TravisEminhizer

AFFiNE

There can be more than Notion and Miro. AFFiNE(pronounced [ə‘fain]) is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.

MHDDoS

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

Havoc

The Havoc Framework.

zeek

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Mythic

A collaborative, multi-platform, red teaming framework

Backstab

A tool to kill antimalware protected processes

pamspy

Credentials Dumper for Linux using eBPF

Cobalt-Strike-CheatSheet

Some notes and examples for cobalt strike's functionality

LOLDrivers

Living Off The Land Drivers

FilelessPELoader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

NimPlant

A light-weight first-stage C2 implant written in Nim.

3snake

Tool for extracting information from newly spawned processes

ShellcodeTemplate

An easily modifiable shellcode template for Windows x64/x86

ThreadlessInject

Threadless Process Injection using remote function hooking.

ShadowClone

Unleash the power of cloud

SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

HWSyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

OperatorsKit

Collection of Beacon Object Files (BOF) for Cobalt Strike

mule

Mule Community Edition

SQLRecon

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

RedditC2

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

CallStackMasker

A PoC implementation for dynamically masking call stacks with timers.

KillDefenderBOF

Beacon Object File PoC implementation of KillDefender

CVE-2022-3602

gatekeeper

GATEKEEPER: Inline and on-target defense

PowerDrive

A tool for de-obfuscating PowerShell scripts

injectAmsiBypass

Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.

injectEtwBypass

CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)

ContiLeaks

envmapper

PoC pentest tool to run an analysis on data captured from a target network to build an undersatding of relationships between users, groups, processes, etc.