Beast code in Giters

RobSauce's starred repositories

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Language:GoBSD-3-Clause10130 289 847

unredacter

Never ever ever use pixelation as a redaction technique

Language:TypeScriptGPL-3.07605 67 28

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

Language:GoMIT2677 77 68

the_cyber_plumbers_handbook

Free copy of The Cyber Plumber's Handbook - The definitive guide to Secure Shell (SSH) tunneling, port redirection, and bending traffic like a boss.

NOASSERTION2519 36 4

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

Language:PythonMIT2094 600

PetitPotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

Language:C1745 28 6

mubeng

An incredibly fast proxy checker & IP rotator with ease.

Language:GoApache-2.01506 37 57

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

Language:C1416 37 5

xencrypt

A PowerShell script anti-virus evasion tool

Language:PowerShellGPL-3.01039 380

SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

Language:Go988 18 14

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

Language:PythonGPL-3.0846 16 36

KrbRelay

Framework for Kerberos relaying

Language:C#818 16 13

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

Language:GoMIT732 22 21

SharpChromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

Language:C#660 19 12

MoveKit

Cobalt Strike kit for Lateral Movement

Language:C#GPL-3.0638 18 1

Go365

An Office365 User Attack Tool

Language:GoMIT612 23 7

EvilSelenium

EvilSelenium is a tool that weaponizes Selenium to attack Chromium based browsers.

Language:C#580 12 4

SharpMove

.NET Project for performing Authenticated Remote Execution

Language:C#GPL-3.0369 110

Timeroast

Timeroasting scripts by Tom Tervoort

Language:PythonMIT170 4 3

assless-chaps

Crack MSCHAPv2 challenge/responses quickly using a database of NT hashes

Language:Python119 11 1

proxyshell

Proof of Concept for CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207

Language:Python106 30

LinkedinMama

Linkedin Employee Profile Scrapper

Language:PythonMIT62 3 1

gogophish

Fly into Gophish with One Click (Infra Automation)

Language:ShellMIT41 5 1

BlackBird

Subdomain Enumeration and Scanner

Language:Shell33 20

dauthi

dauthi is a tool that takes advantage of API functionality across a variety of MDM solutions to perform user enumeration and single-factor authentication attacks. Additionally, the framework offers authentication attacks and enumeration functionality for O365 and MFA portals.

Language:GoMIT31 10

ROBSAUCE