All

31 repositories

weblink
Public
WebLink Bridge for Browser-Space HTTP comms Offload
C++
•1•0•0•0•Updated Mar 24, 2026Mar 24, 2026
raining-in-the-clouds
Public
1•1•0•0•Updated Sep 17, 2025Sep 17, 2025
cazt
Public
Cloud AuthZ Trainer - A a simulator of cloud-provider responsible REST APIs. It includes a lab manual for getting hands-on practice with how to attack authoriza…
Python
•
GNU Affero General Public License v3.0
•2•4•0•0•Updated Jun 27, 2025Jun 27, 2025
paas-cloud-goat
Public
PaaS Cloud Goat is a simulated vulnerable Salesforce application providing hands-on experience with penetration testing of custom Salesforce applications.
Apex
•
GNU Affero General Public License v3.0
•7•8•0•0•Updated Nov 21, 2024Nov 21, 2024
npk
Public
A mostly-serverless distributed hash cracking platform
JavaScript
•169•818•10•6•Updated Apr 6, 2024Apr 6, 2024
ERC.Xdbg
Public
An Xdbg Plugin of the ERC Library.
windows csharp exploitation
windows csharp exploitation exploitation-framework x64dbg-plugin exploit-development
C#
•
MIT License
•1•26•0•0•Updated Feb 1, 2024Feb 1, 2024
Slackor
Public
A Golang implant that uses Slack as a command and control server
python golang penetration-testing
python golang penetration-testing pentest red-team remote-admin-tool c2 command-and-control penetration-testing-tools
Python
•
GNU General Public License v3.0
•108•461•4•4•Updated Feb 25, 2023Feb 25, 2023
pymetasploit3
Public
Python3 Metasploit automation library
PowerShell
•
MIT License
•2•23•0•2•Updated Dec 8, 2022Dec 8, 2022
sqlinator
Public
Automatically forward HTTP GET & POST requests to SQLMap's API to test for SQLi and XSS
plugin security xss
plugin security xss webapps mitmproxy sqlinjection
Python
•18•78•1•4•Updated Dec 8, 2022Dec 8, 2022
autorelayx
Public
Automatically perform advanced NTLM hash relay attacks
Python
•5•15•0•3•Updated Nov 4, 2022Nov 4, 2022
WinAPRS-Exploits
Public
A collection of exploits, shellcode, and tools related to CVE-2022-24702
shell wordpress
shell wordpress
Python
•
Creative Commons Zero v1.0 Universal
•0•9•0•0•Updated Apr 1, 2022Apr 1, 2022
ERC.Net
Public
A collection of tools for debugging Windows application crashes.
C#
•
GNU General Public License v3.0
•2•9•0•0•Updated Mar 14, 2022Mar 14, 2022
SOC2-guide
Public
Documenting SOC 2 tools and processes
MIT License
•21•1•0•0•Updated Jan 19, 2022Jan 19, 2022
java-deserialization-exploits
Public
A collection of curated Java Deserialization Exploits
java exploits cve
java exploits cve deserialization-rce
Python
•215•593•2•1•Updated May 16, 2021May 16, 2021
postman-integration-aws
Public
Postman Integration is an extension for burp to generate Postman collection fomat json file.
Java
•
MIT License
•10•1•0•0•Updated Apr 7, 2021Apr 7, 2021
webvulns-db
Public
Webvulns-db scripts
Python
•1•1•0•0•Updated Apr 7, 2021Apr 7, 2021
AppSec-2014-Presentation
Public
Presentation for Application Hacking 101 at AppSec 2014
4•2•0•0•Updated Apr 6, 2021Apr 6, 2021
IP-sampler
Public
Ping sweep a list of subnets then save a random % sample of the hosts that are up
Python
•7•10•0•0•Updated Apr 6, 2021Apr 6, 2021
Doozer
Public
Password cracking utility
Python
•28•54•0•0•Updated Apr 6, 2021Apr 6, 2021
Nmap-Extensions
Public
Extensions to Nmap written for the NSE
Lua
•8•5•0•0•Updated Apr 6, 2021Apr 6, 2021
HashBot
Public
IRC bot for cracking hashes
Python
•10•18•3•0•Updated Apr 6, 2021Apr 6, 2021
iOS-11.1.2-15B202-Jailbreak
Public
iOS 11.1.2 (15B202) Jailbreak
jailbreak ios11
jailbreak ios11
C
•91•438•9•0•Updated Apr 6, 2021Apr 6, 2021
AnomalousCookie
Public
Find anomalies using AnomalousCookie!
Python
•
MIT License
•6•6•0•0•Updated Apr 6, 2021Apr 6, 2021
DeathMetal
Public
Red team & penetration testing tools to exploit the capabilities of Intel AMT
Python
•
Other
•30•258•3•1•Updated Apr 6, 2021Apr 6, 2021
Git-Scrapers
Public
Collect OSINT from git repositories
github git osint
github git osint developers
Ruby
•
Other
•8•18•3•0•Updated Apr 6, 2021Apr 6, 2021
Vampire
Public
Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.
active-directory bloodhound cobalt-strike
active-directory bloodhound cobalt-strike cna aggressor
Python
•
Other
•17•78•1•0•Updated Apr 6, 2021Apr 6, 2021
LambProxy
Public
HTTP Proxy using Amazon Lambda for source IP cycling
Python
•
GNU General Public License v3.0
•0•15•0•0•Updated Apr 6, 2021Apr 6, 2021
Red-Baron
Public
Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.
security terraform infrastructure-as-code
security terraform infrastructure-as-code security-tools terraform-module red-teams
HCL
•
GNU General Public License v3.0
•263•924•9•4•Updated Apr 6, 2021Apr 6, 2021
freezeout
Public
Notes on acquiring a domain user list via kerberos
credentials bruteforce nmap
credentials bruteforce nmap kerberos msf username-checker lateral-spray
Python
•1•1•0•0•Updated Apr 6, 2021Apr 6, 2021
Empire
Public
Empire is a pure PowerShell post-exploitation agent.
PowerShell
•
BSD 3-Clause "New" or "Revised" License
•2.9k•3•0•0•Updated Nov 4, 2015Nov 4, 2015

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Coalfire Labs R&D

All

All

31 repositories

weblink

raining-in-the-clouds

cazt

paas-cloud-goat

npk

ERC.Xdbg

Slackor

pymetasploit3

sqlinator

autorelayx

WinAPRS-Exploits

ERC.Net

SOC2-guide

java-deserialization-exploits

postman-integration-aws

webvulns-db

AppSec-2014-Presentation

IP-sampler

Doozer

Nmap-Extensions

HashBot

iOS-11.1.2-15B202-Jailbreak

AnomalousCookie

DeathMetal

Git-Scrapers

Vampire

LambProxy

Red-Baron

freezeout

Empire

All

All

Repositories list

31 repositories