-notify-injection", "id": "a83f9b21cc05", "stars": 95, "language": "C", "description": "Linux Process Injection via Seccomp Notifier", "type": "tool", "pushedAt": "2025-12-09T18:07:13Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "nccgroup/kubetcd", "name": "kubetcd", "owner": "nccgroup", "url": "https://github.com/nccgroup/kubetcd", "id": "a4e824ba42eb", "stars": 94, "language": "Go", "description": "Post-exploit a compromised etcd, gain persistence and remote shell to nodes.", "type": "tool", "pushedAt": "2024-05-07T13:12:15Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "ltoroncc", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/149487076?v=4", "type": "User" }, { "login": "neonbunny", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6201399?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "horizon3ai/backup_dc_registry", "name": "backup_dc_registry", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/backup_dc_registry", "id": "3694f199ffb0", "stars": 94, "language": "Python", "description": "A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY", "type": "tool", "pushedAt": "2022-02-16T18:34:14Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "includesecurity/c2-vulnerabilities", "name": "c2-vulnerabilities", "owner": "IncludeSecurity", "url": "https://github.com/IncludeSecurity/c2-vulnerabilities", "id": "cb9ddee83ec5", "stars": 93, "language": "Python", "description": "PoCs of RCEs against open source C2 servers", "type": "tool", "pushedAt": "2024-09-28T14:51:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Include Security", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hyperreality", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/6343433?v=4", "type": "User" } ] }, { "repo": "sensepost/offensive-rpc", "name": "offensive-rpc", "owner": "sensepost", "url": "https://github.com/sensepost/offensive-rpc", "id": "2bdbeffc0a27", "stars": 90, "language": "C++", "description": "Offensive RPC PoC", "type": "tool", "pushedAt": "2021-09-29T09:24:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Dfte", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/23189983?v=4", "type": "User" } ] }, { "repo": "sensepost/bloatware-pwn", "name": "bloatware-pwn", "owner": "sensepost", "url": "https://github.com/sensepost/bloatware-pwn", "id": "be8b2743047c", "stars": 88, "language": "C#", "description": "LPE / RCE Exploits for various vulnerable \"Bloatware\" products", "type": "tool", "pushedAt": "2025-08-05T21:33:15Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "leonjza", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" } ] }, { "repo": "nixintel/sansosintsummit2024", "name": "sansosintsummit2024", "owner": "nixintel", "url": "https://github.com/nixintel/sansosintsummit2024", "stars": 11, "language": null, "description": "List of links and resources referred to in my SANS OSINT Summit 2024 Talk \"OSINT On The Russian Internet\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nixintel (Nick Furneaux)", "cardId": "5c6363d58afa3660", "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cff6265e0fe5", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-02-29T22:11:42Z", "archived": false, "topContributors": [ { "login": "nixintel", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4", "type": "User" } ] }, { "repo": "hakluke/xss", "name": "xss", "owner": "hakluke", "url": "https://github.com/hakluke/XSS", "stars": 11, "language": "JavaScript", "description": "Xss payloads", "type": "tool", "lanes": [ "2" ], "author": { "name": "Luke Stephens", "cardId": "9ac3ddb06c6f3825", "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ce91c2a1518f", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-02-27T09:37:27Z", "archived": false, "topContributors": [ { "login": "hakluke", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13975395?v=4", "type": "User" } ] }, { "repo": "boku7/gscms-customjs-csrf2xss2rce", "name": "gscms-customjs-csrf2xss2rce", "owner": "boku7", "url": "https://github.com/boku7/gsCMS-CustomJS-Csrf2Xss2Rce", "stars": 11, "language": "Python", "description": "GetSimple CMS Custom JS Plugin Exploit RCE Chain", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b1200213d4fd", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:57:17Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "boku7/cve-2020-23839", "name": "cve-2020-23839", "owner": "boku7", "url": "https://github.com/boku7/CVE-2020-23839", "stars": 11, "language": "Python", "description": "Public PoC Disclosure for CVE-2020-23839 - GetSimple CMS v3.3.16 suffers from a Reflected XSS on the Admin Login Portal", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d301efc6425d", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-30T00:50:21Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-42779", "name": "cve-2026-42779", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2026-42779", "stars": 11, "language": "Java", "description": "CVE-2026-42779: Apache MINA AbstractIoBuffer.resolveClass() deserialization filter bypass to RCE (CVSS 9.8)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "39933199cd67", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-02T08:30:15Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/citrix_cve-2023-4966", "name": "citrix_cve-2023-4966", "owner": "dinosn", "url": "https://github.com/dinosn/citrix_cve-2023-4966", "stars": 11, "language": "Python", "description": "Citrix CVE-2023-4966 from assetnote modified for parallel and file handling", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "373515328367", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-25T04:30:14Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/sqltrees", "name": "sqltrees", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/sqltrees", "stars": 11, "language": "Java", "description": "Developper-proof prevention of SQL injection (java library)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fae4f4bd255e", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-01-04T08:29:09Z", "archived": false, "topContributors": [ { "login": "jcoocd", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/58590224?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "joasasantos/padzip-evader", "name": "padzip-evader", "owner": "joasasantos", "url": "https://github.com/JoasASantos/PadZip-Evader", "stars": 11, "language": "Python", "description": "PadZip Evader - Binary padding and ZIP compression tool for educational anti-analysis research. Inflates executables and creates highly compressed archives to demonstrate AV/EDR evasion techniques.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b5682b76f919", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-03T18:43:51Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "3lp4tr0n/cve-2023-27470_exercise", "name": "cve-2023-27470_exercise", "owner": "3lp4tr0n", "url": "https://github.com/3lp4tr0n/CVE-2023-27470_Exercise", "stars": 10, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Andrew Oliveau", "cardId": "20c11d79521effac", "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "32e28cc4d68d", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-09-11T09:00:50Z", "archived": false, "topContributors": [ { "login": "3lp4tr0n", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/32691065?v=4", "type": "User" } ] }, { "repo": "frkngksl/fixedinvokemimikatz", "name": "fixedinvokemimikatz", "owner": "frkngksl", "url": "https://github.com/frkngksl/FixedInvokeMimikatz", "stars": 10, "language": "PowerShell", "description": "Fixed version of PowerSploit implemented Invoke-Mimikatz", "type": "tool", "lanes": [ "2" ], "author": { "name": "Furkan Göksel", "cardId": "2648e55e37f6de10", "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "89d77886be1b", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-04T11:58:25Z", "archived": false, "topContributors": [ { "login": "frkngksl", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26549173?v=4", "type": "User" } ] }, { "repo": "datalux/javabackdoor", "name": "javabackdoor", "owner": "datalux", "url": "https://github.com/Datalux/JavaBackdoor", "stars": 10, "language": "Java", "description": "A simple backdoor written in Java", "type": "tool", "lanes": [ "2" ], "author": { "name": "Giuseppe Criscione", "cardId": "26e85b3e45120301", "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "65b5cdb5fa79", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-05-14T17:11:36Z", "archived": false, "topContributors": [ { "login": "Datalux", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4", "type": "User" } ] }, { "repo": "pry0cc/uniview-password-disclosure", "name": "uniview-password-disclosure", "owner": "pry0cc", "url": "https://github.com/pry0cc/uniview-password-disclosure", "stars": 10, "language": "Python", "description": "A cleaned up version of 43999.py since it was borked on Exploit-DB - ported to py3.", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c3957c5f131b", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-23T23:38:44Z", "archived": false, "topContributors": [ { "login": "pry0cc", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" } ] }, { "repo": "projectdiscovery/templates-stats", "name": "templates-stats", "owner": "projectdiscovery", "url": "https://github.com/projectdiscovery/templates-stats", "stars": 10, "language": "Go", "description": "A utility for extracting various meta data from nuclei-templates.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nuclei by ProjectDiscovery", "cardId": "8d4016c586ed4077", "avatar": "https://avatars.githubusercontent.com/u/50994705?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ff8b2b2e0ab6", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 8, "contributors": [ { "name": "Sandeep Singh", "cardId": "18b4a60022c24719", "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "login": "ehsandeep" } ], "pushedAt": "2024-05-12T16:56:43Z", "archived": false, "topContributors": [ { "login": "RamanaReddy0M", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/90540245?v=4", "type": "User" }, { "login": "ehsandeep", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/8293321?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "forgedhallpass", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/13679401?v=4", "type": "User" }, { "login": "Ice3man543", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/22318055?v=4", "type": "User" }, { "login": "Mzack9999", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/13421144?v=4", "type": "User" }, { "login": "princechaddha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/16654365?v=4", "type": "User" }, { "login": "sweep-ai-deprecated[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/307814?v=4", "type": "Bot" } ] }, { "repo": "wh1t3rh1n0/pentest-scripts-2", "name": "pentest-scripts-2", "owner": "wh1t3rh1n0", "url": "https://github.com/Wh1t3Rh1n0/pentest-scripts-2", "stars": 10, "language": "Shell", "description": "More miscellaneous, one-off scripts I created while red-teaming and pentesting.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Allen", "cardId": "cee2b0a7bf7afb37", "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "52e70e7c58c6", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-12T05:14:43Z", "archived": false, "topContributors": [ { "login": "Wh1t3Rh1n0", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/7121583?v=4", "type": "User" } ] }, { "repo": "nshalabi/runshell64", "name": "runshell64", "owner": "nshalabi", "url": "https://github.com/nshalabi/RunShell64", "stars": 9, "language": "C++", "description": "Small utility to help in x86/x64 shellcode analysis and debugging", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nader Shallabi", "cardId": "203fbcd5a6dd8cad", "avatar": "https://avatars.githubusercontent.com/u/8732745?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "474e8d91e6db", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-19T14:17:19Z", "archived": false, "topContributors": [ { "login": "nshalabi", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/8732745?v=4", "type": "User" } ] }, { "repo": "nicholasaleks/nucleigpt", "name": "nucleigpt", "owner": "nicholasaleks", "url": "https://github.com/nicholasaleks/NucleiGPT", "stars": 9, "language": "HTML", "description": "Automated Nuclei Template Generation Tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Aleks", "cardId": "28d1808f86ede3c0", "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fdd07adc4492", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-10-07T15:06:30Z", "archived": false, "topContributors": [ { "login": "nicholasaleks", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4", "type": "User" } ] }, { "repo": "struct/forkguard", "name": "forkguard", "owner": "struct", "url": "https://github.com/struct/forkguard", "stars": 9, "language": "C", "description": "Fork Guard POC - An experimental exploit mitigation for daemons that fork()", "type": "tool", "lanes": [ "2" ], "author": { "name": "Chris Rohlf", "cardId": "3714e85329c49ff8", "avatar": "https://avatars.githubusercontent.com/u/36181?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "15c084e27c99", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-26T14:36:41Z", "archived": false, "topContributors": [ { "login": "struct", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/36181?v=4", "type": "User" } ] }, { "repo": "secfigo/exploit-dev-series", "name": "exploit-dev-series", "owner": "secfigo", "url": "https://github.com/secfigo/exploit-dev-series", "stars": 9, "language": "Python", "description": "Exploit research series - Null Singapore workshop", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mohammed A", "cardId": "7edfd9dd2e7f70c9", "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9d12c7a80d08", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2016-05-03T07:10:49Z", "archived": false, "topContributors": [ { "login": "secfigo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4", "type": "User" } ] }, { "repo": "koutto/pentest-scripts", "name": "pentest-scripts", "owner": "koutto", "url": "https://github.com/koutto/pentest-scripts", "stars": 9, "language": "Java", "description": "Various pentest scripts", "type": "tool", "lanes": [ "2" ], "author": { "name": "Koutto", "cardId": "a2c1c50a17fda9a6", "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4ac6b9a83799", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-04-13T14:44:05Z", "archived": false, "topContributors": [ { "login": "koutto", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26327909?v=4", "type": "User" } ] }, { "repo": "boku7/getsimple-smtpplugin-csrf2rce", "name": "getsimple-smtpplugin-csrf2rce", "owner": "boku7", "url": "https://github.com/boku7/GetSimple-SmtpPlugin-CSRF2RCE", "stars": 9, "language": "Python", "description": "GetSimple CMS My SMTP Contact Plugin <= v1.1.1 - CSRF to RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "68156c686e70", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-08T15:58:41Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "dinosn/cluster-bus-takeover", "name": "cluster-bus-takeover", "owner": "dinosn", "url": "https://github.com/dinosn/cluster-bus-takeover", "stars": 9, "language": "Python", "description": "Redis Cluster Bus Full Takeover — Lab & PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0773656ecc1c", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-12T03:23:32Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "x86byte/ropme", "name": "ropme", "owner": "x86byte", "url": "https://github.com/x86byte/ROPme", "stars": 9, "language": "Python", "description": "Windows Exploit development : Bypass Data Execution Prevention (DEP) using ROP chains manually hard code", "type": "tool", "lanes": [ "2" ], "author": { "name": "x86byte", "cardId": "ac9359867d6fdf55", "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "835781440569", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-05T05:06:09Z", "archived": false, "topContributors": [ { "login": "x86byte", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/111459558?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-1555", "name": "cve-2026-1555", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-1555", "stars": 9, "language": "Python", "description": "WebStack <= 1.2024 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ce04402c6196", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-17T22:05:09Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-6934", "name": "cve-2025-6934", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-6934", "stars": 9, "language": "Python", "description": "Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d5960b887dae", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-01T13:29:05Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-2005", "name": "cve-2025-2005", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-2005", "stars": 9, "language": null, "description": " WordPress Front End Users Plugin <= 3.2.32 is vulnerable to Arbitrary File Upload ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "094395a3869c", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-02T03:45:34Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "seifreed/dll-downloader", "name": "dll-downloader", "owner": "seifreed", "url": "https://github.com/seifreed/DLL-Downloader", "stars": 9, "language": "Python", "description": "DLL-Downloader is a Python tool that searches and downloads DLL files from trusted sources and can optionally scan them using VirusTotal. It works as both a CLI tool and a Python library", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d6719a287cc3", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-29T06:24:53Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 123, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "whokilleddb/ghosted", "name": "ghosted", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/ghosted", "stars": 8, "language": "C", "description": "A Process Ghosting PoC written in C", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e058f84a6798", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 27, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-21T19:43:13Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/ludus_bloodhound_ce", "name": "ludus_bloodhound_ce", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/ludus_bloodhound_ce", "stars": 8, "language": "Jinja", "description": "An Ansible Role that installs Bloodhound CE on a Debian based system.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "908deea6636c", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [ { "name": "Beyviel David", "cardId": "1a263eb5b2396f88", "avatar": "https://avatars.githubusercontent.com/u/90155329?v=4", "login": "bagelByt3s" } ], "pushedAt": "2026-02-06T15:31:31Z", "archived": false, "topContributors": [ { "login": "ar0dd", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/42455358?v=4", "type": "User" }, { "login": "kernel-sanders", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" }, { "login": "bagelByt3s", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/90155329?v=4", "type": "User" } ] }, { "repo": "patrickmgarrity/free-vuln-tools", "name": "free-vuln-tools", "owner": "patrickmgarrity", "url": "https://github.com/patrickmgarrity/Free-Vuln-Tools", "stars": 8, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Patrick Garrity", "cardId": "0c84a37c5afebb57", "avatar": "https://avatars.githubusercontent.com/u/11055769?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8c23cf939cc4", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-01-16T13:26:12Z", "archived": false, "topContributors": [ { "login": "patrickmgarrity", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/11055769?v=4", "type": "User" } ] }, { "repo": "erbbysam/docker-vuln-vhosts", "name": "docker-vuln-vhosts", "owner": "erbbysam", "url": "https://github.com/erbbysam/docker-vuln-vhosts", "stars": 8, "language": "Dockerfile", "description": "VirSecCon2020 presentation support material", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sam Erb", "cardId": "20dcce207cdbfec6", "avatar": "https://avatars.githubusercontent.com/u/3687016?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "82605ac1a1cb", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-26T04:16:15Z", "archived": false, "topContributors": [ { "login": "erbbysam", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/3687016?v=4", "type": "User" } ] }, { "repo": "virtualalllocex/create_thread-inline_assembly_x86_fibers", "name": "create_thread-inline_assembly_x86_fibers", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/Create_Thread-Inline_Assembly_x86_Fibers", "stars": 8, "language": "C++", "description": "This POC provides the ability to execute x86 shellcode in the form of a .bin file based on x86 inline assembly and execution over fibers", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6a2b3a28b1c1", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-17T03:43:53Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "1zrr4h/cve-2021-22005", "name": "cve-2021-22005", "owner": "1zrr4h", "url": "https://github.com/1ZRR4H/CVE-2021-22005", "stars": 8, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Germán Fernández", "cardId": "4ed6194fa94d83bb", "avatar": "https://avatars.githubusercontent.com/u/42696639?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a70c6f2e87f2", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-23T00:10:18Z", "archived": false, "topContributors": [ { "login": "1ZRR4H", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/42696639?v=4", "type": "User" } ] }, { "repo": "arizvisa/pydbgeng", "name": "pydbgeng", "owner": "arizvisa", "url": "https://github.com/arizvisa/pydbgeng", "stars": 8, "language": "C++", "description": "A fork of flierlu's pydbgext code which enables full python access to the entire dbgeng COM object. This exposes the majority of dbgeng.dll such as network (dbgsrv) support and kernel debugging to an ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ali Rizvi-Santiago", "cardId": "507e20e060bbc5a9", "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c495125e447c", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-09-30T15:04:26Z", "archived": false, "topContributors": [ { "login": "arizvisa", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/2035497?v=4", "type": "User" } ] }, { "repo": "shuvonsec/cve-hunter", "name": "cve-hunter", "owner": "shuvonsec", "url": "https://github.com/shuvonsec/cve-hunter", "stars": 8, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Md Shariar Shanaz Shuvon", "cardId": "6cf9e09eb4b1508c", "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "55f176d16aaf", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-13T11:24:57Z", "archived": false, "topContributors": [ { "login": "shuvonsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4", "type": "User" } ] }, { "repo": "m14r41/clickjacking-poc", "name": "clickjacking-poc", "owner": "m14r41", "url": "https://github.com/m14r41/Clickjacking-Poc", "stars": 8, "language": "HTML", "description": "A simple tool to generate Clickjacking PoC HTML pages for testing iframe-based UI redress attacks and frame protection misconfigurations.