SRJanel

terraformer

CLI tool to generate terraform files from existing infrastructure (reverse Terraform). Infrastructure to Code

RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

pcileech

Direct Memory Access (DMA) Attack Software

evil-winrm

The ultimate WinRM shell for hacking/pentesting

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

MemProcFS

MemProcFS

NetExec

The Network Execution Tool

BlueTeam-Tools

Tools and Techniques for Blue Team / Incident Response

Checklists

Red Teaming & Pentesting checklists for various engagements

Awesome-Deblurring

A curated list of resources for Image and Video Deblurring

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)

SSH-Snake

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

SysWhispers

AV/EDR evasion via direct system calls.

Certify

Active Directory certificate abuse.

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

Hunting-Queries-Detection-Rules

KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.

VXUG-Papers

Research code & papers from members of vx-underground.

BestEdrOfTheMarket

Little user-mode AV/EDR evasion lab for training & learning purposes

dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

gargoyle

A memory scanning evasion technique

Bloodhound-Custom-Queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

OSCP

VolWeb

A centralized and enhanced memory analysis platform

DeepSleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

SharpReflectivePEInjection

reflectively load and execute PEs locally and remotely bypassing EDR hooks

VanillaWindowsReference

A repo that contains recursive directory listings (using PowerShell) of a vanilla (clean) install of every Windows OS version to compare and see what's been added with each update. Use these CSVs to create your own known good hash sets!

PowerShellWatchlist

List of PowerShell commands and commandlets that should be in your Powershel watchlist

mordor

Re-play Adversarial Techniques