offensive-security-projects

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

A lightweight Command and Control (C2) framework built for offensive security research and red teaming (Post Exploitation).

AI-powered pentesting framework with automated recon and exploitation. Multi-source subdomain discovery, active vuln testing (XSS/SQLi/SSRF/IDOR), AI-driven payload generation, local inference, structured reporting. For pentesters and bug bounty hunters.

Turn Tails OS into a ghost that bites. 50+ pentest tools installed into RAM via interactive menu — Tor-routed, zero persistence, vanishes on reboot.

NetLoader-X is a defensive load simulation framework designed to safely study server behavior under stress without generating real network traffic.

Open-source cyber range for offensive security training — isolated labs, live attack detection, and production-grade auth built from scratch

This is a simple Python-based keylogger built for educational and ethical hacking purposes. It captures keystrokes system-wide on macOS, logs them to a local file, and optionally sends them to a Discord webhook in real time.

🔐 **Password Complexity Checker & Generator** This tool helps you analyze password strength 🔍 and generate secure, random passwords 🎲. It ensures your passwords are tough to crack 💪 by checking for uppercase, lowercase, digits, special characters, and spaces.

AI autonomous penetration testing + network forensics platform. Groq-powered, 100% free. One command full pentest

A lightweight, modular post-exploitation framework for Linux and Windows that provides reverse shell session management, cross-platform plugins, SOCKS5 pivoting, in-memory payload execution, resumable file transfers with SHA-256 verification, and structured per-session logging for authorized security research and penetration testing.

Lightweight Active Directory attack surface analyzer that extracts actionable findings from BloodHound data.

Cloud-Security (Red Team)

Nemesis is an autonomous AI-driven pentesting agent that turns LLMs into skilled security testers, executing commands in an isolated Docker container and documenting findings with full context.

Offensive security write-ups, CTF walkthroughs and tooling breakdowns — by 0xK4iros.

A exploit designed to reboot a linux server / system. Sandworm only works on 32-bit linux systems. it looks for riscv32le, calling for a system reboot.

🔐 Inject API credentials securely into unmodified code via a transparent Envoy proxy, protecting sensitive data during AI agent interactions.

🔍 Extract and structure security vulnerability data from unstructured text with ease using the lightweight Python package, vuln-structure.

This repository serves as a portfolio of my work in computer science and offensive security.