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Madhurendra kumar", "cardId": "72f08c5be09cd0d7", "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eb17359bfce3", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-26T14:49:40Z", "archived": false, "topContributors": [ { "login": "m14r41", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/95265573?v=4", "type": "User" } ] }, { "repo": "wh04m1001/vsscopy", "name": "vsscopy", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/VSSCopy", "stars": 8, "language": "C++", "description": "Small and dirty PoC for CVE-2021-36934", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9e73eb34e682", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-07-22T02:15:27Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "dinosn/drupal-sa-core-2026-004-lab", "name": "drupal-sa-core-2026-004-lab", "owner": "dinosn", "url": "https://github.com/dinosn/drupal-sa-core-2026-004-lab", "stars": 8, "language": "Python", "description": "Drupal SA-CORE-2026-004 (PostgreSQL Entity Query SQLi via JSON:API filter array keys) — reproduction lab + generic detection PoC + line-by-line analysis. Patch available upstream.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9a6e83fd2470", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-22T14:57:14Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-34197", "name": "cve-2026-34197", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2026-34197", "stars": 8, "language": "Python", "description": "CVE-2026-34197 activemq PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c247c6bd1b92", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-08T09:26:09Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-11749", "name": "cve-2025-11749", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-11749", "stars": 8, "language": "Python", "description": "AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "80988f1ffb2e", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-08T03:39:57Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-3102", "name": "cve-2025-3102", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-3102", "stars": 8, "language": "Python", "description": "Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2e675a9943c1", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-14T11:12:07Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "joasasantos/shellcode-runners-examples", "name": "shellcode-runners-examples", "owner": "joasasantos", "url": "https://github.com/JoasASantos/Shellcode-Runners-Examples", "stars": 8, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bbc206aaca42", "score": 12, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-04T02:11:41Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "broadcom/aeolus", "name": "aeolus", "owner": "broadcom", "url": "https://github.com/Broadcom/aeolus", "stars": 57, "language": "C", "description": "Bootloader for bcm3384", "type": "tool", "lanes": [ "1" ], "author": { "name": "broadcom", "cardId": null }, "referencedBy": [ { "url": "https://quentinkaiser.be/security/2021/03/09/voodoo/", "title": "VOOdoo - Remotely Compromising VOO Cable Modems", "person": "Quentin Kaiser" }, { "url": "https://quentinkaiser.be/security/2021/04/25/orange/", "title": "A Clockwork Orange - Remotely Compromising Orange Belgium Cable Modems", "person": "Quentin Kaiser" } ], "referencedCount": 2, "id": "48e5745eeb4d", "score": 11, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 1, "contributorCount": 2, "contributors": [], "pushedAt": "2017-05-24T22:15:07Z", "archived": false, "topContributors": [ { "login": "cernekee", "c": 49, "avatar": "https://avatars.githubusercontent.com/u/1631864?v=4", "type": "User" }, { "login": "ffainelli", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/1110044?v=4", "type": "User" } ] }, { "repo": "gdbinit/gdb-ng", "name": "gdb-ng", "owner": "gdbinit", "url": "https://github.com/gdbinit/gdb-ng", "stars": 57, "language": "C", "description": "Apple's gdb fork with some fixes and enhancements", "type": "tool", "lanes": [ "1" ], "author": { "name": "gdbinit", "cardId": null }, "referencedBy": [ { "url": "https://reverse.put.as/2013/11/08/one-small-patch-for-gdb-one-giant-leap-for-reversers/", "title": "One small patch for GDB, one giant leap for reversers!", "person": "Pedro Vilaça" }, { "url": "https://reverse.put.as/2013/03/20/how-to-compile-gdb-in-mountain-lion-updated/", "title": "How to compile GDB in Mountain Lion (updated)", "person": "Pedro Vilaça" } ], "referencedCount": 2, "id": "92c378f09464", "score": 11, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2013-12-16T02:56:38Z", "archived": false, "topContributors": [ { "login": "gdbinit", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/859134?v=4", "type": "User" } ] }, { "repo": "synacktiv/cve-2024-45409", "name": "CVE-2024-45409", "owner": "synacktiv", "url": "https://github.com/synacktiv/CVE-2024-45409", "id": "3a7d9fad5162", "stars": 83, "language": "Python", "description": "Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit", "type": "tool", "pushedAt": "2024-10-07T11:50:17Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0x4144", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/51817778?v=4", "type": "User" } ] }, { "repo": "nccgroup/ps2", "name": "PS2", "owner": "nccgroup", "url": "https://github.com/nccgroup/PS2", "id": "e19e6747a6ee", "stars": 82, "language": "PowerShell", "description": "A port scanner written purely in PowerShell.", "type": "tool", "pushedAt": "2023-09-13T14:49:31Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "JamesConlan96", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/10931523?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/cve-2016-7255", "name": "CVE-2016-7255", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/CVE-2016-7255", "id": "286e0d0b05dd", "stars": 81, "language": "C++", "description": "An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit", "type": "tool", "pushedAt": "2017-03-09T23:00:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "sam-b", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/997395?v=4", "type": "User" } ] }, { "repo": "cornerpirate/reportcompiler", "name": "ReportCompiler", "owner": "cornerpirate", "url": "https://github.com/cornerpirate/ReportCompiler", "id": "fc3eacccc983", "stars": 80, "language": "Batchfile", "description": "A tool for importing vulnerability scanner data and then allowing you to manipulate the risks, affected hosts, and create risk ordered output.", "type": "tool", "pushedAt": "2024-06-11T14:19:01Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Paul Ritchie", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "paulrpentest", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69257153?v=4", "type": "User" }, { "login": "cornerpirate", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/4266127?v=4", "type": "User" } ] }, { "repo": "fortra/cve-2024-6769", "name": "CVE-2024-6769", "owner": "fortra", "url": "https://github.com/fortra/CVE-2024-6769", "id": "49d436a6b26b", "stars": 78, "language": "C++", "description": "Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)", "type": "tool", "pushedAt": "2024-09-29T21:58:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "ricnar456", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/8556494?v=4", "type": "User" }, { "login": "el-usuario", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/127450235?v=4", "type": "User" } ] }, { "repo": "netspi/silkwasm", "name": "silkwasm", "owner": "NetSPI", "url": "https://github.com/NetSPI/silkwasm", "id": "08f023ab2bd6", "stars": 77, "language": "Go", "description": "HTML Smuggling with Web Assembly", "type": "tool", "pushedAt": "2024-02-20T18:20:14Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kopp0ut", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/36168644?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/intractablegiraffe", "name": "INTRACTABLEGIRAFFE", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/INTRACTABLEGIRAFFE", "id": "d4fa97ed616a", "stars": 77, "language": "C", "description": "A Proof of Concept Rootkit Demonstrating Keylogging and Virtual File System (VFS) Capabilities", "type": "tool", "pushedAt": "2022-09-21T13:46:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "UNC1739", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/n1qlmap", "name": "N1QLMap", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/N1QLMap", "id": "e30bda9807d3", "stars": 76, "language": "Python", "description": "The tool exfiltrates data from Couchbase database by exploiting N1QL injection vulnerabilities.", "type": "tool", "pushedAt": "2020-09-02T11:45:21Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "theowni", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/10147168?v=4", "type": "User" } ] }, { "repo": "synacktiv/windows_kernel_shadow_stack", "name": "windows_kernel_shadow_stack", "owner": "synacktiv", "url": "https://github.com/synacktiv/windows_kernel_shadow_stack", "id": "9c2597f914eb", "stars": 75, "language": "C", "description": "Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.", "type": "tool", "pushedAt": "2025-06-02T12:57:03Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "us3r-syn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/211472337?v=4", "type": "User" } ] }, { "repo": "nettitude/dllinjection", "name": "DLLInjection", "owner": "nettitude", "url": "https://github.com/nettitude/DLLInjection", "id": "74bad6d4a35a", "stars": 75, "language": "C++", "description": "DLL Injection Library & Tools", "type": "tool", "pushedAt": "2016-07-05T14:48:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "Coder666", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/17981928?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/sharpgpo-remoteaccesspolicies", "name": "SharpGPO-RemoteAccessPolicies", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/SharpGPO-RemoteAccessPolicies", "id": "c5bb9f45eaad", "stars": 73, "language": "C#", "description": "A C# tool for enumerating remote access policies through group policy.", "type": "tool", "pushedAt": "2019-04-18T15:28:50Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "panagioto", "c": 20, "avatar": "https://avatars.githubusercontent.com/u/2184401?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-27532", "name": "CVE-2023-27532", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-27532", "id": "022a2dd8ed9d", "stars": 73, "language": "C#", "description": "POC for Veeam Backup and Replication CVE-2023-27532", "type": "tool", "pushedAt": "2023-03-28T18:21:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hrsman1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" } ] }, { "repo": "nccgroup/mtk_bp", "name": "mtk_bp", "owner": "nccgroup", "url": "https://github.com/nccgroup/mtk_bp", "id": "b01928144772", "stars": 72, "language": "Python", "description": "MediaTek BP firmware tools", "type": "tool", "pushedAt": "2026-06-04T19:13:59Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "jamchamb", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/7306764?v=4", "type": "User" }, { "login": "OxB0", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/153207589?v=4", "type": "User" } ] }, { "repo": "ghostpack/ragnarok", "name": "RAGnarok", "owner": "GhostPack", "url": "https://github.com/GhostPack/RAGnarok", "id": "6a9a1c9ba4c5", "stars": 70, "language": "Python", "description": "A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.", "type": "tool", "pushedAt": "2025-08-04T19:22:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "GhostPack", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Will Schroeder", "cardId": "30a7013c8e637665", "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "login": "HarmJ0y" } ], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "HarmJ0y", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/5504523?v=4", "type": "User" }, { "login": "au70ma70n", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/168219140?v=4", "type": "User" } ] }, { "repo": "bishopfox/bigip-scanner", "name": "bigip-scanner", "owner": "BishopFox", "url": "https://github.com/BishopFox/bigip-scanner", "id": "83e8783cb57d", "stars": 70, "language": "Python", "description": "Determine the running software version of a remote F5 BIG-IP management interface.", "type": "tool", "pushedAt": "2024-01-03T02:26:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "noperator", "cardId": "96f76a8653f73d2f", "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "login": "noperator" } ], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "noperator", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6006772?v=4", "type": "User" }, { "login": "noperator-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51375324?v=4", "type": "User" }, { "login": "braindead-bf", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53441721?v=4", "type": "User" } ] }, { "repo": "sensepost/thumbscr-ews", "name": "thumbscr-ews", "owner": "sensepost", "url": "https://github.com/sensepost/thumbscr-ews", "id": "f5fd070a39ac", "stars": 70, "language": "Python", "description": "Exchangelib wrapper for pentesting", "type": "tool", "pushedAt": "2025-02-17T10:26:05Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "cablethief", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/7942469?v=4", "type": "User" }, { "login": "leonjza", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/1148127?v=4", "type": "User" }, { "login": "mavenius", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6155908?v=4", "type": "User" }, { "login": "joaovarelas", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/6439813?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2024-0204", "name": "CVE-2024-0204", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2024-0204", "id": "afe15a719c52", "stars": 65, "language": "Python", "description": "Authentication Bypass in GoAnywhere MFT", "type": "tool", "pushedAt": "2024-01-23T20:33:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hrsman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/102617131?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "netspi/ad-pathfinder", "name": "AD-PathFinder", "owner": "NetSPI", "url": "https://github.com/NetSPI/AD-PathFinder", "id": "1a295b53f2da", "stars": 64, "language": "Python", "description": "Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.", "type": "tool", "pushedAt": "2026-07-18T06:19:44Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "danti1988", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/91211347?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 2, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "bishopfox/cve-2026-34908-check", "name": "CVE-2026-34908-check", "owner": "BishopFox", "url": "https://github.com/BishopFox/CVE-2026-34908-check", "id": "d936caf7df06", "stars": 64, "language": "Python", "description": "Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908", "type": "tool", "pushedAt": "2026-06-05T20:28:52Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "braindead-bf", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/53441721?v=4", "type": "User" }, { "login": "bf-juntz", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/239419001?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/aurelian", "name": "aurelian", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/aurelian", "id": "20a0b029924b", "stars": 62, "language": "Go", "description": "Open-source cloud security reconnaissance framework", "type": "tool", "pushedAt": "2026-07-17T19:11:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 12, "topContributors": [ { "login": "xoverride", "c": 153, "avatar": "https://avatars.githubusercontent.com/u/13634432?v=4", "type": "User" }, { "login": "bernard-yip", "c": 55, "avatar": "https://avatars.githubusercontent.com/u/135064313?v=4", "type": "User" }, { "login": "nsportsman", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/3682576?v=4", "type": "User" }, { "login": "Elgin-Lee", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/70533926?v=4", "type": "User" }, { "login": "josephwhenry", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/87080623?v=4", "type": "User" }, { "login": "ztgrace", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/2554037?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 6, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "praetorian-peter-mueller", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/45581135?v=4", "type": "User" }, { "login": "Tanq16", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/37408906?v=4", "type": "User" }, { "login": "WizardML7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/89399375?v=4", "type": "User" }, { "login": "EvanLeleux", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/85642615?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "optiv/knockknock", "name": "KnockKnock", "owner": "optiv", "url": "https://github.com/optiv/KnockKnock", "id": "4f67efd7717e", "stars": 62, "language": "Python", "description": " Enumerate valid users within Microsoft Teams and OneDrive with clean output. ", "type": "tool", "pushedAt": "2025-02-04T22:23:30Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "waffl3ss", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/23007704?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-34051", "name": "CVE-2023-34051", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-34051", "id": "fcf387fb8973", "stars": 62, "language": "Python", "description": "VMware Aria Operations for Logs CVE-2023-34051", "type": "tool", "pushedAt": "2023-10-20T15:00:10Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hrsman1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" } ] }, { "repo": "synacktiv/kcmdump", "name": "kcmdump", "owner": "synacktiv", "url": "https://github.com/synacktiv/kcmdump", "id": "f8554d9c9ab5", "stars": 59, "language": "Python", "description": "Dump Kerberos tickets from the KCM database of SSSD", "type": "tool", "pushedAt": "2025-12-31T12:09:34Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "aevy-syn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/50951297?v=4", "type": "User" } ] }, { "repo": "whokilleddb/follina", "name": "follina", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/Follina", "stars": 7, "language": "Python", "description": "Follina PoC exploit ", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "224844d5422b", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 2, "contributorCount": 1, "contributors": [], "pushedAt": "2022-06-09T12:45:39Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "faanross/spinnekop", "name": "spinnekop", "owner": "faanross", "url": "https://github.com/faanross/spinnekop", "stars": 7, "language": "Go", "description": "a DNS (check-in) + HTTPS (data) hybrid C2 covert channel inspired by Sunburst + DNS sandwich", "type": "tool", "lanes": [ "2" ], "author": { "name": "Faan Rossouw", "cardId": "46107ad224c5ab63", "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "068afad58a0a", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-26T09:59:13Z", "archived": false, "topContributors": [ { "login": "faanross", "c": 47, "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4", "type": "User" } ] }, { "repo": "faanross/ipv6_rotationalc2", "name": "ipv6_rotationalc2", "owner": "faanross", "url": "https://github.com/faanross/IPv6_rotationalC2", "stars": 7, "language": "Go", "description": "A proof-of-concept tool that demonstrates how IPv6 aliasing and rotational staggering can be used for network stealth", "type": "tool", "lanes": [ "2" ], "author": { "name": "Faan Rossouw", "cardId": "46107ad224c5ab63", "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "01c68ffdadab", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-09T21:25:24Z", "archived": false, "topContributors": [ { "login": "faanross", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4", "type": "User" } ] }, { "repo": "tenebrae93/cve-2025-3243", "name": "cve-2025-3243", "owner": "tenebrae93", "url": "https://github.com/TeneBrae93/CVE-2025-3243", "stars": 7, "language": "Python", "description": "A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSH_MSG_CHANNEL_REQUEST packets.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Tyler Ramsbey", "cardId": "5ccc8a85d47160b1", "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cbc18d6db1b9", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-24T19:34:32Z", "archived": false, "topContributors": [ { "login": "TeneBrae93", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/86263907?v=4", "type": "User" } ] }, { "repo": "pry0cc/gh-recon", "name": "gh-recon", "owner": "pry0cc", "url": "https://github.com/pry0cc/gh-recon", "stars": 7, "language": "Shell", "description": "A few handy scripts for enumerating the Github API following the Unix philosophy ", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0d6fd5cd13ca", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2022-09-19T15:01:33Z", "archived": false, "topContributors": [] }, { "repo": "4osp3l/intelliscope", "name": "intelliscope", "owner": "4osp3l", "url": "https://github.com/4osp3l/intelliscope", "stars": 7, "language": "Python", "description": "IntelliScope is designed for offensive security. It allows users to extract websites in a given country based on features like \"bank,\" \"e-commerce,\", \"hospital\", \"school\", \"finance\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "4osp3l", "cardId": "6612479a39124d6e", "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b0582d0f0b2a", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-09T16:21:24Z", "archived": false, "topContributors": [ { "login": "4osp3l", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4", "type": "User" } ] }, { "repo": "noraj/kh2hc", "name": "kh2hc", "owner": "noraj", "url": "https://github.com/noraj/kh2hc", "stars": 7, "language": "Ruby", "description": "Convert OpenSSH known_hosts file hashed with HashKnownHosts to hashes crackable by Hashcat.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9be15c014ff5", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-04-26T20:36:07Z", "archived": false, "topContributors": [ { "login": "dependabot[bot]", "c": 53, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "noraj", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" } ] }, { "repo": "noraj/fuelcms-rce", "name": "fuelcms-rce", "owner": "noraj", "url": "https://github.com/noraj/fuelcms-rce", "stars": 7, "language": "Ruby", "description": "Fuel CMS 1.4 - Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alexandre ZANNI", "cardId": "7587ce86694be2fb", "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b33f441ab8dd", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-18T20:51:05Z", "archived": false, "topContributors": [ { "login": "noraj", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/16578570?v=4", "type": "User" } ] }, { "repo": "zer0x64/shellcoding-x64-101", "name": "shellcoding-x64-101", "owner": "zer0x64", "url": "https://github.com/zer0x64/shellcoding-x64-101", "stars": 7, "language": "Python", "description": "A beginner course to teach how to write shellcode in x86_64 assembly.