0x09AL

RdpThief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

WordSteal

This script will create a POC that will steal NTML hashes from a remote computer. Do not use this for illegal purposes.The author does not keep responsibility for any illegal action you do.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

0x09al.github.io

recaptcha-phish

Phishing with a fake reCAPTCHA

C2-Tool-Collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

DFSCoerce

ms-rpc-fuzzer

Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By following this approach, a security researcher will hopefully identify interesting RPC services in such a time that would take a manual approach significantly more.

nserver

Python DNS Name Server Framework

PhishingBook

红蓝对抗：钓鱼演练资源汇总&备忘录

AttackSurfaceAnalyzer

Attack Surface Analyzer can help you analyze your operating system's security configuration for changes during software installation.

BHEU23-firmware-workshop

In this Arsenal lab session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the services in real-time.

bitlockmove

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

CertStealer

A .NET tool for exporting and importing certificates without touching disk.

chromealone

A tool to transform Chromium browsers into a C2 Implant

deda

DelegationBOF

DroppedConnection

hermes

Swift 5 macOS agent

HiddenDesktop

HVNC for Cobalt Strike

HWSyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

lsarelayx

NTLM relaying for Windows made easy

merlin

Cross-platform post-exploitation HTTP Command & Control agent written in golang

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

noPac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

poseidon

Poseidon is a Golang agent targeting Linux and macOS

reflectiveloader

A Reflective Loader for macOS

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

SharpSCCM

A C# utility for interacting with SCCM

soxy

A suite of services over Citrix, VMware Horizon and native Windows RDP.