One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️
A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).
AI-powered pentesting framework with automated recon and exploitation. Multi-source subdomain discovery, active vuln testing (XSS/SQLi/SSRF/IDOR), AI-driven payload generation, local inference, structured reporting. For pentesters and bug bounty hunters.
A lightweight, modular post-exploitation framework for Linux and Windows. Manages interactive reverse/bind shell sessions over TCP/TLS/mTLS and provides plugins for enumeration, execution, pivoting, and operational tasks without deploying a separate agent or dropping enumeration binaries on target.
An authorization-first, policy-governed red-team operations platform that turns scoped security testing into safe, auditable, and evidence-ready workflows
Turn Tails OS into a ghost that bites. 50+ pentest tools installed into RAM via interactive menu — Tor-routed, zero persistence, vanishes on reboot.
NetLoader-X is a defensive load simulation framework designed to safely study server behavior under stress without generating real network traffic.
Open-source cyber range for offensive security training — isolated labs, live attack detection, and production-grade auth built from scratch
AI autonomous penetration testing + network forensics platform. Groq-powered, 100% free. One command full pentest
This is a simple Python-based keylogger built for educational and ethical hacking purposes. It captures keystrokes system-wide on macOS, logs them to a local file, and optionally sends them to a Discord webhook in real time.
🔐 **Password Complexity Checker & Generator** This tool helps you analyze password strength 🔍 and generate secure, random passwords 🎲. It ensures your passwords are tough to crack 💪 by checking for uppercase, lowercase, digits, special characters, and spaces.
Lightweight Active Directory attack surface analyzer that extracts actionable findings from BloodHound data.
Cloud-Security (Red Team)
Offensive security write-ups, CTF walkthroughs and tooling breakdowns — by 0xK4iros.
A exploit designed to reboot a linux server / system. Sandworm only works on 32-bit linux systems. it looks for riscv32le, calling for a system reboot.
🔐 Inject API credentials securely into unmodified code via a transparent Envoy proxy, protecting sensitive data during AI agent interactions.
🔍 Extract and structure security vulnerability data from unstructured text with ease using the lightweight Python package, vuln-structure.
This repository serves as a portfolio of my work in computer science and offensive security.
To associate your repository with the offensive-security-projects topic, visit your repo's landing page and select "manage topics."