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Philippe Dugre", "cardId": "936bcc469125be85", "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f6b8f6417b39", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-06-18T23:19:25Z", "archived": false, "topContributors": [ { "login": "zer0x64", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/17575242?v=4", "type": "User" } ] }, { "repo": "boku7/bikerental-fu-rce", "name": "bikerental-fu-rce", "owner": "boku7", "url": "https://github.com/boku7/BikeRental-FU-RCE", "stars": 7, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8065c74efb21", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-21T21:39:00Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "dinosn/apache-activemq-rce-research", "name": "apache-activemq-rce-research", "owner": "dinosn", "url": "https://github.com/dinosn/apache-activemq-rce-research", "stars": 7, "language": "Python", "description": "Apache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8dff98b68876", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-04T07:07:26Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-44578", "name": "cve-2026-44578", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2026-44578", "stars": 7, "language": "Python", "description": "CVE-2026-44578: Next.js WebSocket Upgrade SSRF — pre-auth credential theft via localhost:80. Lab + exploit + audit.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "289138e75436", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-16T10:23:10Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "orange-cyberdefense/sweetlemonade", "name": "sweetlemonade", "owner": "orange-cyberdefense", "url": "https://github.com/Orange-Cyberdefense/sweetlemonade", "stars": 7, "language": "C", "description": "SWEETLEMONADE is a bootkit for UEFI firmware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Orange Cyberdefense", "cardId": "b1b0a8810a783aec", "avatar": "https://avatars.githubusercontent.com/u/28656080?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "acad76ef04c0", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2022-02-01T15:05:28Z", "archived": false, "topContributors": [ { "login": "LeDocteurDesBits", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/77270859?v=4", "type": "User" }, { "login": "v1k1ngfr", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/32877266?v=4", "type": "User" } ] }, { "repo": "johnwoodman/linux-rootkit", "name": "linux-rootkit", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/Linux-Rootkit", "stars": 7, "language": "C++", "description": "A Linux based rootkit designed with advanced kernel-level evasion techniques. This is the Senior Project repository for John Woodman, Owen Flannagan, and Brandon Stacy.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d23f7205eab4", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2021-04-21T02:36:35Z", "archived": false, "topContributors": [ { "login": "brand0nstacy", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/32110975?v=4", "type": "User" }, { "login": "owenflannagan", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/17463620?v=4", "type": "User" }, { "login": "JohnWoodman", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-12539", "name": "cve-2025-12539", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-12539", "stars": 7, "language": "Python", "description": "TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8a5c58808305", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-11T12:00:34Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-8723", "name": "cve-2025-8723", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-8723", "stars": 7, "language": "Python", "description": "Cloudflare Image Resizing <= 1.5.6 | Unauthenticated Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3017e5533716", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-19T12:16:33Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-7340", "name": "cve-2025-7340", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-7340", "stars": 7, "language": "Python", "description": "HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d525d2b7b07b", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-14T23:41:47Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-4334", "name": "cve-2025-4334", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-4334", "stars": 7, "language": "Python", "description": "Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e8b86ce9aeb3", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-26T14:20:39Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-3776", "name": "cve-2025-3776", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-3776", "stars": 7, "language": "Python", "description": " WordPress Verification SMS with TargetSMS Plugin <= 1.5 is vulnerable to Remote Code Execution (RCE) ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9df1d971c565", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-24T01:33:59Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/iscariot-suite", "name": "iscariot-suite", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/iscariot-suite", "stars": 6, "language": "Go", "description": "[GITLAB MIRROR] The Iscariot Suite is a collection of tools to enhance and augment trusted open-source and commercial Blue Team/Sysadmin products, turning them into traitorware to achieve offensive se", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d6c28cef0955", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2025-06-12T15:52:34Z", "archived": false, "topContributors": [] }, { "repo": "badsectorlabs/ludus_xz_backdoor", "name": "ludus_xz_backdoor", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/ludus_xz_backdoor", "stars": 6, "language": null, "description": "An Ansible Role that installs the xz backdoor (CVE-2024-3094) on a Debian host and optionally installs the xzbot tool.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "db79bc43b2e3", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-05T02:36:41Z", "archived": false, "topContributors": [ { "login": "kernel-sanders", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1490292?v=4", "type": "User" } ] }, { "repo": "shuvonsec/vuln-scanner", "name": "vuln-scanner", "owner": "shuvonsec", "url": "https://github.com/shuvonsec/vuln-scanner", "stars": 6, "language": "Shell", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Md Shariar Shanaz Shuvon", "cardId": "6cf9e09eb4b1508c", "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "23573a55e723", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-13T11:27:27Z", "archived": false, "topContributors": [ { "login": "shuvonsec", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4", "type": "User" } ] }, { "repo": "reversinglabs/rl-scanner", "name": "rl-scanner", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/rl-scanner", "stars": 6, "language": "Python", "description": "ReversingLabs rl-scanner Docker image", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e5cf1f45d5f", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 4, "contributors": [], "pushedAt": "2026-07-16T08:38:42Z", "archived": false, "topContributors": [ { "login": "rl-maartenb", "c": 37, "avatar": "https://avatars.githubusercontent.com/u/131449090?v=4", "type": "User" }, { "login": "rl-devops", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/55623149?v=4", "type": "User" }, { "login": "rl-mcizmek", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/163129445?v=4", "type": "User" }, { "login": "tpericin", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/1922788?v=4", "type": "User" } ] }, { "repo": "ahmedkhlief/cve-2023-23397-poc", "name": "cve-2023-23397-poc", "owner": "ahmedkhlief", "url": "https://github.com/ahmedkhlief/CVE-2023-23397-POC", "stars": 6, "language": "C#", "description": "Exploit POC for CVE-2023-23397", "type": "tool", "lanes": [ "2" ], "author": { "name": "ahmedkhlief", "cardId": "a1a8f32c1bbfcafe", "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b2475358134d", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-17T12:58:55Z", "archived": false, "topContributors": [ { "login": "ahmedkhlief", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4", "type": "User" } ] }, { "repo": "boku7/onlinecoursereg-rce", "name": "onlinecoursereg-rce", "owner": "boku7", "url": "https://github.com/boku7/onlineCourseReg-RCE", "stars": 6, "language": "Python", "description": "From 0 to Remote Code Execution - exploit development files for Online Course Registration Web Application RCE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d7ea2b2abb51", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-16T17:21:38Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "robleh/cobaltstrike-alpine", "name": "cobaltstrike-alpine", "owner": "robleh", "url": "https://github.com/robleh/cobaltstrike-alpine", "stars": 6, "language": "Dockerfile", "description": "Lightweight Cobalt Strike Docker image built on Alpine.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Robleh Esa", "cardId": "a5ce017902d1ee4f", "avatar": "https://avatars.githubusercontent.com/u/10623941?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7b002bbc54a1", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-10-28T21:59:56Z", "archived": false, "topContributors": [] }, { "repo": "dinosn/pack2theroot-lab", "name": "pack2theroot-lab", "owner": "dinosn", "url": "https://github.com/dinosn/pack2theroot-lab", "stars": 6, "language": "Shell", "description": "CTF-style Docker lab for CVE-2026-41651 (Pack2TheRoot): PackageKit permissive-polkit local privilege escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a1ff12bef1f2", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-25T04:05:36Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "azeria-labs/belkin-f9k1122v1-exploit", "name": "belkin-f9k1122v1-exploit", "owner": "azeria-labs", "url": "https://github.com/azeria-labs/Belkin-F9K1122v1-Exploit", "stars": 6, "language": "Ruby", "description": "Metasploit Module of the Belkin F9K1122v1 Stack-Based Buffer Overflow Exploit with Process Continuation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Azeria Labs", "cardId": "aa8e352b7d703f13", "avatar": "https://avatars.githubusercontent.com/u/26645463?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eced133c3008", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-10-06T02:31:08Z", "archived": false, "topContributors": [ { "login": "azeria-labs", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/26645463?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-3891", "name": "cve-2026-3891", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-3891", "stars": 6, "language": "Python", "description": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dfc4cbccc73c", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-27T06:09:36Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "joasasantos/goldexperience-bugbountytool", "name": "goldexperience-bugbountytool", "owner": "joasasantos", "url": "https://github.com/JoasASantos/GoldExperience-BugBountyTool", "stars": 6, "language": "Python", "description": "The ultimate tool for recon!", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fe3f4bb7e4bf", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-14T17:53:18Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "abhinandan-khurana/rag-based-ai-pentest-report-generator", "name": "rag-based-ai-pentest-report-generator", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/rag-based-ai-pentest-report-generator", "stars": 5, "language": "Python", "description": "A sophisticated tool that leverages RAG (Retrieval Augmented Generation) to analyze penetration testing data and generate comprehensive security reports.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "793204b62361", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-14T10:15:50Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" } ] }, { "repo": "0xsyr0/zig-loader", "name": "zig-loader", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/Zig-Loader", "stars": 5, "language": "Zig", "description": "A proof-of-concept shellcode loader demonstrating advanced evasion techniques for security research. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2141d4bcb4b6", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-04T00:21:42Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" } ] }, { "repo": "wh04m1001/cve-2025-60710", "name": "cve-2025-60710", "owner": "wh04m1001", "url": "https://github.com/Wh04m1001/CVE-2025-60710", "stars": 5, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Filip Dragovic", "cardId": "8f60ef6b027ec327", "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "79014df3864f", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-11T18:23:46Z", "archived": false, "topContributors": [ { "login": "Wh04m1001", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/44291883?v=4", "type": "User" } ] }, { "repo": "reversinglabs/rl-scanner-metadata", "name": "rl-scanner-metadata", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/rl-scanner-metadata", "stars": 5, "language": null, "description": "Public Spectra Assure metadata for partner integrations", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a4ecb44f5471", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-19T10:54:52Z", "archived": false, "topContributors": [ { "login": "rl-devops", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/55623149?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-3844", "name": "cve-2026-3844", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2026-3844", "stars": 5, "language": "Python", "description": "CVE-2026-3844: Breeze Cache <= 2.4.4 Unauthenticated Arbitrary File Upload to RCE (CVSS 9.8)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "888576258dae", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-25T17:53:39Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "random-robbie/salesforce-ssrf", "name": "salesforce-ssrf", "owner": "random-robbie", "url": "https://github.com/random-robbie/salesforce-ssrf", "stars": 5, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09709f5f2bd0", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-11-08T19:30:21Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "claude", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/81847?v=4", "type": "User" } ] }, { "repo": "random-robbie/popplugin", "name": "popplugin", "owner": "random-robbie", "url": "https://github.com/random-robbie/popplugin", "stars": 5, "language": "Ruby", "description": "WordPress Plugin for Use in Testing for PHP Object Injection", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c6a09af188f6", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-07-30T19:34:17Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-47668", "name": "cve-2026-47668", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-47668", "stars": 5, "language": "Python", "description": "DbGate Unauthenticated Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cfb06e0d7fd2", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-26T14:54:52Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39401", "name": "cve-2025-39401", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39401", "stars": 5, "language": "Python", "description": "WordPress WPAMS Plugin <= 44.0 (17-08-2023) is vulnerable to a high priority Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "264841b68c5c", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-27T23:28:07Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-1306", "name": "cve-2025-1306", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-1306", "stars": 5, "language": null, "description": "Newscrunch <= 1.8.4 - Cross-Site Request Forgery to Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ee27e9ec1d0e", "score": 11, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:32:00Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "cornerpirate/cve-offline", "name": "cve-offline", "owner": "cornerpirate", "url": "https://github.com/cornerpirate/cve-offline", "id": "b9c411768cf3", "stars": 56, "language": "Python", "description": "An easy to grep dump of the NVD database showing only; CVE-ID, CVSS Risk Score, and Summary.", "type": "tool", "pushedAt": "2022-05-05T10:30:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Paul Ritchie", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "cornerpirate", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4266127?v=4", "type": "User" }, { "login": "paulrpentest", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/69257153?v=4", "type": "User" } ] }, { "repo": "nettitude/cve-2024-20356", "name": "CVE-2024-20356", "owner": "nettitude", "url": "https://github.com/nettitude/CVE-2024-20356", "id": "b87295e4fb5a", "stars": 55, "language": "Python", "description": "This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.", "type": "tool", "pushedAt": "2024-04-18T14:31:34Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "thackeraaron", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/25622825?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-27350", "name": "CVE-2023-27350", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-27350", "id": "c2617ec89d3e", "stars": 55, "language": "Python", "description": "Proof of Concept Exploit for PaperCut CVE-2023-27350", "type": "tool", "pushedAt": "2023-05-01T19:31:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "outflanknl/doh_c2_trigger", "name": "DoH_c2_Trigger", "owner": "outflanknl", "url": "https://github.com/outflanknl/DoH_c2_Trigger", "id": "b11ac01a62e8", "stars": 54, "language": "PowerShell", "description": "Code for blogpost: https://outflank.nl/blog/2018/10/25/building-resilient-c2-infrastructues-using-dns-over-https/", "type": "tool", "pushedAt": "2018-10-25T14:22:22Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "stanhegt", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/15885784?v=4", "type": "User" }, { "login": "xychix", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/307655?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/3d-accelerated-exploitation", "name": "3d-accelerated-exploitation", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/3d-accelerated-exploitation", "id": "8b60e510967c", "stars": 54, "language": "C", "description": "3D Accelerated Exploitation", "type": "tool", "pushedAt": "2019-02-22T10:07:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "pleasew8t", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/8221246?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-48788", "name": "CVE-2023-48788", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-48788", "id": "a1834f4eea7c", "stars": 54, "language": "Python", "description": "Fortinet FortiClient EMS SQL Injection", "type": "tool", "pushedAt": "2024-03-20T20:42:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "hrsman1", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/proxylogon-exploit", "name": "proxylogon-exploit", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/proxylogon-exploit", "id": "ee820c64449c", "stars": 52, "language": "Python", "description": "Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.", "type": "tool", "pushedAt": "2021-03-24T01:25:05Z", "archived": true, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "amlweems", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/117625?v=4", "type": "User" } ] }, { "repo": "outflanknl/training-msofficeoffensivetradecraft", "name": "Training-MSOfficeOffensiveTradecraft", "owner": "outflanknl", "url": "https://github.com/outflanknl/Training-MSOfficeOffensiveTradecraft", "id": "47bf85c577ca", "stars": 52, "language": null, "description": "Info related to the Outflank training: Microsoft Office Offensive Tradecraft", "type": "tool", "pushedAt": "2024-05-16T14:06:04Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "MarcOverIP", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/17198879?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/dotnet-gargoyle", "name": "dotnet-gargoyle", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/dotnet-gargoyle", "id": "7bbf872e78b3", "stars": 52, "language": "C#", "description": "A spiritual .NET equivalent to the Gargoyle memory scanning evasion technique", "type": "tool", "pushedAt": "2018-12-06T13:36:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "netspi/spoofspotter", "name": "SpoofSpotter", "owner": "NetSPI", "url": "https://github.com/NetSPI/SpoofSpotter", "id": "4313fe31f58d", "stars": 51, "language": "Python", "description": "A tool to catch spoofed NBNS responses.", "type": "tool", "pushedAt": "2018-06-13T03:51:53Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Karl Fosaaen", "cardId": "e43baf62974d03ca", "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "login": "kfosaaen" } ], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "kfosaaen", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/2163397?v=4", "type": "User" }, { "login": "jordanpotti", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/19959240?v=4", "type": "User" } ] }, { "repo": "synacktiv/objc-helper", "name": "objc-helper", "owner": "synacktiv", "url": "https://github.com/synacktiv/objc-helper", "id": "ec15736242bd", "stars": 48, "language": "Python", "description": "IDA helper plugin to reverse engineer Objective-C code", "type": "tool", "pushedAt": "2025-06-12T15:16:20Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "vicsyn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/95303116?v=4", "type": "User" } ] }, { "repo": "sensepost/shellnot", "name": "shellnot", "owner": "sensepost", "url": "https://github.com/sensepost/shellnot", "id": "2cf5102bb8c6", "stars": 48, "language": "C", "description": "Pseudo-shell for RCE scenarios: tunnels commands via /tmp sockets to a local daemon, keeps context, no bind or reverse shell needed.", "type": "tool", "pushedAt": "2025-06-12T21:25:33Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "A3-N", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/80641430?v=4", "type": "User" }, { "login": "singe", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "includesecurity/rtsphuzz", "name": "RTSPhuzz", "owner": "IncludeSecurity", "url": "https://github.com/IncludeSecurity/RTSPhuzz", "id": "5871aa3439d3", "stars": 48, "language": "Python", "description": "RTSPhuzz - An RTSP Fuzzer written using the Boofuzz framework", "type": "tool", "pushedAt": "2023-05-01T21:25:02Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Include Security", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 3, "topContributors": [ { "login": "includesec-kris", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/7749995?