RedHeadSec

threadless_loader_rs

Threadless Injection Payload Toolkit

GraphRunner

A Post-exploitation Toolset for Interacting with the Microsoft Graph API

Modlishka

Modlishka. Reverse Proxy.

KnockKnock

Enumerate valid users within Microsoft Teams and OneDrive with clean output.

Sliver-PortBender

Sliver extension performing TCP redirection tasks without performing cross-process injection.

FindUncommonShares

FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE accesses.

bolus

Library for shellcode injection

CS-Remote-OPs-BOF

evilgophish

evilginx3 + gophish

E4GL30S1NT

E4GL30S1NT - Simple Information Gathering Tool

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

ocd-mindmaps

Orange Cyberdefense mindmaps

ldapnomnom

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

ldapper

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

conti_locker

Conti Locker source code

opencti

Open Cyber Threat Intelligence Platform

gjson

Get JSON values quickly - JSON parser for Go

vulnerable-AD-plus

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

iris-web

Collaborative Incident Response platform

MaliciousMacroGenerator

Malicious Macro Generator

EXOCET-AV-Evasion

EXOCET - AV-evading, undetectable, payload delivery tool

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

mal_unpack

Dynamic unpacker based on PE-sieve

poc

Proof of Concepts