NilangaPerera

C2_INFRA_WORKSHOP_DEFCON32_RED_TEAM_VILLAGE

C2 Infrastructure Automation

OST-C2-Spec

Open Source C&C Specification

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

Evilginx-Phishing-Infra-Setup

Evilginx Phishing Engagement Infrastructure Setup Guide

ZDEHASHED

Invoke-ADEnum

Automate Active Directory Enumeration

Learning-EDR-and-EDR_Evasion

I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

shells

Script for generating revshells

physsec-methodology

A public, open source physical security methodology

CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

BobTheSmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

Payload-Generator

An aggressor script that can help automate payload building in Cobalt Strike

Nim-RunPE

A Nim implementation of reflective PE-Loading from memory

NimGetSyscallStub

Get fresh Syscalls from a fresh ntdll.dll copy

OffensiveCpp

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.

LinkedInDumper

Python 3 script to dump/scrape/extract company employees from LinkedIn API

Nimalathatep

Nim Payload Generation

Frida-Labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Hacking-Windows

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

NetExec

The Network Execution Tool

LEAKEY

LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services.

InfoSec-Black-Friday

All the deals for InfoSec related software/tools this Black Friday

cURL_for_OSINT

cURL Tool Usage for OSINT (Open-Source Intelligence)

OffensiveGo

Golang weaponization for red teamers.

honeypots-detection

Nuclei templates for honeypots detection.

waf-bypass

Check your WAF before an attacker does