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 4, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" }, { "login": "jfssr", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/57460446?v=4", "type": "User" } ] }, { "repo": "netspi/forcehound", "name": "ForceHound", "owner": "NetSPI", "url": "https://github.com/NetSPI/ForceHound", "id": "914c5f419353", "stars": 47, "language": "Python", "description": "Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path gra", "type": "tool", "pushedAt": "2026-06-25T00:43:28Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "silosw", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/87151619?v=4", "type": "User" }, { "login": "andrewchiles", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/12104886?v=4", "type": "User" } ] }, { "repo": "optiv/aircross", "name": "airCross", "owner": "optiv", "url": "https://github.com/optiv/airCross", "id": "3381e4349d3a", "stars": 47, "language": "Go", "description": "airCross is a tool that takes advantage of API functionality within VMWare's AirWatch MDM solution to perform single-factor authentication attacks. airCross can locate AirWatch authentication endpoint", "type": "tool", "pushedAt": "2022-07-19T15:40:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Matt Burch", "cardId": "4b905177bfef1ea6", "avatar": "https://avatars.githubusercontent.com/u/126291254?v=4", "login": "emptynebuli" } ], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mattburch", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/5597887?v=4", "type": "User" }, { "login": "emptynebuli", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/126291254?v=4", "type": "User" } ] }, { "repo": "synacktiv/io_uring_scanner", "name": "io_uring_scanner", "owner": "synacktiv", "url": "https://github.com/synacktiv/io_uring_scanner", "id": "c2530b7be0b5", "stars": 46, "language": "Rust", "description": "io_uring based network scanner written in Rust", "type": "tool", "pushedAt": "2025-10-27T10:19:30Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "desbma-s1n", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/62935004?v=4", "type": "User" } ] }, { "repo": "mdsecactivebreach/lambda-webbugs", "name": "lambda-webbugs", "owner": "mdsecactivebreach", "url": "https://github.com/mdsecactivebreach/lambda-webbugs", "id": "3adc8ac0e1ae", "stars": 46, "language": "Python", "description": "A proof of concept for delivering webbugs via AWS lambda", "type": "tool", "pushedAt": "2018-09-10T18:59:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "ActiveBreach", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "netspi/skl", "name": "skl", "owner": "NetSPI", "url": "https://github.com/NetSPI/skl", "id": "10030829bd41", "stars": 44, "language": null, "description": "strace keylogger PoC", "type": "tool", "pushedAt": "2018-04-09T21:27:25Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NetSPI", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "bishopfox/spoofcheckselftest", "name": "SpoofcheckSelfTest", "owner": "BishopFox", "url": "https://github.com/BishopFox/SpoofcheckSelfTest", "id": "894356e5fc03", "stars": 44, "language": "Python", "description": "Web application that lets you test if your domain is vulnerable to email spoofing", "type": "tool", "pushedAt": "2019-03-05T21:35:29Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "lunarca", "c": 73, "avatar": "https://avatars.githubusercontent.com/u/1014360?v=4", "type": "User" } ] }, { "repo": "synacktiv/astrolock", "name": "astrolock", "owner": "synacktiv", "url": "https://github.com/synacktiv/astrolock", "id": "cd352c34a4b4", "stars": 44, "language": "PHP", "description": "A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files.", "type": "tool", "pushedAt": "2022-10-17T13:35:52Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Synacktiv", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "q-roland", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/115217858?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/calendarpersist", "name": "CalendarPersist", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/CalendarPersist", "id": "f165a1d90c15", "stars": 44, "language": "JavaScript", "description": "JXA script to allow programmatic persistence via macOS Calendar.app alerts.", "type": "tool", "pushedAt": "2020-10-31T14:29:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "rookuu", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/15949637?v=4", "type": "User" }, { "login": "antman1p", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6889529?v=4", "type": "User" } ] }, { "repo": "optiv/rustyiron", "name": "rustyIron", "owner": "optiv", "url": "https://github.com/optiv/rustyIron", "id": "19776e883b7d", "stars": 44, "language": "Go", "description": "rustyIron is a tool that takes advantage of functionality within Ivanti's MobileIron MDM solution to perform single-factor authentication attacks. rustyIron can locate the MobileIron MDM authenticatio", "type": "tool", "pushedAt": "2021-03-22T18:04:48Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Optiv Source Zero", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "mattburch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/5597887?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2024-9464", "name": "CVE-2024-9464", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2024-9464", "id": "1a13d32000de", "stars": 44, "language": "Python", "description": "Proof of Concept Exploit for CVE-2024-9464", "type": "tool", "pushedAt": "2024-10-09T16:41:41Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/matryoshka", "name": "Matryoshka", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/Matryoshka", "id": "df6e827dd803", "stars": 43, "language": "C", "description": "Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.", "type": "tool", "pushedAt": "2021-05-24T20:19:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Adam Crosser", "cardId": "4472eb3cbb65318b", "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "login": "UNC1739" } ], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "UNC1739", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/45573557?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2022-28219", "name": "CVE-2022-28219", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2022-28219", "id": "0dbbe7f7a1a6", "stars": 43, "language": "Python", "description": "PoC for ManageEngine ADAudit Plus CVE-2022-28219", "type": "tool", "pushedAt": "2022-06-26T16:46:55Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nvn1729", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/348774?v=4", "type": "User" } ] }, { "repo": "nccgroup/mimikatz-detector-condrv", "name": "mimikatz-detector-condrv", "owner": "nccgroup", "url": "https://github.com/nccgroup/mimikatz-detector-condrv", "id": "c38d0f658b29", "stars": 42, "language": "C++", "description": "The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from the ConDrv. ConDrv is a device created by condrv.sys", "type": "tool", "pushedAt": "2022-09-06T13:07:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "NCC Group Plc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "nccpentester", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/73469802?v=4", "type": "User" } ] }, { "repo": "nettitude/cve-2024-25153", "name": "CVE-2024-25153", "owner": "nettitude", "url": "https://github.com/nettitude/CVE-2024-25153", "id": "b9ccd69abca9", "stars": 42, "language": "Python", "description": "Proof-of-concept exploit for CVE-2024-25153.", "type": "tool", "pushedAt": "2024-03-13T09:46:07Z", "archived": false, "lanes": [ "org" ], "author": { "name": "LRQA Cyber", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "wedgburt", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/14873238?v=4", "type": "User" } ] }, { "repo": "fox-it/cisco-ios-xe-implant-detection", "name": "cisco-ios-xe-implant-detection", "owner": "fox-it", "url": "https://github.com/fox-it/cisco-ios-xe-implant-detection", "id": "fd8f531b376a", "stars": 41, "language": "Python", "description": "Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)", "type": "tool", "pushedAt": "2023-11-07T12:21:26Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fox-IT", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 4, "topContributors": [ { "login": "yunzheng", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/468612?v=4", "type": "User" }, { "login": "fox-srt", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/9809789?v=4", "type": "User" }, { "login": "MaxGroot", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/19346100?v=4", "type": "User" }, { "login": "krlplm", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18089733?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2023-38035", "name": "CVE-2023-38035", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2023-38035", "id": "7a2a970aa30e", "stars": 41, "language": "Python", "description": "Ivanti Sentry CVE-2023-38035", "type": "tool", "pushedAt": "2023-08-23T18:42:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "hrsman1", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/202839386?v=4", "type": "User" }, { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" } ] }, { "repo": "bishopfox/cve-2021-35211", "name": "CVE-2021-35211", "owner": "BishopFox", "url": "https://github.com/BishopFox/CVE-2021-35211", "id": "1bcc36754f23", "stars": 39, "language": "Python", "description": "", "type": "tool", "pushedAt": "2022-01-14T05:56:09Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Bishop Fox", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "0xhaggis", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/6735009?v=4", "type": "User" } ] }, { "repo": "ralphte/build_a_c2", "name": "build_a_c2", "owner": "ralphte", "url": "https://github.com/ralphte/build_a_c2", "stars": 4, "language": null, "description": "Ansible playbook to deploy c2 in the cloud.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ralph May", "cardId": "37d8b2c06040cdb8", "avatar": "https://avatars.githubusercontent.com/u/2996680?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "21650af0c5a9", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2021-04-11T19:09:52Z", "archived": false, "topContributors": [] }, { "repo": "whokilleddb/cve-2021-4034", "name": "cve-2021-4034", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/CVE-2021-4034", "stars": 4, "language": "C", "description": "An exploit for CVE-2021-4034 aka Pwnkit: Local Privilege Escalation in polkit's pkexec", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1bce18b14943", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-27T19:58:45Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "wrongbaud/stm32f4-glitching-example", "name": "stm32f4-glitching-example", "owner": "wrongbaud", "url": "https://github.com/wrongbaud/stm32f4-glitching-example", "stars": 4, "language": "C", "description": "Simple, ugly, example firmware for an STM32F4 microcontroller. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Matthew Alt (wrongbaud)", "cardId": "066df27f625958c1", "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "35fd44ed798e", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-05-09T00:47:58Z", "archived": false, "topContributors": [ { "login": "wrongbaud", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50204068?v=4", "type": "User" } ] }, { "repo": "0xben/m365manager", "name": "m365manager", "owner": "0xben", "url": "https://github.com/0xBEN/M365Manager", "stars": 4, "language": "PowerShell", "description": "PowerShell module to manage resources in Microsoft 365 / Azure AD.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ben Heater", "cardId": "09ff63ce59e9d814", "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9bb28d28fd06", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-18T17:45:11Z", "archived": false, "topContributors": [ { "login": "0xBEN", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4", "type": "User" } ] }, { "repo": "cybergabby/vuln-store", "name": "vuln-store", "owner": "cybergabby", "url": "https://github.com/cybergabby/Vuln-Store", "stars": 4, "language": "PHP", "description": "This is a Vulnerable E-commerce website that can be used to practice web hacking and Penetration testing", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gabriel Odusanya", "cardId": "3e5308763d30835f", "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8c9552d8373e", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-01T05:33:24Z", "archived": false, "topContributors": [ { "login": "cybergabby", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4", "type": "User" } ] }, { "repo": "faanross/gomesa", "name": "gomesa", "owner": "faanross", "url": "https://github.com/faanross/goMESA", "stars": 4, "language": "Go", "description": "NTP covert channel C2 framework. Dual-mode server provides legitimate time sync while managing cross-platform agents. Go + Vue.js. Based on d3adzo/mesa.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Faan Rossouw", "cardId": "46107ad224c5ab63", "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "924a7ce32dfd", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-04T11:57:12Z", "archived": false, "topContributors": [ { "login": "faanross", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4", "type": "User" } ] }, { "repo": "aniqfakhrul/cve-2022-22954", "name": "cve-2022-22954", "owner": "aniqfakhrul", "url": "https://github.com/aniqfakhrul/CVE-2022-22954", "stars": 4, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Aniq Fakhrul", "cardId": "4a22913fe2902dfe", "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "94fe66d2c814", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-27T09:07:19Z", "archived": false, "topContributors": [ { "login": "aniqfakhrul", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/39443758?v=4", "type": "User" } ] }, { "repo": "pry0cc/bluekeeptracker", "name": "bluekeeptracker", "owner": "pry0cc", "url": "https://github.com/pry0cc/BlueKeepTracker", "stars": 4, "language": "Ruby", "description": "My bot (badly written) to search and monitor cve-2019-0708 repositories ", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "45d07e18f766", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2019-05-21T11:38:10Z", "archived": false, "topContributors": [] }, { "repo": "malvuln/backdoor.win32.quux_exploit", "name": "backdoor.win32.quux_exploit", "owner": "malvuln", "url": "https://github.com/malvuln/Backdoor.Win32.Quux_Exploit", "stars": 4, "language": "Python", "description": "Exploit for Backdoor Win32 Quux Malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Malvuln (aka hyp3rlinx)", "cardId": "68d2b7258663f41f", "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "18903429d205", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-04-22T01:55:14Z", "archived": false, "topContributors": [ { "login": "malvuln", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/75002643?v=4", "type": "User" } ] }, { "repo": "demonslay335/nemucodcrypteddecrypter", "name": "nemucodcrypteddecrypter", "owner": "demonslay335", "url": "https://github.com/Demonslay335/NemucodCryptedDecrypter", "stars": 4, "language": "C#", "description": "Key generator and decrypter for Crypted Ransomware dropped by Nemucod malware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Michael Gillespie", "cardId": "6f084837fa28e4e7", "avatar": "https://avatars.githubusercontent.com/u/5551512?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6622f07e19a3", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2016-03-22T13:43:23Z", "archived": false, "topContributors": [] }, { "repo": "x90skysn3k/grdp", "name": "grdp", "owner": "x90skysn3k", "url": "https://github.com/x90skysn3k/grdp", "stars": 4, "language": "Go", "description": "Pure Go RDP client library with NLA/CredSSP, context-aware timeouts, and auth-only mode for fast credential testing", "type": "tool", "lanes": [ "2" ], "author": { "name": "x90sky", "cardId": "806ba40e989ce0b0", "avatar": "https://avatars.githubusercontent.com/u/22178125?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "49f8db366807", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 6, "contributors": [], "pushedAt": "2026-06-01T13:56:07Z", "archived": false, "topContributors": [ { "login": "icodeface", "c": 48, "avatar": "https://avatars.githubusercontent.com/u/9477987?v=4", "type": "User" }, { "login": "tomatome", "c": 46, "avatar": "https://avatars.githubusercontent.com/u/9861853?v=4", "type": "User" }, { "login": "olljanat", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/6213926?v=4", "type": "User" }, { "login": "x90skysn3k", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/22178125?v=4", "type": "User" }, { "login": "L1ghtman2k", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/35672535?v=4", "type": "User" }, { "login": "juanfont", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/181059?v=4", "type": "User" } ] }, { "repo": "0xsyr0/syshell", "name": "syshell", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/syshell", "stars": 4, "language": "PHP", "description": "Protected web shell for offensive security purposes.", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2c5c4c31a8e5", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-10T13:43:14Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" } ] }, { "repo": "boku7/homerent-sqli-rce", "name": "homerent-sqli-rce", "owner": "boku7", "url": "https://github.com/boku7/homeRent-SQLi-RCE", "stars": 4, "language": "Python", "description": "House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability allowing remote attackers to execute arbitrary code on the hosting webserver via sending a malicious POST request.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eeb4d6797df5", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-21T21:20:06Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 21, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "kbsec/weblogic_wsat_rce", "name": "weblogic_wsat_rce", "owner": "kbsec", "url": "https://github.com/kbsec/Weblogic_Wsat_RCE", "stars": 4, "language": "Python", "description": "POC for CVE-2017-10271. Since java.lang.ProcessBuilder was the original vector for RCE, there are multiple signature based rules that block this particular payload. Added java.lang.Runtime and will ad", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kai", "cardId": "ac82068bd32a729c", "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3081aa9280c4", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-27T17:47:52Z", "archived": false, "topContributors": [ { "login": "kbsec", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4", "type": "User" } ] }, { "repo": "decal/iisleakenv", "name": "iisleakenv", "owner": "decal", "url": "https://github.com/decal/iisleakenv", "stars": 4, "language": "HTML", "description": ":droplet: IIS CGI Environment Variable Leakage Proof-of-Concept", "type": "tool", "lanes": [ "2" ], "author": { "name": "Derek Callaway", "cardId": "b85bc297d944b524", "avatar": "https://avatars.githubusercontent.com/u/773264?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e7c5cfdc4e81", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-07T05:42:15Z", "archived": false, "topContributors": [ { "login": "decal", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/773264?v=4", "type": "User" } ] }, { "repo": "mxrch/swagdropper", "name": "swagdropper", "owner": "mxrch", "url": "https://github.com/mxrch/swagdropper", "stars": 4, "language": "PHP", "description": "A simple b347k shell dropper.", "type": "tool", "lanes": [ "2" ], "author": { "name": "mxrch", "cardId": "b9387e899d9c09e5", "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dbcafd9566ef", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-09-22T18:49:09Z", "archived": false, "topContributors": [ { "login": "mxrch", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17338428?v=4", "type": "User" } ] }, { "repo": "securibee/google-serp-plus", "name": "google-serp-plus", "owner": "securibee", "url": "https://github.com/securibee/google-serp-plus", "stars": 4, "language": "JavaScript", "description": "Browser extension to improve Google SERP. Mainly for OSINT.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bug-A-Bee (securibee)", "cardId": "c5fdf2ada4df2e39", "avatar": "https://avatars.githubusercontent.com/u/51520913?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eceb029df875", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-09-21T20:23:07Z", "archived": false, "topContributors": [ { "login": "securibee", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/51520913?v=4", "type": "User" } ] }, { "repo": "random-robbie/spoofssid-docker", "name": "spoofssid-docker", "owner": "random-robbie", "url": "https://github.com/random-robbie/spoofssid-docker", "stars": 4, "language": "Dockerfile", "description": "Docker container to spoof popular SSID's", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e6e221677218", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 3, "contributors": [], "pushedAt": "2025-07-28T10:49:57Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" }, { "login": "xD", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/24999200?v=4", "type": "User" } ] }, { "repo": "bin3xish477/csg", "name": "csg", "owner": "bin3xish477", "url": "https://github.com/bin3xish477/csg", "stars": 4, "language": "Go", "description": "csg (\"Credential Storage with Go\") - a tool to organize the storage of credentials found during a CTF or Pentest.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Rodriguez", "cardId": "d53200790bbf6dc2", "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7f1aab92a547", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-04T22:49:14Z", "archived": false, "topContributors": [ { "login": "bin3xish477", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4", "type": "User" } ] }, { "repo": "0xsha/cve_2019_19844", "name": "cve_2019_19844", "owner": "0xsha", "url": "https://github.com/0xsha/CVE_2019_19844", "stars": 4, "language": "Python", "description": "CVE-2019-19844 Docker Edition", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsha", "cardId": "df2469ad581b3713", "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4a1fe77a00c7", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-22T18:25:53Z", "archived": false, "topContributors": [ { "login": "0xsha", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/54356171?v=4", "type": "User" } ] }, { "repo": "mordavid/bhcreator", "name": "bhcreator", "owner": "mordavid", "url": "https://github.com/MorDavid/BHCreator", "stars": 4, "language": "Shell", "description": "Bloodhound CE deployment include my custom settings in one-liner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "801a245d656b", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-15T13:47:03Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-1405", "name": "cve-2026-1405", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-1405", "stars": 4, "language": "Python", "description": "Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64ee7be7f199", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-20T22:14:48Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-47539", "name": "cve-2025-47539", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-47539", "stars": 4, "language": "Python", "description": "Eventin <= 4.0.26 - Missing Authorization to Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b559de59c79", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-17T21:07:02Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "joasasantos/gdrv-vulnerability-driver", "name": "gdrv-vulnerability-driver", "owner": "joasasantos", "url": "https://github.com/JoasASantos/gdrv-vulnerability-Driver", "stars": 4, "language": "C++", "description": "gdrv.sys vulnerability PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "88d10171d1d7", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-19T23:46:49Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "mlt-0x539/exploits", "name": "exploits", "owner": "mlt-0x539", "url": "https://github.com/MLT-0x539/Exploits", "stars": 3, "language": "Python", "description": "A collection of exploits found by myself or my exploit dev team", "type": "tool", "lanes": [ "2" ], "author": { "name": "0day Wizard", "cardId": "4e4771e1e1ddf896", "avatar": "https://avatars.githubusercontent.com/u/194559716?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "58b49cb08dd1", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-23T16:52:55Z", "archived": false, "topContributors": [ { "login": "MLT-0x539", "c": 103, "avatar": "https://avatars.githubusercontent.com/u/194559716?v=4", "type": "User" } ] }, { "repo": "badsectorlabs/ludus_windows_utils", "name": "ludus_windows_utils", "owner": "badsectorlabs", "url": "https://github.com/badsectorlabs/ludus_windows_utils", "stars": 3, "language": "Python", "description": "Windows & Active Directory utility roles for Ludus cyber ranges — ACLs, delegation, LAPS, forest trusts, SMB shares, misconfigs, bulk AD content, and more.