One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).
Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.
Browser-Based Clickfix Generator
An authorization-first, policy-governed red-team operations platform that turns scoped security testing into safe, auditable, and evidence-ready workflows
Turn Tails OS into a ghost that bites. 50+ pentest tools installed into RAM via interactive menu — Tor-routed, zero persistence, vanishes on reboot.
NetLoader-X is a defensive load simulation framework designed to safely study server behavior under stress without generating real network traffic.
Open-source cyber range for offensive security training — isolated labs, live attack detection, and production-grade auth built from scratch
AI autonomous penetration testing + network forensics platform. Groq-powered, 100% free. One command full pentest
This is a simple Python-based keylogger built for educational and ethical hacking purposes. It captures keystrokes system-wide on macOS, logs them to a local file, and optionally sends them to a Discord webhook in real time.
🔐 **Password Complexity Checker & Generator** This tool helps you analyze password strength 🔍 and generate secure, random passwords 🎲. It ensures your passwords are tough to crack 💪 by checking for uppercase, lowercase, digits, special characters, and spaces.
Lightweight Active Directory attack surface analyzer that extracts actionable findings from BloodHound data.
Cloud-Security (Red Team)
Offensive security write-ups, CTF walkthroughs and tooling breakdowns — by 0xK4iros.
🔐 Inject API credentials securely into unmodified code via a transparent Envoy proxy, protecting sensitive data during AI agent interactions.
A exploit designed to reboot a linux server / system. Sandworm only works on 32-bit linux systems. it looks for riscv32le, calling for a system reboot.
End-to-end Red Team attack chain from SMBv1 exploitation to Active Directory domain compromise (lab write-up)
🔍 Extract and structure security vulnerability data from unstructured text with ease using the lightweight Python package, vuln-structure.
This repository serves as a portfolio of my work in computer science and offensive security.
To associate your repository with the offensive-security-projects topic, visit your repo's landing page and select "manage topics."