R

redteaming-tool

Sam The Butcher - Raw Disk Credential Extractor for Windows NTFS - Sam The Butcher is a single-file, standalone Windows executable that extracts credential hives (SAM, SYSTEM, SECURITY) and other locked files by reading the raw NTFS disk directly — bypassing file locks, EDR minifilters, and standard Windows access controls.

BloodyMary is an educational tool (trojan-virus or Ransomware) for training cybersecurity specialists, simulating realistic phishing attacks with social engineering elements. This project was created to raise awareness about cyber threats and demonstrate the consequences of running suspicious files.

Open-source scanner called FleaMarket that finds exposed API keys in fresh GitHub repos. In a recent scan, it discovered live Google/Gemini keys in public .env files

RinHit - macOS ecosystem reconnaissance framework. Collects artifacts from the Apple ecosystem to build timelines of network activity, cross-device identity, and physical location correlation.

Red Team AI Benchmark: Evaluating LLMs for authorized offensive-security tasks. Red Team AI Benchmark is a CLI model-evaluation benchmark. It measures how LLMs understand and respond to red-team questions and security scenarios; it is not a tool for carrying out those activities. Version 2 uses a rubric-based dataset instead of judging answers only against one golden response.

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is intended solely for authorized security research, authorized penetration testing, and defensive analysis. Use on systems you own or have explicit written permission to test. Unauthorized access to computer systems is illegal.

GhostBuilder is a powerful payload generator tool designed for ethical hacking, red-teaming, penetration testing, and security research

PhishNetEngine is a powerful credential harvesting engine for making phishing tools - provides server, tunneling, data capture, and admin panel. Just add your website files

VALAK is a powerful ESP32-based tool that performs real Evil Twin attacks by creating identical clones of existing WiFi networks.

LocHawk is a powerful geolocation phishing tool that tricks targets into revealing their exact GPS location, device information, and network details through a seemingly harmless webpage.

CamHawk is a camera phishing tool that tricks users into granting webcam access. Once permission is granted, the tool captures images from the webcam and sends them to your machine.

ExploitHawk is a powerful terminal-based exploit search tool for ethical hacking and red team operations, designed for Linux distributions(Debian, Rhel, Arch)