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bad Sector Labs", "cardId": "260c801561b36764", "avatar": "https://avatars.githubusercontent.com/u/43366550?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cbfa13123f8e", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-11T16:53:42Z", "archived": false, "topContributors": [ { "login": "ar0dd", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/42455358?v=4", "type": "User" } ] }, { "repo": "alex-ilgayev/injection-hooking-samples", "name": "injection-hooking-samples", "owner": "alex-ilgayev", "url": "https://github.com/alex-ilgayev/injection-hooking-samples", "stars": 3, "language": "C", "description": "Sample hook for directory listing in cmd.exe so it will exclude the specific file", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Ilgayev", "cardId": "0a11c1e218ab4ea3", "avatar": "https://avatars.githubusercontent.com/u/23579644?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2f7c236e7797", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-03-02T22:51:41Z", "archived": false, "topContributors": [ { "login": "alex-ilgayev", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/23579644?v=4", "type": "User" } ] }, { "repo": "whokilleddb/oscommerce-2.3.4-rce-exploit", "name": "oscommerce-2.3.4-rce-exploit", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/osCommerce-2.3.4-RCE-exploit", "stars": 3, "language": "Rust", "description": "Rust code to carry out RCE on osCommerce v2.3.4.1, now with Command History", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "505b4fd9933a", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-01-13T16:13:57Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "whokilleddb/cve-2019-15107", "name": "cve-2019-15107", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/CVE-2019-15107", "stars": 3, "language": "C", "description": "CVE-2019-15107 Webmin Exploit in C", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ea4d2eb80d10", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-02T16:25:32Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "whokilleddb/smoochum", "name": "smoochum", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/Smoochum", "stars": 3, "language": "C", "description": "A miniature version of the (in)famous JYNX Rootkit", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "61390b20b481", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2021-03-30T10:43:42Z", "archived": false, "topContributors": [] }, { "repo": "whokilleddb/malware-in-c", "name": "malware-in-c", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/Malware-In-C", "stars": 3, "language": "C", "description": "Multi Functionality Malware in C for Windows Target", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "db958c84c0f5", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-12-02T08:59:55Z", "archived": false, "topContributors": [] }, { "repo": "soxoj/test-osint-tool", "name": "test-osint-tool", "owner": "soxoj", "url": "https://github.com/soxoj/test-osint-tool", "stars": 3, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fc341322cc61", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-05T22:08:42Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" } ] }, { "repo": "harsh-bothra/go-get-rce", "name": "go-get-rce", "owner": "harsh-bothra", "url": "https://github.com/harsh-bothra/go-get-rce", "stars": 3, "language": "Go", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Harsh Bothra", "cardId": "1c3b5aa29cc91d85", "avatar": "https://avatars.githubusercontent.com/u/66528650?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5040279bcdd9", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-07-14T02:59:25Z", "archived": false, "topContributors": [] }, { "repo": "virtualalllocex/esi-certificate-verify", "name": "esi-certificate-verify", "owner": "virtualalllocex", "url": "https://github.com/VirtualAlllocEx/esi-certificate-verify", "stars": 3, "language": "HTML", "description": "Keep track of participants from the workshop \"Endpoint Security Insights: Shellcode Loaders & Evasion\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "VirtualAllocEx", "cardId": "3ee22841d492020e", "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "74c17fb881b7", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-06T17:34:01Z", "archived": false, "topContributors": [ { "login": "VirtualAlllocEx", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/50073731?v=4", "type": "User" } ] }, { "repo": "shmilylty/shellcode-convert", "name": "shellcode-convert", "owner": "shmilylty", "url": "https://github.com/shmilylty/shellcode-convert", "stars": 3, "language": "Python", "description": "ShellCode encode and decode", "type": "tool", "lanes": [ "2" ], "author": { "name": "Jing Ling", "cardId": "45b922d85b226ff4", "avatar": "https://avatars.githubusercontent.com/u/24275308?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c3a34b33126d", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2017-04-03T04:10:05Z", "archived": false, "topContributors": [] }, { "repo": "m4yfly/navex_fixed", "name": "navex_fixed", "owner": "m4yfly", "url": "https://github.com/m4yfly/Navex_fixed", "stars": 3, "language": null, "description": "Some patch for Navex (Precise and Scalable Exploit Generation for Dynamic Web Applications)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cyril Servières", "cardId": "48ea7a2ab975e911", "avatar": "https://avatars.githubusercontent.com/u/39006839?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "19c72ce21e95", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2020-05-06T16:01:38Z", "archived": false, "topContributors": [] }, { "repo": "m4yfly/imxss-docker", "name": "imxss-docker", "owner": "m4yfly", "url": "https://github.com/m4yfly/imxss-docker", "stars": 3, "language": "Dockerfile", "description": "Dockerfile for a xss platform named imxss", "type": "tool", "lanes": [ "2" ], "author": { "name": "Cyril Servières", "cardId": "48ea7a2ab975e911", "avatar": "https://avatars.githubusercontent.com/u/39006839?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bd58e9dade25", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-25T03:30:33Z", "archived": false, "topContributors": [ { "login": "m4yfly", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/39006839?v=4", "type": "User" } ] }, { "repo": "santosomar/malware-pcaps", "name": "malware-pcaps", "owner": "santosomar", "url": "https://github.com/santosomar/malware-pcaps", "stars": 3, "language": null, "description": "Malware pcaps for testing", "type": "tool", "lanes": [ "2" ], "author": { "name": "Omar Ωr Santos", "cardId": "4ce13817e29c7cf0", "avatar": "https://avatars.githubusercontent.com/u/1690898?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "840e81c67036", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-08T04:58:19Z", "archived": false, "topContributors": [ { "login": "santosomar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1690898?v=4", "type": "User" } ] }, { "repo": "c-h4ck-0/icmp-tunnel", "name": "icmp-tunnel", "owner": "c-h4ck-0", "url": "https://github.com/C-h4ck-0/ICMP-Tunnel", "stars": 3, "language": "Python", "description": "ICMP Tunnel POC in python that demonstrates the communication between a C&C server and a remote agent", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nir Chako", "cardId": "4d455bdfd959fb26", "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6737bc9cbf57", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-03-02T11:40:20Z", "archived": false, "topContributors": [ { "login": "C-h4ck-0", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4", "type": "User" } ] }, { "repo": "pry0cc/cve-2019-0708-2", "name": "cve-2019-0708-2", "owner": "pry0cc", "url": "https://github.com/pry0cc/cve-2019-0708-2", "stars": 3, "language": "Python", "description": "Testing my new bot out", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5833871a9fc6", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2019-05-15T14:55:23Z", "archived": false, "topContributors": [] }, { "repo": "4osp3l/directus-cms-pii-leak", "name": "directus-cms-pii-leak", "owner": "4osp3l", "url": "https://github.com/4osp3l/Directus-CMS-PII-Leak", "stars": 3, "language": null, "description": "Nuclei template to detect unauthenticated user information disclosure on Directus CMS instances", "type": "tool", "lanes": [ "2" ], "author": { "name": "4osp3l", "cardId": "6612479a39124d6e", "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f48b868a14bd", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-23T13:11:50Z", "archived": false, "topContributors": [ { "login": "4osp3l", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/180577881?v=4", "type": "User" } ] }, { "repo": "mukul975/vampire-attacks-draining-life-from-wireless-ad-hoc-sensor-networks", "name": "vampire-attacks-draining-life-from-wireless-ad-hoc-sensor-networks", "owner": "mukul975", "url": "https://github.com/mukul975/Vampire-Attacks-Draining-Life-from-Wireless-Ad-Hoc-Sensor-Networks", "stars": 3, "language": "Java", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mahipal", "cardId": "8653a26074607efd", "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2d50f8e925fb", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-09T19:42:27Z", "archived": false, "topContributors": [ { "login": "mukul975", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/42860185?v=4", "type": "User" } ] }, { "repo": "0xrob/xor-shellcode-queueuserapc-syscall", "name": "xor-shellcode-queueuserapc-syscall", "owner": "0xrob", "url": "https://github.com/0xrob/XOR-Shellcode-QueueUserAPC-Syscall", "stars": 3, "language": "Assembly", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Rob Lowery", "cardId": "925091cab356b9ec", "avatar": "https://avatars.githubusercontent.com/u/50412363?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3e5b68047eb8", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-20T17:57:08Z", "archived": false, "topContributors": [ { "login": "0xrob", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/50412363?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2024-21182", "name": "cve-2024-21182", "owner": "dinosn", "url": "https://github.com/dinosn/CVE-2024-21182", "stars": 3, "language": "Java", "description": "Reproducible Docker lab for CVE-2024-21182 — Oracle WebLogic T3/IIOP OpaqueReference JNDI injection → unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "41cde35cac5b", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-02T14:11:16Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/redis-raptor", "name": "redis-raptor", "owner": "dinosn", "url": "https://github.com/dinosn/redis-raptor", "stars": 3, "language": "Python", "description": "Redis security assessment with RAPTOR autonomous offensive research framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5bb8c5a8ca67", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-27T11:40:43Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "johnwoodman/shellno", "name": "shellno", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/SHellNo", "stars": 3, "language": "C++", "description": "This is the preliminary work for the SHellNo C2 framework", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fd97fc7e3379", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2021-01-26T23:30:09Z", "archived": false, "topContributors": [ { "login": "JohnWoodman", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" }, { "login": "ricardo0129", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/15710124?v=4", "type": "User" } ] }, { "repo": "relys/firmware-extractor", "name": "firmware-extractor", "owner": "relys", "url": "https://github.com/Relys/firmware-extractor", "stars": 3, "language": null, "description": "Firmware to backup your Onewheel bootloader", "type": "tool", "lanes": [ "2" ], "author": { "name": "Syler Clayton", "cardId": "ec8168cd74f0e39c", "avatar": "https://avatars.githubusercontent.com/u/2224238?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "254eab922eb7", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2023-03-25T20:58:40Z", "archived": false, "topContributors": [ { "login": "outlandnish", "c": 51, "avatar": "https://avatars.githubusercontent.com/u/1831746?v=4", "type": "User" }, { "login": "exPHAT", "c": 25, "avatar": "https://avatars.githubusercontent.com/u/7348226?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-2631", "name": "cve-2026-2631", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-2631", "stars": 3, "language": "Python", "description": "Datalogics Ecommerce Delivery – Datalogics < 2.6.60 - Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "818e529c9820", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-20T09:35:32Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-10041", "name": "cve-2025-10041", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-10041", "stars": 3, "language": "Python", "description": "Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ec4c08721939", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-15T07:54:29Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-5394", "name": "cve-2025-5394", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-5394", "stars": 3, "language": "Python", "description": "Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d3604361e85c", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-03T11:55:56Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-5288", "name": "cve-2025-5288", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-5288", "stars": 3, "language": "Python", "description": "Wordpress REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8b20f9c4d690", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-12T20:17:54Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 11, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-4190", "name": "cve-2025-4190", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-4190", "stars": 3, "language": "Python", "description": "CSV Mass Importer <= 1.2 - Admin+ Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "550c7f2948aa", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-07T11:04:00Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39436", "name": "cve-2025-39436", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39436", "stars": 3, "language": "Python", "description": " WordPress I Draw Plugin <= 1.0 is vulnerable to Arbitrary File Upload ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "efb575d084a1", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-19T20:00:56Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "joasasantos/tokenintegrityvisualizer", "name": "tokenintegrityvisualizer", "owner": "joasasantos", "url": "https://github.com/JoasASantos/TokenIntegrityVisualizer", "stars": 3, "language": "Python", "description": "Token & Integrity Visualizer maps process tokens, privileges, and integrity levels with MITRE links and interactive privilege graphs.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a9a037be35c2", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-25T18:26:39Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "joasasantos/shellcode-tester-pro-plugins", "name": "shellcode-tester-pro-plugins", "owner": "joasasantos", "url": "https://github.com/JoasASantos/shellcode-tester-pro-plugins", "stars": 3, "language": "Python", "description": "Plugins for shellcode tester pro tool", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e2057387c4ec", "score": 10, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-07T18:16:52Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "fortra/reversing-and-exploiting-with-free-tools-series", "name": "Reversing-and-Exploiting-with-Free-Tools-Series", "owner": "fortra", "url": "https://github.com/fortra/Reversing-and-Exploiting-with-Free-Tools-Series", "id": "09f47f36266e", "stars": 38, "language": null, "description": "Tips and tricks on reversing and exploiting Windows using free and easy to get tools.", "type": "tool", "pushedAt": "2023-03-21T13:00:35Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Fortra", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "zurro", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/52583?v=4", "type": "User" } ] }, { "repo": "outflanknl/macos-jit", "name": "macos-jit", "owner": "outflanknl", "url": "https://github.com/outflanknl/macos-jit", "id": "6cd5a3e99f2a", "stars": 37, "language": "C++", "description": "Proof-of-concept code for understanding the allow-jit entitlement on macOS", "type": "tool", "pushedAt": "2026-02-19T13:41:54Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Outflank B.V.", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [ { "name": "Kyle Avery", "cardId": "5645ab544cf9fc65", "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "login": "kyleavery" } ], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "kyleavery", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/9327972?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2021-44077", "name": "CVE-2021-44077", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2021-44077", "id": "ef49546b8ab5", "stars": 36, "language": "Python", "description": "Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077", "type": "tool", "pushedAt": "2021-12-08T21:43:16Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "naveenh3", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/196128004?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/konstellation", "name": "konstellation", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/konstellation", "id": "7ba79b7bf4cb", "stars": 35, "language": "Cypher", "description": "Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.", "type": "tool", "pushedAt": "2026-05-05T10:10:45Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "ztgrace", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/2554037?v=4", "type": "User" } ] }, { "repo": "praetorian-inc/mcphammer", "name": "MCPHammer", "owner": "praetorian-inc", "url": "https://github.com/praetorian-inc/MCPHammer", "id": "4eaf849100cb", "stars": 34, "language": "Python", "description": "MCP security testing framework for evaluating Model Context Protocol server vulnerabilities", "type": "tool", "pushedAt": "2026-02-17T16:50:00Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Praetorian", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "realslimsud0", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/105659843?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2024-23108", "name": "CVE-2024-23108", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2024-23108", "id": "88f8c54ad6b9", "stars": 34, "language": "Python", "description": "CVE-2024-23108: Fortinet FortiSIEM Unauthenticated 2nd Order Command Injection", "type": "tool", "pushedAt": "2024-05-21T11:56:19Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mr-sparkles-h3", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "redteampentesting/bitwarden-windows-hello", "name": "bitwarden-windows-hello", "owner": "RedTeamPentesting", "url": "https://github.com/RedTeamPentesting/bitwarden-windows-hello", "id": "6c8b5d6b8bf1", "stars": 32, "language": "Python", "description": "Tools to Exploit Bitwarden v2023.3.0 with Windows Hello", "type": "tool", "pushedAt": "2024-01-03T10:27:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "RedTeam Pentesting GmbH", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 0, "topContributors": [] }, { "repo": "horizon3ai/cve-2025-64155", "name": "CVE-2025-64155", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2025-64155", "id": "d40bf9e8f4aa", "stars": 32, "language": "Python", "description": "CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution", "type": "tool", "pushedAt": "2026-01-13T18:14:08Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "sensepost/cve-2025-64446", "name": "CVE-2025-64446", "owner": "sensepost", "url": "https://github.com/sensepost/CVE-2025-64446", "id": "80316e2e6817", "stars": 31, "language": "Python", "description": "A scanner for the FortiNet vulnerability CVE-2025-64446", "type": "tool", "pushedAt": "2025-11-18T16:27:06Z", "archived": false, "lanes": [ "org" ], "author": { "name": "SensePost", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "singe", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/1150684?v=4", "type": "User" } ] }, { "repo": "withsecurelabs/amsidetection", "name": "AMSIDetection", "owner": "WithSecureLabs", "url": "https://github.com/WithSecureLabs/AMSIDetection", "id": "8970f297015d", "stars": 31, "language": "C#", "description": "AMSI detection PoC", "type": "tool", "pushedAt": "2020-04-14T14:41:37Z", "archived": false, "lanes": [ "org" ], "author": { "name": "WithSecure Labs", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "weejing", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/13026552?v=4", "type": "User" } ] }, { "repo": "fsecurelabs/tapjacking-poc", "name": "tapjacking-poc", "owner": "FSecureLABS", "url": "https://github.com/FSecureLABS/tapjacking-poc", "id": "ae8c5abecd03", "stars": 31, "language": "Java", "description": "", "type": "tool", "pushedAt": "2021-02-24T17:32:39Z", "archived": false, "lanes": [ "org" ], "author": { "name": "F-Secure LABS", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 1, "topContributors": [ { "login": "metall0id", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/1470001?v=4", "type": "User" } ] }, { "repo": "horizon3ai/cve-2024-9465", "name": "CVE-2024-9465", "owner": "horizon3ai", "url": "https://github.com/horizon3ai/CVE-2024-9465", "id": "52ca7c50e6f1", "stars": 31, "language": "Python", "description": "Proof of Concept Exploit for CVE-2024-9465", "type": "tool", "pushedAt": "2024-10-09T16:34:42Z", "archived": false, "lanes": [ "org" ], "author": { "name": "Horizon 3 AI Inc", "cardId": null }, "referencedBy": [], "referencedCount": 0, "contributors": [], "adoptionOperators": 0, "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "contributorCount": 2, "topContributors": [ { "login": "mr-sparkles-h3", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/203685061?v=4", "type": "User" }, { "login": "scopedsecurity", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/18901000?v=4", "type": "User" } ] }, { "repo": "blackorbird/malware", "name": "malware", "owner": "blackorbird", "url": "https://github.com/blackorbird/Malware", "stars": 2, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "blackorbird", "cardId": "e2dc6a94afbec660", "avatar": "https://avatars.githubusercontent.com/u/14833213?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "42ca8324eef7", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-29T13:52:40Z", "archived": false, "topContributors": [ { "login": "blackorbird", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/14833213?v=4", "type": "User" } ] }, { "repo": "win3zz/root_symlink", "name": "root_symlink", "owner": "win3zz", "url": "https://github.com/win3zz/root_symlink", "stars": 2, "language": null, "description": "A minimal repository used to test how Git stores/clones symbolic links, and Google Cloud Shell PoC", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3463b3b83bc2", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-08T08:12:55Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "yujitounai/xss_showcase", "name": "xss_showcase", "owner": "yujitounai", "url": "https://github.com/yujitounai/xss_showcase", "stars": 2, "language": "JavaScript", "description": "XSSのshowxcase", "type": "tool", "lanes": [ "2" ], "author": { "name": "yousukezan", "cardId": "e12382607c5f448d", "avatar": "https://avatars.githubusercontent.com/u/14804369?