PfiatDe

cf-proxy

Proxy requests through Cloudflare workers

AWS-Pentesting-Framework

Representing a reasonable and up-to-date framework for penetration testing and red teaming for Amazon Web Services (AWS) environments

Spartacus

Spartacus DLL/COM Hijacking Toolkit

Crassus

KrbRelay

Framework for Kerberos relaying

cheatsheets

Collection of knowledge about information security

presentations

various slides and presentations I've worked on

Cybersecurity-Tradecraft

A repo to support the book

CVE-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

PSPKIAudit

PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.

scrapli

Fast, flexible, sync/async, Python 3.7+ screen scraping client specifically for network devices

Kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

AppSecEzine

AppSec Ezine Public Repository.

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels

dive

A tool for exploring each layer in a docker image

volatility3

Volatility 3.0 development

Priv2Admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

SharpProxyLogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

SharpRDP

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

pwndrop

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

krbrelayx

Kerberos unconstrained delegation abuse toolkit

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

FileTest

Source code for File Test - Interactive File System Test Tool

Alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

Powermad

PowerShell MachineAccountQuota and DNS exploit tools

Farmer

InveighZero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

UnhookMe

UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red Teams malware

at-ps

Adversary Tactics - PowerShell Training