5M7X

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

movfuscator

The single instruction C compiler

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

DeathStar

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive TTPs.

HiddenDesktop

HVNC for Cobalt Strike

vulnserver

Vulnerable server used for learning software exploitation

Blackout

kill anti-malware protected processes ( BYOVD) (Microsoft Won )

Whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.

BlueHound

BlueHound - pinpoint the security issues that actually matter

ADCSKiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

PPLFault

CVE_Prioritizer

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

Chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

Ransomchats

hades

Go shellcode loader that combines multiple evasion techniques

D1rkLdr

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

EarthWorm

Tool for tunnel

red-team-scripts

A collection of red teaming and adversary emulation related tools, scripts, techniques, notes, etc

koadic

zerosum0x0's Koadic

MITM_Intercept

A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.

GregsBestFriend

GregsBestFriend process injection code created from the White Knight Labs Offensive Development course

Custom-BloodHound-Queries

Binary-files

EarthWorm/Termite 停止更新

NamedPipePTH

Pass the Hash to a named pipe for token Impersonation

build-anywhere

Scripts for building compilers that run anywhere, which build things that run anywhere

ntlmrelayx.py_to_exe

SPECTR3

Forensic tool for acquisition, triage and analysis of remote block devices via iSCSI protocol.

TokenElevation

Token Elevation to authorized user as SYSTEM or Domain Admins

LOI-Bins

Abusing Remote Windows SMB Shares for Fun and Pen Testing

PortExploit

Commands for Pentesting by ports / services for the project PortExploit