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d312779fe619", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-15T08:20:29Z", "archived": false, "topContributors": [ { "login": "yujitounai", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/14804369?v=4", "type": "User" } ] }, { "repo": "johnwoodman/template-injection", "name": "template-injection", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/Template-Injection", "stars": 2, "language": null, "description": "Test server that will serve word document macro templates.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "077b04fdaa03", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-11-28T03:06:52Z", "archived": false, "topContributors": [ { "login": "JohnWoodman", "c": 217, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" } ] }, { "repo": "0xben/get-spokes3gsystem", "name": "get-spokes3gsystem", "owner": "0xben", "url": "https://github.com/0xBEN/Get-Spokes3GSystem", "stars": 2, "language": "PowerShell", "description": "PowerShell script to aid in the automation of local privilege escalation path with the SpokesUpdateService", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ben Heater", "cardId": "09ff63ce59e9d814", "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e6c54bd2c4d", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-09-01T20:58:41Z", "archived": false, "topContributors": [ { "login": "0xBEN", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4", "type": "User" } ] }, { "repo": "0xben/thm-oscp.exe", "name": "thm-oscp.exe", "owner": "0xben", "url": "https://github.com/0xBEN/thm-oscp.exe", "stars": 2, "language": "PowerShell", "description": "All POC reverse shell exploits written in PowerShell and targeted the host in this room: https://tryhackme.com/room/bufferoverflowprep", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ben Heater", "cardId": "09ff63ce59e9d814", "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a2e5845cf62c", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-01T18:19:53Z", "archived": false, "topContributors": [ { "login": "0xBEN", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4", "type": "User" } ] }, { "repo": "whokilleddb/konga-privilege-escalation-exploit", "name": "konga-privilege-escalation-exploit", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/Konga-Privilege-Escalation-Exploit", "stars": 2, "language": "Python", "description": "Authenticated Privilege Escalation In Konga API Gateway", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cc20fbba8ae6", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-04T16:17:24Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "whokilleddb/xss-data-exfiltrator", "name": "xss-data-exfiltrator", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/XSS-Data-Exfiltrator", "stars": 2, "language": "Rust", "description": "Use XSS to capture data", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "497714ad7cb7", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-02-21T10:59:03Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 12, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "whokilleddb/restaurant-management-system-exploit", "name": "restaurant-management-system-exploit", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/Restaurant-Management-System-Exploit", "stars": 2, "language": "Rust", "description": "Restaurant Management System v1 exploit in Rust", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7dcb50cd2057", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-30T05:02:26Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "whokilleddb/cve-2019-17662", "name": "cve-2019-17662", "owner": "whokilleddb", "url": "https://github.com/whokilleddb/CVE-2019-17662", "stars": 2, "language": "C", "description": "Exploit for CVE-2019-17662 (ThinVNC 1.0b1)", "type": "tool", "lanes": [ "2" ], "author": { "name": "db", "cardId": "11fcb6aa20f12266", "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "fd2b108cba65", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-10-02T22:35:59Z", "archived": false, "topContributors": [ { "login": "whokilleddb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/56482137?v=4", "type": "User" } ] }, { "repo": "gothburz/cybersecfolio", "name": "cybersecfolio", "owner": "gothburz", "url": "https://github.com/gothburz/CyberSecFolio", "stars": 2, "language": "HTML", "description": "CyberSecFolio hosts an extensive collection of PDF versions of distinguished threat and vulnerability research blogs, alongside a curated source of proof-of-concept code for security vulnerabilities.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Peter Girnus (gothburz)", "cardId": "17847952dec8a2b4", "avatar": "https://avatars.githubusercontent.com/u/12678629?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9ced35f6fb14", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-01-16T21:28:09Z", "archived": false, "topContributors": [ { "login": "gothburz", "c": 50, "avatar": "https://avatars.githubusercontent.com/u/12678629?v=4", "type": "User" } ] }, { "repo": "soxoj/osint-forum-bot-docs", "name": "osint-forum-bot-docs", "owner": "soxoj", "url": "https://github.com/soxoj/osint-forum-bot-docs", "stars": 2, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Soxoj", "cardId": "17f7854dd1907861", "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b91f8e5ad3c0", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-08-02T15:21:15Z", "archived": false, "topContributors": [ { "login": "soxoj", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/31013580?v=4", "type": "User" } ] }, { "repo": "faanross/antisyphon_course_c2_golang", "name": "antisyphon_course_c2_golang", "owner": "faanross", "url": "https://github.com/faanross/antisyphon_course_c2_golang", "stars": 2, "language": "Go", "description": "Complete C2 framework course solutions for AntiSyphon WWHF Denver workshop (Feb 10-11, 2025)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Faan Rossouw", "cardId": "46107ad224c5ab63", "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a6ffdd3cfcd1", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-09T22:46:32Z", "archived": false, "topContributors": [ { "login": "faanross", "c": 78, "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4", "type": "User" } ] }, { "repo": "faanross/icmp_gosh", "name": "icmp_gosh", "owner": "faanross", "url": "https://github.com/faanross/ICMP_GOSH", "stars": 2, "language": "Go", "description": "proof-of-concept C2 channel that demonstrates covert communication using ICMP Type 3", "type": "tool", "lanes": [ "2" ], "author": { "name": "Faan Rossouw", "cardId": "46107ad224c5ab63", "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "37782eddf40c", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-09T17:12:40Z", "archived": false, "topContributors": [ { "login": "faanross", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/112903442?v=4", "type": "User" } ] }, { "repo": "c-h4ck-0/learn-about-cve-2025-31133-poc", "name": "learn-about-cve-2025-31133-poc", "owner": "c-h4ck-0", "url": "https://github.com/C-h4ck-0/Learn-about-cve-2025-31133-poc", "stars": 2, "language": "Shell", "description": "Learn about CVE-2025-31133", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nir Chako", "cardId": "4d455bdfd959fb26", "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "efeda7b0401a", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-02T15:06:30Z", "archived": false, "topContributors": [ { "login": "C-h4ck-0", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/48152831?v=4", "type": "User" } ] }, { "repo": "pwnfunction/chip8", "name": "chip8", "owner": "pwnfunction", "url": "https://github.com/PwnFunction/chip8", "stars": 2, "language": "JavaScript", "description": "chip8 vm implementation in js with a debugger", "type": "tool", "lanes": [ "2" ], "author": { "name": "PwnFunction", "cardId": "561fb0609b29c08d", "avatar": "https://avatars.githubusercontent.com/u/19750782?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8a81321b082e", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-12-18T12:10:54Z", "archived": false, "topContributors": [ { "login": "PwnFunction", "c": 65, "avatar": "https://avatars.githubusercontent.com/u/19750782?v=4", "type": "User" } ] }, { "repo": "nixintel/sansosintsummit2025", "name": "sansosintsummit2025", "owner": "nixintel", "url": "https://github.com/nixintel/sansosintsummit2025", "stars": 2, "language": null, "description": "Resources and links from my 2025 SANS OSINT Summit Talks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nixintel (Nick Furneaux)", "cardId": "5c6363d58afa3660", "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9985c750c42c", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-22T10:38:58Z", "archived": false, "topContributors": [ { "login": "nixintel", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/38961543?v=4", "type": "User" } ] }, { "repo": "abhinandan-khurana/go-pwn-swagger", "name": "go-pwn-swagger", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/go-pwn-swagger", "stars": 2, "language": "Go", "description": "A comprehensive Swagger UI version detection and vulnerability scanner written in Go.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "954b8adb5982", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-18T10:11:19Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" } ] }, { "repo": "secfigo/malware-sample", "name": "malware-sample", "owner": "secfigo", "url": "https://github.com/secfigo/malware-sample", "stars": 2, "language": null, "description": "malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mohammed A", "cardId": "7edfd9dd2e7f70c9", "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b274d31bb6e9", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-11-16T05:10:37Z", "archived": false, "topContributors": [ { "login": "secfigo", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4", "type": "User" } ] }, { "repo": "0xsyr0/ai-exploit-forge-collection", "name": "ai-exploit-forge-collection", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/AI-Exploit-Forge-Collection", "stars": 2, "language": "Python", "description": "A curated collection of AI-assisted exploit scripts developed during penetration testing engagements, red team operations, and CTF competitions.", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "91201d79d93a", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-14T09:05:02Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" } ] }, { "repo": "0xsyr0/ai-arsenal", "name": "ai-arsenal", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/AI-Arsenal", "stars": 2, "language": "Python", "description": "A curated collection of AI-assisted scripts for offensive security operations, penetration testing, and red team engagements.", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e37da6f39900", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-26T18:07:11Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" } ] }, { "repo": "ahmedkhlief/cve-2023-23397-poc-using-interop-outlook", "name": "cve-2023-23397-poc-using-interop-outlook", "owner": "ahmedkhlief", "url": "https://github.com/ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook", "stars": 2, "language": "C#", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "ahmedkhlief", "cardId": "a1a8f32c1bbfcafe", "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c16e6ff4de18", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-03-19T08:10:44Z", "archived": false, "topContributors": [ { "login": "ahmedkhlief", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/24752712?v=4", "type": "User" } ] }, { "repo": "boku7/acal-rce", "name": "acal-rce", "owner": "boku7", "url": "https://github.com/boku7/aCal-RCE", "stars": 2, "language": "Python", "description": "Exploit Development files for aCal web application - reflected XSS to RCE.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bobby Cooke", "cardId": "a3ac565e711e7035", "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ed6b2c4d1da", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-07-29T17:29:21Z", "archived": false, "topContributors": [ { "login": "boku7", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/19784872?v=4", "type": "User" } ] }, { "repo": "dinosn/proftpd-cve-2026-42167-analysis", "name": "proftpd-cve-2026-42167-analysis", "owner": "dinosn", "url": "https://github.com/dinosn/proftpd-CVE-2026-42167-analysis", "stars": 2, "language": "Python", "description": "Independent reproduction, code-level root-cause analysis, and realistic-exposure write-up for CVE-2026-42167 (ProFTPD mod_sql is_escaped_text() bypass).", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "02a58928bd85", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-29T06:52:38Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "dinosn/netscaler-startwebview", "name": "netscaler-startwebview", "owner": "dinosn", "url": "https://github.com/dinosn/netscaler-startwebview", "stars": 2, "language": "Python", "description": "Netscaler simple python exploit for mass checks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "91fbf805d735", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-05-06T17:21:42Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "johnwoodman/megparser", "name": "megparser", "owner": "johnwoodman", "url": "https://github.com/JohnWoodman/megParser", "stars": 2, "language": "Shell", "description": "A quick script to parse Tomnomnom's meg scanner.", "type": "tool", "lanes": [ "2" ], "author": { "name": "John Woodman", "cardId": "cfc6603b1026ac0a", "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7bb704b89f5f", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2020-08-09T16:50:45Z", "archived": false, "topContributors": [ { "login": "John-woodman", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/32111296?v=4", "type": "User" }, { "login": "JohnWoodman", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/10525737?v=4", "type": "User" } ] }, { "repo": "fdzdev/injectify", "name": "injectify", "owner": "fdzdev", "url": "https://github.com/fdzdev/Injectify", "stars": 2, "language": "Python", "description": "Injectify is a versatile injection testing repository featuring asynchronous and threaded header payload tools for BXSS, SQLi, and multi-header attacks. It efficiently facilitates vulnerability scanni", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f3f91689feb7", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-06T07:35:40Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "random-robbie/host-scanner", "name": "host-scanner", "owner": "random-robbie", "url": "https://github.com/random-robbie/host-scanner", "stars": 2, "language": "Go", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25cea42285a6", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-10-28T16:18:50Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" }, { "login": "RandomRobbieBF", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/51722811?v=4", "type": "User" } ] }, { "repo": "bin3xish477/htf", "name": "htf", "owner": "bin3xish477", "url": "https://github.com/bin3xish477/htf", "stars": 2, "language": "Go", "description": "htf (Host That File) is a tool to make serving up your favorite pentest tools simpler and faster", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Rodriguez", "cardId": "d53200790bbf6dc2", "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "17e9cbc36b97", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-11-05T05:47:03Z", "archived": false, "topContributors": [ { "login": "bin3xish477", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4", "type": "User" } ] }, { "repo": "blackorbird/ipv6_ioc_collection", "name": "ipv6_ioc_collection", "owner": "blackorbird", "url": "https://github.com/blackorbird/IPv6_IOC_Collection", "stars": 2, "language": null, "description": "IPv6_IOC_Collection (malware use)", "type": "tool", "lanes": [ "2" ], "author": { "name": "blackorbird", "cardId": "e2dc6a94afbec660", "avatar": "https://avatars.githubusercontent.com/u/14833213?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0a6500ee3211", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-03-03T07:47:12Z", "archived": false, "topContributors": [ { "login": "blackorbird", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/14833213?v=4", "type": "User" } ] }, { "repo": "relys/vesc_dev_docker", "name": "vesc_dev_docker", "owner": "relys", "url": "https://github.com/Relys/vesc_dev_docker", "stars": 2, "language": "Shell", "description": "Full toolchain and automated build setup for VESC controllers, including firmware, VESC Tool, packages, VESC Express and NRF52 bluetooth firmware.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Syler Clayton", "cardId": "ec8168cd74f0e39c", "avatar": "https://avatars.githubusercontent.com/u/2224238?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d276cc83e45c", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-08-06T17:13:28Z", "archived": false, "topContributors": [ { "login": "Relys", "c": 40, "avatar": "https://avatars.githubusercontent.com/u/2224238?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-12674", "name": "cve-2025-12674", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-12674", "stars": 2, "language": "Python", "description": "KiotViet Sync <= 1.8.5 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "939a84bbd4c9", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-05T19:42:02Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-68860", "name": "cve-2025-68860", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-68860", "stars": 2, "language": "Python", "description": "WordPress Mobile builder Plugin <= 1.4.2 is vulnerable to a high priority Broken Authentication", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6e4a38cda8d5", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-31T18:34:48Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-14156", "name": "cve-2025-14156", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-14156", "stars": 2, "language": "Python", "description": "Fox LMS – WordPress LMS Plugin 1.0.4.7 - 1.0.5.1 - Unauthenticated Privilege Escalation via 'createOrder'", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "7ce3c13a5f9a", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-18T18:21:17Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-11170", "name": "cve-2025-11170", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-11170", "stars": 2, "language": "Python", "description": "WP移行専用プラグイン for CPI <= 1.0.2 - Unauthenticated Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b8668d5d0aab", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-11T20:44:36Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-7401", "name": "cve-2025-7401", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-7401", "stars": 2, "language": "Python", "description": "Premium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c0f81e24a6d8", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-07T20:47:02Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-8625", "name": "cve-2025-8625", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-8625", "stars": 2, "language": "Python", "description": "Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "486b66d63917", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-03T18:13:33Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-49029", "name": "cve-2025-49029", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-49029", "stars": 2, "language": null, "description": " WordPress Custom Login And Signup Widget Plugin <= 1.0 is vulnerable to Arbitrary Code Execution ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "60d95ef34f60", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-01T16:05:52Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-47646", "name": "cve-2025-47646", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-47646", "stars": 2, "language": null, "description": " WordPress PSW Front-end Login & Registration Plugin <= 1.12 is vulnerable to Broken Authentication ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f6d9efea3c92", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-16T05:49:14Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-32583", "name": "cve-2025-32583", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-32583", "stars": 2, "language": "Python", "description": " WordPress PDF 2 Post Plugin <= 2.4.0 is vulnerable to Remote Code Execution (RCE) +Subscriber", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0b75dba6fdde", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-10T21:25:27Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-3605", "name": "cve-2025-3605", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-3605", "stars": 2, "language": "Python", "description": " WordPress Frontend Login and Registration Blocks Plugin <= 1.0.7 is vulnerable to Privilege Escalation ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "943c1a73f5b3", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-09T23:51:24Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-1304", "name": "cve-2025-1304", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-1304", "stars": 2, "language": "Python", "description": " WordPress NewsBlogger Theme <= 0.2.5.1 is vulnerable to Arbitrary File Upload ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "643312cca2e9", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-02T20:41:50Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-32206", "name": "cve-2025-32206", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-32206", "stars": 2, "language": "Python", "description": " WordPress Processing Projects Plugin <= 1.0.2 is vulnerable to Arbitrary File Upload ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8718fa84832c", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-11T13:59:29Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-1307", "name": "cve-2025-1307", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-1307", "stars": 2, "language": "Python", "description": "Newscrunch <= 1.8.4 - Authenticated (Subscriber+) Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "64740279925b", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:32:10Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2024-6132", "name": "cve-2024-6132", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2024-6132", "stars": 2, "language": "Python", "description": "Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9b6fa0351068", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:31:22Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "zoee-gif/caddywipercs", "name": "caddywipercs", "owner": "zoee-gif", "url": "https://github.com/zoee-gif/CaddyWiperCS", "stars": 2, "language": "C#", "description": "C# implementation of the CaddyWiper wiper malware", "type": "tool", "lanes": [ "2" ], "author": { "name": "Zoe Cheuvront", "cardId": "f913a4d6f095ad10", "avatar": "https://avatars.githubusercontent.com/u/70719914?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0df00d2abf54", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-11-23T05:21:23Z", "archived": false, "topContributors": [ { "login": "zoee-gif", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/70719914?v=4", "type": "User" } ] }, { "repo": "rek7/interactsh-mcp", "name": "interactsh-mcp", "owner": "rek7", "url": "https://github.com/rek7/interactsh-mcp", "stars": 2, "language": "Python", "description": "MCP server wrapping ProjectDiscovery's Interactsh. Lets LLM agents mint OOB callback URLs and poll for interactions to confirm SSRF, log4shell, blind XSS, DNS exfil, etc. Works with the public oast.* ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0c0122e5be25", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-17T23:13:07Z", "archived": false, "topContributors": [ { "login": "r0path", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/173115730?v=4", "type": "User" } ] }, { "repo": "joasasantos/gpu-z-v3-poc", "name": "gpu-z-v3-poc", "owner": "joasasantos", "url": "https://github.com/JoasASantos/GPU-Z-v3-PoC", "stars": 2, "language": "C", "description": "Safe PoC to waiting CVE", "type": "tool", "lanes": [ "2" ], "author": { "name": "Joas A Santos", "cardId": "fac83eb97183bccf", "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f38cddb60b52", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-12T00:28:37Z", "archived": false, "topContributors": [ { "login": "JoasASantos", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/34966120?v=4", "type": "User" } ] }, { "repo": "seifreed/markdowningress", "name": "markdowningress", "owner": "seifreed", "url": "https://github.com/seifreed/MarkDownIngress", "stars": 2, "language": "Python", "description": "MarkDownIngress is a security-first web content ingestion engine designed specifically for LLM pipelines. It extracts, sanitizes, and analyzes web content while detecting prompt injection attempts, pr", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e9ff1ce9dae2", "score": 9, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-08T11:58:20Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 653, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "win3zz/webshell", "name": "webshell", "owner": "win3zz", "url": "https://github.com/win3zz/Webshell", "stars": 1, "language": "Java", "description": "A simple and lightweight JSP webshell/backdoor", "type": "tool", "lanes": [ "2" ], "author": { "name": "Bipin Jitiya", "cardId": "967d232a2f6502e8", "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "677cd23b6999", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 20, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-27T17:57:32Z", "archived": false, "topContributors": [ { "login": "win3zz", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12781459?v=4", "type": "User" } ] }, { "repo": "kbsec/speedrun", "name": "speedrun", "owner": "kbsec", "url": "https://github.com/kbsec/SpeedRun", "stars": 1, "language": "Python", "description": "A (bad) reference c2 (initially) built in a single lecture. Features are added as the course progresses. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Kai", "cardId": "ac82068bd32a729c", "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "d169ac1ef94a", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 8, "contributorCount": 1, "contributors": [], "pushedAt": "2022-05-01T23:28:41Z", "archived": false, "topContributors": [ { "login": "kbsec", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/11823496?v=4", "type": "User" } ] }, { "repo": "dinosn/cve-2026-42945-nginx32-lab", "name": "cve-2026-42945-nginx32-lab", "owner": "dinosn", "url": "https://github.com/dinosn/cve-2026-42945-nginx32-lab", "stars": 1, "language": "Python", "description": "CVE-2026-42945 nginx 32-bit exploit lab ASLR enabled", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "755efa5f897a", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-16T09:02:07Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "stavc/documentscanner", "name": "documentscanner", "owner": "stavc", "url": "https://github.com/StavC/DocumentScanner", "stars": 1, "language": "Python", "description": "Simple Document scanner ", "type": "tool", "lanes": [ "2" ], "author": { "name": "StAJect0r", "cardId": "038c5b7196ef20ef", "avatar": "https://avatars.githubusercontent.com/u/26565498?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "25c7bbceb5fe", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-12-25T18:00:52Z", "archived": false, "topContributors": [ { "login": "StavC", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26565498?v=4", "type": "User" } ] }, { "repo": "abhiyan-chhetri/wsdl-raider", "name": "wsdl-raider", "owner": "abhiyan-chhetri", "url": "https://github.com/abhiyan-chhetri/WSDL-Raider", "stars": 1, "language": "Java", "description": "WSDL Raider is a Burp Suite extension designed to streamline the security testing of SOAP web services. It parses WSDL files, visualizes the service structure, generates smart SOAP requests, and inclu", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhiyan Chhetri", "cardId": "057320db5f7d57dd", "avatar": "https://avatars.githubusercontent.com/u/159841947?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0212b527c1de", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-12-22T13:46:20Z", "archived": false, "topContributors": [ { "login": "abhiyan-chhetri", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/159841947?v=4", "type": "User" }, { "login": "lordlezehaf", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/11529368?v=4", "type": "User" } ] }, { "repo": "0xben/dostackbufferoverflowgood-poc", "name": "dostackbufferoverflowgood-poc", "owner": "0xben", "url": "https://github.com/0xBEN/dostackbufferoverflowgood-POC", "stars": 1, "language": "PowerShell", "description": "POC exploit reverse shell code written in PowerShell targeting the dostackbufferoverflowgood.exe service", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ben Heater", "cardId": "09ff63ce59e9d814", "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "11c87f8027c4", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-12-01T18:25:32Z", "archived": false, "topContributors": [ { "login": "0xBEN", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/26947869?v=4", "type": "User" } ] }, { "repo": "raskolnikov90/openemr-5.0.1.3-authentication-bypass-time-based-sqli-exploit", "name": "openemr-5.0.1.3-authentication-bypass-time-based-sqli-exploit", "owner": "raskolnikov90", "url": "https://github.com/raskolnikov90/OpenEMR-5.0.1.3-Authentication-Bypass-Time-Based-SQLi-Exploit", "stars": 1, "language": "Python", "description": "Exploit that combines two known vulnerabilities in OpenEMR 5.0.1.3 to extract the admin account hash", "type": "tool", "lanes": [ "2" ], "author": { "name": "LainKusanagi", "cardId": "0b8f90ebec1aef9e", "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b2c424aea285", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-04-21T01:50:21Z", "archived": false, "topContributors": [ { "login": "raskolnikov90", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/44821234?v=4", "type": "User" } ] }, { "repo": "dancas93/desync-scanner", "name": "desync-scanner", "owner": "dancas93", "url": "https://github.com/Dancas93/Desync-Scanner", "stars": 1, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Daniele Castronovo", "cardId": "25a3c6dbebb180f1", "avatar": "https://avatars.githubusercontent.com/u/12494315?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4cc5a96acb61", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-11-15T17:34:06Z", "archived": false, "topContributors": [ { "login": "Dancas93", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/12494315?v=4", "type": "User" } ] }, { "repo": "datalux/pelt-firmware", "name": "pelt-firmware", "owner": "datalux", "url": "https://github.com/Datalux/pelt-firmware", "stars": 1, "language": null, "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Giuseppe Criscione", "cardId": "26e85b3e45120301", "avatar": "https://avatars.githubusercontent.com/u/26717218?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "13fe470f5831", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "pushedAt": "2019-12-03T14:59:15Z", "archived": false, "topContributors": [] }, { "repo": "nicholasaleks/insiderware", "name": "insiderware", "owner": "nicholasaleks", "url": "https://github.com/nicholasaleks/insiderware", "stars": 1, "language": "C++", "description": "The proximity-driven malware outbreak security game built on Meshtastic + Heltec V3 badges. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nick Aleks", "cardId": "28d1808f86ede3c0", "avatar": "https://avatars.githubusercontent.com/u/8972200?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "b77013f16414", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 100, "contributors": [], "pushedAt": "2025-09-30T03:49:24Z", "archived": false, "topContributors": [ { "login": "geeksville", "c": 2160, "avatar": "https://avatars.githubusercontent.com/u/225513?v=4", "type": "User" }, { "login": "caveman99", "c": 1800, "avatar": "https://avatars.githubusercontent.com/u/25002?v=4", "type": "User" }, { "login": "thebentern", "c": 1629, "avatar": "https://avatars.githubusercontent.com/u/9000580?v=4", "type": "User" }, { "login": "mc-hamster", "c": 1155, "avatar": "https://avatars.githubusercontent.com/u/12804989?v=4", "type": "User" }, { "login": "jp-bennett", "c": 437, "avatar": "https://avatars.githubusercontent.com/u/5630967?v=4", "type": "User" }, { "login": "github-actions[bot]", "c": 375, "avatar": "https://avatars.githubusercontent.com/in/15368?v=4", "type": "Bot" }, { "login": "GUVWAF", "c": 259, "avatar": "https://avatars.githubusercontent.com/u/78759985?v=4", "type": "User" }, { "login": "fifieldt", "c": 181, "avatar": "https://avatars.githubusercontent.com/u/1287116?v=4", "type": "User" }, { "login": "vidplace7", "c": 158, "avatar": "https://avatars.githubusercontent.com/u/1779290?v=4", "type": "User" }, { "login": "sachaw", "c": 126, "avatar": "https://avatars.githubusercontent.com/u/11172820?v=4", "type": "User" }, { "login": "todd-herbert", "c": 119, "avatar": "https://avatars.githubusercontent.com/u/24772776?v=4", "type": "User" }, { "login": "renovate[bot]", "c": 103, "avatar": "https://avatars.githubusercontent.com/in/2740?v=4", "type": "Bot" }, { "login": "markbirss", "c": 98, "avatar": "https://avatars.githubusercontent.com/u/22388007?v=4", "type": "User" }, { "login": "mverch67", "c": 96, "avatar": "https://avatars.githubusercontent.com/u/71137295?v=4", "type": "User" }, { "login": "mkinney", "c": 58, "avatar": "https://avatars.githubusercontent.com/u/2219838?v=4", "type": "User" }, { "login": "lewisxhe", "c": 54, "avatar": "https://avatars.githubusercontent.com/u/22990954?v=4", "type": "User" }, { "login": "a-f-G-U-C", "c": 38, "avatar": "https://avatars.githubusercontent.com/u/65810997?v=4", "type": "User" }, { "login": "crossan007", "c": 36, "avatar": "https://avatars.githubusercontent.com/u/11679900?v=4", "type": "User" }, { "login": "garethhcoleman", "c": 35, "avatar": "https://avatars.githubusercontent.com/u/30833824?v=4", "type": "User" }, { "login": "esev", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/289218?v=4", "type": "User" }, { "login": "Xaositek", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/85509?v=4", "type": "User" }, { "login": "Professr", "c": 34, "avatar": "https://avatars.githubusercontent.com/u/769049?v=4", "type": "User" }, { "login": "osmanovv", "c": 31, "avatar": "https://avatars.githubusercontent.com/u/7123463?v=4", "type": "User" }, { "login": "rcarteraz", "c": 30, "avatar": "https://avatars.githubusercontent.com/u/6912600?v=4", "type": "User" }, { "login": "andrekir", "c": 29, "avatar": "https://avatars.githubusercontent.com/u/48680741?v=4", "type": "User" }, { "login": "D4rk4", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/1151390?v=4", "type": "User" }, { "login": "ndoo", "c": 27, "avatar": "https://avatars.githubusercontent.com/u/262784?v=4", "type": "User" }, { "login": "prampec", "c": 26, "avatar": "https://avatars.githubusercontent.com/u/10376327?v=4", "type": "User" }, { "login": "Mictronics", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/11965780?v=4", "type": "User" }, { "login": "compumike", "c": 22, "avatar": "https://avatars.githubusercontent.com/u/1057385?v=4", "type": "User" } ] }, { "repo": "cybergabby/jwt-weak-signature-checker", "name": "jwt-weak-signature-checker", "owner": "cybergabby", "url": "https://github.com/cybergabby/JWT-Weak-Signature-Checker", "stars": 1, "language": "Python", "description": "JWT Weak Signature Checker / Decoder A lightweight Python offensive-security utility for inspecting JSON Web Tokens (JWTs), detecting signature-related misconfigurations, and brute-forcing weak HMAC ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gabriel Odusanya", "cardId": "3e5308763d30835f", "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "852dc375c4fd", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-11-25T14:55:56Z", "archived": false, "topContributors": [ { "login": "cybergabby", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4", "type": "User" } ] }, { "repo": "cybergabby/networkportscanning", "name": "networkportscanning", "owner": "cybergabby", "url": "https://github.com/cybergabby/NetworkPortScanning", "stars": 1, "language": null, "description": "PortScan Recon is a lightweight, open-source reconnaissance toolkit and knowledgebase focused on network port scanning. It helps ethical hackers and penetration testers identify open services, extract", "type": "tool", "lanes": [ "2" ], "author": { "name": "Gabriel Odusanya", "cardId": "3e5308763d30835f", "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8aceed42a8ee", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-07-10T10:33:49Z", "archived": false, "topContributors": [ { "login": "cybergabby", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/215575392?v=4", "type": "User" } ] }, { "repo": "speedbunny/election_integrity_toolkit", "name": "election_integrity_toolkit", "owner": "speedbunny", "url": "https://github.com/speedbunny/election_integrity_toolkit", "stars": 1, "language": "Python", "description": "2020 Election Integrity Toolkit - Code used in the \"Framework for Forensic Audits of Election Integrity (FFAEI)\" paper.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sarah Eaglesfield", "cardId": "4e3ca95bbac271f1", "avatar": "https://avatars.githubusercontent.com/u/950677?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1f921784ea58", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-11-10T16:52:43Z", "archived": false, "topContributors": [ { "login": "speedbunny", "c": 39, "avatar": "https://avatars.githubusercontent.com/u/950677?v=4", "type": "User" }, { "login": "ryxcommar", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/53090272?v=4", "type": "User" } ] }, { "repo": "pry0cc/c2ssh", "name": "c2ssh", "owner": "pry0cc", "url": "https://github.com/pry0cc/c2ssh", "stars": 1, "language": "Ruby", "description": "A simple API written in Ruby using Sinatra, to handle local port definitions for a reverse ssh c2.", "type": "tool", "lanes": [ "2" ], "author": { "name": "pry0cc", "cardId": "6263d7c7e06a63ee", "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "bc94de8f8c48", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-03-28T18:08:47Z", "archived": false, "topContributors": [ { "login": "pry0cc", "c": 15, "avatar": "https://avatars.githubusercontent.com/u/4334403?v=4", "type": "User" } ] }, { "repo": "shuvonsec/ai-copilot-payload-builder", "name": "ai-copilot-payload-builder", "owner": "shuvonsec", "url": "https://github.com/shuvonsec/ai-copilot-payload-builder", "stars": 1, "language": "Python", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Md Shariar Shanaz Shuvon", "cardId": "6cf9e09eb4b1508c", "avatar": "https://avatars.githubusercontent.com/u/83355567?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f587a369a277", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 0, "contributors": [], "pushedAt": "2026-03-07T13:20:29Z", "archived": false, "topContributors": [] }, { "repo": "abhinandan-khurana/rediergeon", "name": "rediergeon", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/rediergeon", "stars": 1, "language": "Go", "description": "A Comprehensive Pentest Suite for Redis.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1aef699072ae", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-18T14:17:17Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" } ] }, { "repo": "abhinandan-khurana/exploit-payload-generator-ai-agent", "name": "exploit-payload-generator-ai-agent", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/exploit-payload-generator-ai-agent", "stars": 1, "language": "Python", "description": "A powerful local AI-agentic tool that generates and validates advanced exploit payloads using CrewAI framework. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8fbdc44f05db", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-02-17T11:29:42Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" } ] }, { "repo": "abhinandan-khurana/l337_5ub0v3r", "name": "l337_5ub0v3r", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/l337_5ub0v3r", "stars": 1, "language": "Python", "description": "A python tool to check subdomain takeover vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1297c7579590", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2024-03-19T09:26:43Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" }, { "login": "deepsource-io[bot]", "c": 1, "avatar": "https://avatars.githubusercontent.com/in/16372?v=4", "type": "Bot" } ] }, { "repo": "abhinandan-khurana/simple-packet-sniffer", "name": "simple-packet-sniffer", "owner": "abhinandan-khurana", "url": "https://github.com/Abhinandan-Khurana/Simple-Packet-Sniffer", "stars": 1, "language": "Python", "description": "This is a command line packet scanner utility for Windows based on Python. When in a network, you can use this to sniff http packets for leaked usernames and passwords, thereby performing MITM.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Abhinandan Khurana", "cardId": "6db0efcb074d522d", "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2dbf41da6795", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-01-08T20:05:24Z", "archived": false, "topContributors": [ { "login": "Abhinandan-Khurana", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/75041733?v=4", "type": "User" } ] }, { "repo": "mosesrenegade/cve-2018-8004", "name": "cve-2018-8004", "owner": "mosesrenegade", "url": "https://github.com/mosesrenegade/CVE-2018-8004", "stars": 1, "language": null, "description": "CVE Repository for HTTP DeSynchronization Attacks", "type": "tool", "lanes": [ "2" ], "author": { "name": "Moses Frost", "cardId": "73a6b5b8fc9045f0", "avatar": "https://avatars.githubusercontent.com/u/944551?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "713ce3e2a827", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2020-08-29T14:53:02Z", "archived": false, "topContributors": [ { "login": "mosesrenegade", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/944551?v=4", "type": "User" } ] }, { "repo": "ferreirasc/go-dllinjection", "name": "go-dllinjection", "owner": "ferreirasc", "url": "https://github.com/ferreirasc/go-dllinjection", "stars": 1, "language": "Go", "description": "Just a classic DLL injection written in Go", "type": "tool", "lanes": [ "2" ], "author": { "name": "Leonardo Ferreira", "cardId": "7aa866a407068c0a", "avatar": "https://avatars.githubusercontent.com/u/4137088?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eda1749954b0", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-04-12T22:20:53Z", "archived": false, "topContributors": [ { "login": "ferreirasc", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/4137088?v=4", "type": "User" } ] }, { "repo": "secfigo/packer-hardening-exercise", "name": "packer-hardening-exercise", "owner": "secfigo", "url": "https://github.com/secfigo/packer-hardening-exercise", "stars": 1, "language": "Shell", "description": "Practical DevSecOps course exercise on packer", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mohammed A", "cardId": "7edfd9dd2e7f70c9", "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2616d922e739", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2018-03-30T17:57:29Z", "archived": false, "topContributors": [ { "login": "imohammedzen", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/23624531?v=4", "type": "User" }, { "login": "secfigo", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/11695998?v=4", "type": "User" } ] }, { "repo": "0xsyr0/havoc-c2-ssrf-rce-exploit", "name": "havoc-c2-ssrf-rce-exploit", "owner": "0xsyr0", "url": "https://github.com/0xsyr0/Havoc-C2-SSRF-RCE-Exploit", "stars": 1, "language": "Python", "description": "Merged exploit to abuse SSRF for delivering RCE through websockets.", "type": "tool", "lanes": [ "2" ], "author": { "name": "0xsyr0", "cardId": "84e3270200d12d71", "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "184432dd9812", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-05T15:33:34Z", "archived": false, "topContributors": [ { "login": "0xsyr0", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/67317571?v=4", "type": "User" } ] }, { "repo": "repnz/dotflow", "name": "dotflow", "owner": "repnz", "url": "https://github.com/repnz/dotflow", "stars": 1, "language": "C#", "description": "DotNet Actor Model POC library", "type": "tool", "lanes": [ "2" ], "author": { "name": "Ori Damari", "cardId": "98598c9b6606aef1", "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5c112f585f5c", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2018-05-04T07:40:51Z", "archived": false, "topContributors": [ { "login": "repnz", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/35385002?v=4", "type": "User" } ] }, { "repo": "reversinglabs/rl-mcp-community", "name": "rl-mcp-community", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/rl-mcp-community", "stars": 1, "language": "Python", "description": "MCP server for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violations before they enter your project. ", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "2df48d1d826e", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-24T08:33:32Z", "archived": false, "topContributors": [ { "login": "rl-maartenb", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/131449090?v=4", "type": "User" } ] }, { "repo": "reversinglabs/rl-scanner-cloud", "name": "rl-scanner-cloud", "owner": "reversinglabs", "url": "https://github.com/reversinglabs/rl-scanner-cloud", "stars": 1, "language": "Python", "description": "ReversingLabs rl-scanner-cloud Docker image", "type": "tool", "lanes": [ "2" ], "author": { "name": "ReversingLabs", "cardId": "9909dec665e51915", "avatar": "https://avatars.githubusercontent.com/u/1816097?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "e53953b7fd2c", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-05-21T09:01:20Z", "archived": false, "topContributors": [ { "login": "rl-devops", "c": 17, "avatar": "https://avatars.githubusercontent.com/u/55623149?v=4", "type": "User" }, { "login": "rl-maartenb", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/131449090?v=4", "type": "User" } ] }, { "repo": "jodiskripe/mixloader", "name": "mixloader", "owner": "jodiskripe", "url": "https://github.com/JodisKripe/MixLoader", "stars": 1, "language": "C", "description": "Shellcode Loader With a Cocktail of Techniques", "type": "tool", "lanes": [ "2" ], "author": { "name": "Siddharth Johri", "cardId": "9e7b3452cd950a13", "avatar": "https://avatars.githubusercontent.com/u/34266009?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "eeafbc3c10d1", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-10-14T09:16:48Z", "archived": false, "topContributors": [ { "login": "JodisKripe", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/34266009?v=4", "type": "User" } ] }, { "repo": "dinosn/go_snmp_scanner", "name": "go_snmp_scanner", "owner": "dinosn", "url": "https://github.com/dinosn/go_snmp_scanner", "stars": 1, "language": "Go", "description": "Ultra fast snmp scanner on go", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nicolas Krassas", "cardId": "a8b323641d029867", "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "87d0908c8d45", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-18T14:18:16Z", "archived": false, "topContributors": [ { "login": "dinosn", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/3851678?v=4", "type": "User" } ] }, { "repo": "xdrew87/nexusintel", "name": "nexusintel", "owner": "xdrew87", "url": "https://github.com/xdrew87/nexusintel", "stars": 1, "language": "Python", "description": "NexusIntel is a modular cyber investigation and intelligence platform designed for OSINT analysts, SOC teams, red teams, and infrastructure investigators. It correlates domains, IPs, ASNs, certificate", "type": "tool", "lanes": [ "2" ], "author": { "name": "galmx", "cardId": "ae042dfcf13309bc", "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ef044ff18bcd", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2026-06-26T18:00:43Z", "archived": false, "topContributors": [ { "login": "xdrew87", "c": 18, "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4", "type": "User" }, { "login": "dependabot[bot]", "c": 8, "avatar": "https://avatars.githubusercontent.com/in/29110?v=4", "type": "Bot" } ] }, { "repo": "xdrew87/phantomtrace", "name": "phantomtrace", "owner": "xdrew87", "url": "https://github.com/xdrew87/PhantomTrace", "stars": 1, "language": "Python", "description": "PhantomTrace — open-source OSINT framework. Username, email, IP, phone, domain & social intelligence.", "type": "tool", "lanes": [ "2" ], "author": { "name": "galmx", "cardId": "ae042dfcf13309bc", "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cac208ede0f5", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-16T23:07:49Z", "archived": false, "topContributors": [ { "login": "xdrew87", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4", "type": "User" } ] }, { "repo": "xdrew87/veilstrike", "name": "veilstrike", "owner": "xdrew87", "url": "https://github.com/xdrew87/VeilStrike", "stars": 1, "language": "Python", "description": "VeilStrike is a Python OSINT tool that detects if websites are behind CDNs like Cloudflare, resolves IPv4/IPv6 addresses, identifies web servers, and uncovers origin IPs. Supports JSON output and conf", "type": "tool", "lanes": [ "2" ], "author": { "name": "galmx", "cardId": "ae042dfcf13309bc", "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5cf83525f7c7", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-23T00:32:13Z", "archived": false, "topContributors": [ { "login": "xdrew87", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/191438299?v=4", "type": "User" } ] }, { "repo": "decal/porkbind", "name": "porkbind", "owner": "decal", "url": "https://github.com/decal/porkbind", "stars": 1, "language": "C", "description": ":pig: Nameserver security scanner (ARCHIVE)", "type": "tool", "lanes": [ "2" ], "author": { "name": "Derek Callaway", "cardId": "b85bc297d944b524", "avatar": "https://avatars.githubusercontent.com/u/773264?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "289a1a6ff8ea", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-10-30T18:48:17Z", "archived": false, "topContributors": [ { "login": "decal", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/773264?v=4", "type": "User" } ] }, { "repo": "decal/uri-encodings-fuzzer", "name": "uri-encodings-fuzzer", "owner": "decal", "url": "https://github.com/decal/uri-encodings-fuzzer", "stars": 1, "language": "Perl", "description": ":smirk_cat: Fuzz a given URI with encoding techniques provided by LibWhisker a.k.a. LW2", "type": "tool", "lanes": [ "2" ], "author": { "name": "Derek Callaway", "cardId": "b85bc297d944b524", "avatar": "https://avatars.githubusercontent.com/u/773264?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "1280cc26bf2c", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-01-07T05:42:25Z", "archived": false, "topContributors": [ { "login": "decal", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/773264?v=4", "type": "User" } ] }, { "repo": "fdzdev/cve-2024-50964", "name": "cve-2024-50964", "owner": "fdzdev", "url": "https://github.com/fdzdev/CVE-2024-50964", "stars": 1, "language": null, "description": "MX Server misconfiguration", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "5f181dea3872", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-13T07:51:37Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "fdzdev/cve-2024-50962", "name": "cve-2024-50962", "owner": "fdzdev", "url": "https://github.com/fdzdev/CVE-2024-50962", "stars": 1, "language": null, "description": "A Cross-Site Scripting (XSS) vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "622fe6e47dec", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-13T07:48:30Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "fdzdev/cve-2024-50961", "name": "cve-2024-50961", "owner": "fdzdev", "url": "https://github.com/fdzdev/CVE-2024-50961", "stars": 1, "language": null, "description": "Remote attacker can access sensitive data exposed on the URL", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6bd8f2f010b8", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-11-13T07:47:02Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "fdzdev/cve-2024-33231", "name": "cve-2024-33231", "owner": "fdzdev", "url": "https://github.com/fdzdev/CVE-2024-33231", "stars": 1, "language": null, "description": "XSS Vulnerability via File Upload in Ferozo Webmail Application", "type": "tool", "lanes": [ "2" ], "author": { "name": "Facundo Fernandez", "cardId": "cf4ab1780c396f08", "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "36e13bb05022", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-10-18T22:13:32Z", "archived": false, "topContributors": [ { "login": "fdzdev", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/17630462?v=4", "type": "User" } ] }, { "repo": "random-robbie/resilient-url-scanner", "name": "resilient-url-scanner", "owner": "random-robbie", "url": "https://github.com/random-robbie/Resilient-URL-Scanner", "stars": 1, "language": "Shell", "description": "Resilient URL Scanner", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c4f9615cc48b", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-24T20:56:59Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" } ] }, { "repo": "random-robbie/ht-mega", "name": "ht-mega", "owner": "random-robbie", "url": "https://github.com/random-robbie/ht-mega", "stars": 1, "language": null, "description": "\"HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation\"", "type": "tool", "lanes": [ "2" ], "author": { "name": "Random Robbie", "cardId": "d356a8808530882c", "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "0ba53770dbe3", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2023-07-14T13:19:36Z", "archived": false, "topContributors": [ { "login": "random-robbie", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/4902869?v=4", "type": "User" } ] }, { "repo": "bin3xish477/injectcollaboratoreverywhere", "name": "injectcollaboratoreverywhere", "owner": "bin3xish477", "url": "https://github.com/bin3xish477/InjectCollaboratorEverywhere", "stars": 1, "language": "Java", "description": "Burp Suite extension that allows injecting a Collaborator payload in relevant HTTP headers and parameters.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Rodriguez", "cardId": "d53200790bbf6dc2", "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "cb3e6903887e", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2024-09-26T04:08:06Z", "archived": false, "topContributors": [ { "login": "bin3xish477", "c": 14, "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4", "type": "User" } ] }, { "repo": "bin3xish477/malware-executor", "name": "malware-executor", "owner": "bin3xish477", "url": "https://github.com/bin3xish477/malware-executor", "stars": 1, "language": "Go", "description": "Executes malware to test Antivirus prevention rate", "type": "tool", "lanes": [ "2" ], "author": { "name": "Alex Rodriguez", "cardId": "d53200790bbf6dc2", "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9c277cb85e88", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2021-09-20T23:00:47Z", "archived": false, "topContributors": [ { "login": "bin3xish477", "c": 13, "avatar": "https://avatars.githubusercontent.com/u/44281620?v=4", "type": "User" } ] }, { "repo": "mordavid/pre2kfromdcsync", "name": "pre2kfromdcsync", "owner": "mordavid", "url": "https://github.com/MorDavid/Pre2KFromDCSync", "stars": 1, "language": "Python", "description": "Pre2KfromDCSync detects machine accounts with Pre-Windows 2000 passwords and outputs the account name, stored NT hash, and potential password from DCSync output.", "type": "tool", "lanes": [ "2" ], "author": { "name": "Mor David", "cardId": "e146f763bf4ff0fc", "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "70f66f56f0a5", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 2, "contributors": [], "pushedAt": "2025-01-05T07:01:20Z", "archived": false, "topContributors": [ { "login": "MorDavid", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/24622066?v=4", "type": "User" }, { "login": "YuvalAsr", "c": 1, "avatar": "https://avatars.githubusercontent.com/u/112876687?v=4", "type": "User" } ] }, { "repo": "jassics/agentscanner", "name": "agentscanner", "owner": "jassics", "url": "https://github.com/jassics/agentscanner", "stars": 1, "language": "Python", "description": "Static security scanner for Claude Code configuration — settings, permissions, hooks, MCP servers, agents/subagents, skills, slash commands, and CLAUDE.md. Think Checkov / Terrascan, but for your .cla", "type": "tool", "lanes": [ "2" ], "author": { "name": "Sanjeev Jaiswal", "cardId": "f7959f6ee43651a0", "avatar": "https://avatars.githubusercontent.com/u/312391?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "80350959812d", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-07-06T11:38:43Z", "archived": false, "topContributors": [ { "login": "jassics", "c": 10, "avatar": "https://avatars.githubusercontent.com/u/312391?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-12416-cve-2026-12417", "name": "cve-2026-12416-cve-2026-12417", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-12416-CVE-2026-12417", "stars": 1, "language": "Python", "description": "Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "8e4a2d913e66", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-06-24T13:51:15Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-20182", "name": "cve-2026-20182", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-20182", "stars": 1, "language": "Python", "description": "Cisco Catalyst SD-WAN Peering Authentication Bypass", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "974810731852", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-05-26T18:32:49Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2026-0920-", "name": "cve-2026-0920-", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2026-0920-", "stars": 1, "language": "Python", "description": "LA-Studio Element Kit for Elementor <= 1.5.6.3 - Unauthenticated Privilege Escalation via Backdoor to Administrative User Creation via lakit_bkrole parameter", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4231ddbc09ca", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-18T19:44:23Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-29009", "name": "cve-2025-29009", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-29009", "stars": 1, "language": "Python", "description": "WordPress Medical Prescription Attachment Plugin for WooCommerce Plugin <= 1.2.3 is vulnerable to a high priority Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "91b9c27b9e91", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-18T10:04:55Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-15030", "name": "cve-2025-15030", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-15030", "stars": 1, "language": "Python", "description": "User Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password Reset", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3ab49d4addd5", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-04-18T10:01:13Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39459", "name": "cve-2025-39459", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39459", "stars": 1, "language": "Python", "description": "Real Estate 7 <= 3.5.2 - Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "09f881311fa0", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-02-27T02:19:27Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-13390", "name": "cve-2025-13390", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-13390", "stars": 1, "language": "Python", "description": "WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "dbf9ea884fa5", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-01-05T18:57:41Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 7, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-14440", "name": "cve-2025-14440", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-14440", "stars": 1, "language": "Python", "description": "JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "4e0d19979363", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-12-18T18:54:30Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39596", "name": "cve-2025-39596", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39596", "stars": 1, "language": "Python", "description": "Quentn WP <= 1.2.8 - Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "81ee67b11d71", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-09-27T08:02:43Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-7955", "name": "cve-2025-7955", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-7955", "stars": 1, "language": "Python", "description": "RingCentral Communications 1.5 - 1.6.8 - Missing Server‑Side Verification to Authentication Bypass via ringcentral_admin_login_2fa_verify Function", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "15acdaa6e318", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-08-28T12:22:36Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-48129", "name": "cve-2025-48129", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-48129", "stars": 1, "language": "Python", "description": " WordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light Plugin <= 2.4.37 is vulnerable to Privilege Escalation ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "618e0682edb5", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-09T01:42:02Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-5701", "name": "cve-2025-5701", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-5701", "stars": 1, "language": "Python", "description": " WordPress HyperComments Plugin <= 1.2.2 is vulnerable to Privilege Escalation ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "59e349ec0837", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-06-05T16:17:15Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-4631", "name": "cve-2025-4631", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-4631", "stars": 1, "language": "Python", "description": "Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f89b866762f0", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-31T12:05:40Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-5287", "name": "cve-2025-5287", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-5287", "stars": 1, "language": null, "description": " WordPress Likes and Dislikes Plugin <= 1.0.0 is vulnerable to SQL Injection ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "c3a390ea3d28", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-28T12:53:50Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-3604", "name": "cve-2025-3604", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-3604", "stars": 1, "language": "Python", "description": "Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Account Takeover", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "03800b893fd8", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-05-06T01:56:14Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39538", "name": "cve-2025-39538", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39538", "stars": 1, "language": "Python", "description": "WordPress WP-Advanced-Search <= 3.3.9.3 - Arbitrary File Upload Vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "ae72b0b612a7", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-30T17:38:06Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-39601", "name": "cve-2025-39601", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-39601", "stars": 1, "language": null, "description": "WordPress Custom CSS, JS & PHP plugin <= 2.4.1 - CSRF to RCE vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "73995f0b5663", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-16T15:12:49Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-32579", "name": "cve-2025-32579", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-32579", "stars": 1, "language": "Python", "description": " WordPress Sync Posts Plugin <= 1.0 is vulnerable to Arbitrary File Upload ", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "935733325d0f", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-14T15:37:46Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 8, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-32118", "name": "cve-2025-32118", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-32118", "stars": 1, "language": "Python", "description": "WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.13 - Remote Code Execution (RCE) vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "6b553108fd27", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-04-05T08:00:49Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 6, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2024-9756", "name": "cve-2024-9756", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2024-9756", "stars": 1, "language": "Python", "description": "Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "3379cfe61744", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:31:40Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 5, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-28915", "name": "cve-2025-28915", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-28915", "stars": 1, "language": "Python", "description": "WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "414fdf413abd", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:31:27Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2024-10673", "name": "cve-2024-10673", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2024-10673", "stars": 1, "language": "Python", "description": " Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "df254fa5735d", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:31:03Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2024-30485", "name": "cve-2024-30485", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2024-30485", "stars": 1, "language": "Python", "description": "WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation/Activation vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "a4f1974e7f09", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:30:53Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 3, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "nxploited/cve-2025-25101", "name": "cve-2025-25101", "owner": "nxploited", "url": "https://github.com/Nxploited/CVE-2025-25101", "stars": 1, "language": null, "description": "WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability", "type": "tool", "lanes": [ "2" ], "author": { "name": "Nxploited", "cardId": "f840702fcc151361", "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "9ddca5296cb3", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2025-03-29T20:30:19Z", "archived": false, "topContributors": [ { "login": "Nxploited", "c": 4, "avatar": "https://avatars.githubusercontent.com/u/188819918?v=4", "type": "User" } ] }, { "repo": "rek7/ip-range-scanner", "name": "ip-range-scanner", "owner": "rek7", "url": "https://github.com/rek7/ip-range-scanner", "stars": 1, "language": "C++", "description": "", "type": "tool", "lanes": [ "2" ], "author": { "name": "Raphael Karger", "cardId": "fa7144af44745e48", "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "f9b5da5e004c", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2019-06-23T23:30:35Z", "archived": false, "topContributors": [ { "login": "rek7", "c": 2, "avatar": "https://avatars.githubusercontent.com/u/25335191?v=4", "type": "User" } ] }, { "repo": "seifreed/tlsh-rs", "name": "tlsh-rs", "owner": "seifreed", "url": "https://github.com/seifreed/tlsh-rs", "stars": 1, "language": "Rust", "description": "Pure Rust TLSH for crates, services, malware pipelines, and similarity analysis", "type": "tool", "lanes": [ "2" ], "author": { "name": "Marc Rivero (Seifreed)", "cardId": "fe0da36ac60fb382", "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4" }, "referencedBy": [], "referencedCount": 0, "id": "739a2267fff8", "score": 8, "signals": { "cited": false, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2026-03-09T11:25:04Z", "archived": false, "topContributors": [ { "login": "seifreed", "c": 9, "avatar": "https://avatars.githubusercontent.com/u/1843119?v=4", "type": "User" } ] }, { "repo": "p1kk/vuln", "name": "vuln", "owner": "p1kk", "url": "https://github.com/p1Kk/vuln", "stars": 3, "language": null, "description": "", "type": "tool", "lanes": [ "1" ], "author": { "name": "p1kk", "cardId": null }, "referencedBy": [ { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42886/", "title": "CVE-2021-42886: TOTOLINK EX1200T Information disclosure vulnerability", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42889/", "title": "CVE-2021-42889: Access Points information leak", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42890/", "title": "CVE-2021-42890: Hostime Remote Command Injection", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42887/", "title": "CVE-2021-42887: TOTOLINK EX1200T LOGIN BYPASS", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42888/", "title": "CVE-2021-42888: TOTOLINK EX1200T Remote Command Injection", "person": "Zer0verflow" }, { "url": "https://zeyadazima.com/iot%20exploitation/CVE_2021_42885/", "title": "CVE-2021-42885: deviceMac Remote Command Injection", "person": "Zer0verflow" } ], "referencedCount": 6, "id": "c0feee8bfb3d", "score": 4, "signals": { "cited": true, "bothLanes": false, "publishesTradecraft": false, "speaksAtConferences": false, "notableCompany": false, "c2Framework": false, "canonicalArsenal": false }, "distinctOperators": 0, "adoptionOperators": 0, "mentionDistinct": 0, "contributorCount": 1, "contributors": [], "pushedAt": "2022-07-08T15:52:08Z", "archived": false, "topContributors": [ { "login": "p1Kk", "c": 19, "avatar": "https://avatars.githubusercontent.com/u/50310686?v=4", "type": "User" } ] } ] }